
Error: rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.mft
File: KVh06fLX2sBaou-4MJ96CvRwQNo.mft (raw, json)
Hash identifier: G5Oz1DEkx7eg3E1xQbYX6H2c5EgScaqYoUZ6Kuovc28=
Subject key identifier: 70:1C:43:F1:B8:63:C9:71:41:B9:EA:39:CD:74:BF:24:63:AC:AF:E3
Authority key identifier: 29:58:74:E9:F2:D7:DA:C0:5A:A2:EF:B8:30:9F:7A:0A:F4:70:40:DA
Certificate issuer: /CN=F36B4949AF/serialNumber=295874E9F2D7DAC05AA2EFB8309F7A0AF47040DA
Certificate serial: A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KVh06fLX2sBaou-4MJ96CvRwQNo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.mft
Manifest number: A1
Signing time: Sat 03 Oct 2026 05:35:24 +0000
Manifest this update: Sat 03 Oct 2026 05:35:23 +0000
Manifest next update: Mon 05 Oct 2026 05:35:23 +0000
Files and hashes: 1: KVh06fLX2sBaou-4MJ96CvRwQNo.crl (hash: zOEOI8TQxvCQy57Y2fdx0K0PK1NJoeuQaO1kc3Ptbx0=)
2: 3A43E14442D111F1B4A897ADCE1D38B0.roa (hash: 6ccqNU9fvFt23MyoJpiG4IaGTHsOHYm+SFX3Z5h56wk=)
3: 703270A442D111F1A365B1AFCE1D38B0.roa (hash: vBku1e71K8PuTkxq08u9w1tQTqoYFX1URBsOiKOVWvY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.mft
rsync://rpki.afrinic.net/repository/afrinic/KVh06fLX2sBaou-4MJ96CvRwQNo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4949AF, serialNumber=295874E9F2D7DAC05AA2EFB8309F7A0AF47040DA
Validity
Not Before: Oct 3 05:35:23 2026 GMT
Not After : Oct 5 05:35:23 2026 GMT
Subject: CN=6ac0941c-3cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:52:12:51:f3:ba:fb:b4:b1:f6:96:c5:e0:
15:18:53:14:70:9e:24:09:15:77:bb:c6:3d:9c:0e:
0e:bb:fd:78:f9:db:4e:e7:49:86:a5:77:43:eb:5a:
12:62:5d:4c:e3:75:8d:70:9c:fd:2a:d1:72:48:bd:
d4:8c:a2:ff:3d:ab:97:cf:02:b4:66:66:7e:ff:ff:
78:bb:a0:8b:5e:8e:a3:8a:8a:1b:3f:3d:f7:bf:ed:
67:72:b7:1e:01:65:85:44:48:fe:19:52:3c:71:c5:
35:e8:9d:26:67:a1:ea:fb:f0:40:42:49:08:26:ed:
a6:36:71:a9:ba:0e:5d:23:7d:6b:34:f5:9a:71:53:
b9:a4:f9:42:59:28:29:d0:93:4a:f9:59:91:90:8c:
8c:ba:7e:64:af:ba:31:5f:55:fd:ff:fe:6a:1f:51:
1f:b5:31:14:82:22:d8:2d:09:3a:02:f7:ee:36:d9:
7c:b7:9d:9c:2d:0b:94:d1:6a:85:2f:a3:9f:d2:8b:
0f:f8:00:5e:61:17:af:9e:52:a7:04:03:87:86:0e:
8b:98:6f:15:2d:04:4f:03:82:96:c1:de:3c:2e:4f:
13:1d:ec:25:dc:27:15:87:7f:29:9c:11:2e:2d:57:
8c:27:7a:82:98:66:ad:8f:ca:ae:1b:84:77:7c:3b:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:43:F1:B8:63:C9:71:41:B9:EA:39:CD:74:BF:24:63:AC:AF:E3
X509v3 Authority Key Identifier:
keyid:29:58:74:E9:F2:D7:DA:C0:5A:A2:EF:B8:30:9F:7A:0A:F4:70:40:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KVh06fLX2sBaou-4MJ96CvRwQNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4949/854F78DE42D011F18D6F7EA9CE1D38B0/KVh06fLX2sBaou-4MJ96CvRwQNo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:18:2d:44:b3:a5:14:a8:c3:d2:68:e6:02:dd:d1:90:d3:
87:e2:88:6c:b8:f8:97:89:17:a9:fa:72:3c:5c:57:bc:91:15:
6d:19:b6:ff:ec:5d:bc:11:49:cc:2d:e7:e0:b3:8b:b5:b6:5f:
ec:e6:80:61:af:3b:e5:69:52:0c:22:a4:3e:20:2c:58:9f:6d:
4b:9a:63:4e:ba:fc:f3:32:6d:17:cc:a9:89:f0:3e:45:ec:ac:
18:db:16:7a:62:7e:28:aa:fd:b3:87:99:8a:2a:78:6c:83:22:
cd:7a:4f:68:94:50:78:34:26:a9:c0:29:ee:12:95:29:17:1c:
11:72:da:4d:93:d7:a5:ed:a5:60:4a:01:96:4f:3f:42:03:00:
7d:60:d0:b6:b9:58:90:e4:07:65:f5:7b:e7:79:c7:94:c0:08:
7b:a6:8b:ab:b9:f1:b6:1c:d9:c2:43:8d:47:13:a0:4f:9e:d9:
da:3e:f8:4b:e1:6f:24:78:55:a1:5e:c6:0f:0a:de:27:d1:dc:
75:ca:7d:e2:95:61:d5:d4:8f:3c:c1:3d:3f:b2:f5:87:c4:1f:
52:f4:a6:cf:39:8d:75:06:d6:3d:16:a5:84:42:e0:ea:d0:ca:
21:e5:1e:d0:e8:bc:2b:61:ed:03:5f:17:fa:9d:53:7d:b7:cd:
99:1c:2f:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5NDlBRjExMC8GA1UEBRMoMjk1ODc0RTlGMkQ3REFDMDVBQTJFRkI4MzA5RjdB
MEFGNDcwNDBEQTAeFw0yNjEwMDMwNTM1MjNaFw0yNjEwMDUwNTM1MjNaMBgxFjAU
BgNVBAMTDTZhYzA5NDFjLTNjZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDewFISUfO6+7Sx9pbF4BUYUxRwniQJFXe7xj2cDg67/Xj5207nSYald0Pr
WhJiXUzjdY1wnP0q0XJIvdSMov89q5fPArRmZn7//3i7oItejqOKihs/Pfe/7Wdy
tx4BZYVESP4ZUjxxxTXonSZnoer78EBCSQgm7aY2cam6Dl0jfWs09ZpxU7mk+UJZ
KCnQk0r5WZGQjIy6fmSvujFfVf3//mofUR+1MRSCItgtCToC9+422Xy3nZwtC5TR
aoUvo5/Siw/4AF5hF6+eUqcEA4eGDouYbxUtBE8DgpbB3jwuTxMd7CXcJxWHfymc
ES4tV4wneoKYZq2Pyq4bhHd8O/+XAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcBxD
8bhjyXFBueo5zXS/JGOsr+MwHwYDVR0jBBgwFoAUKVh06fLX2sBaou+4MJ96CvRw
QNowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OTQ5Lzg1NEY3OERFNDJEMDExRjE4RDZGN0VBOUNFMUQzOEIwL0tWaDA2
ZkxYMnNCYW91LTRNSjk2Q3ZSd1FOby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tWaDA2ZkxYMnNCYW91LTRNSjk2Q3ZSd1FOby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ5NDkvODU0Rjc4REU0MkQwMTFGMThENkY3RUE5Q0Ux
RDM4QjAvS1ZoMDZmTFgyc0Jhb3UtNE1KOTZDdlJ3UU5vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP+RgtRLOlFKjD0mjmAt3RkNOH4ohs
uPiXiRep+nI8XFe8kRVtGbb/7F28EUnMLefgs4u1tl/s5oBhrzvlaVIMIqQ+ICxY
n21LmmNOuvzzMm0XzKmJ8D5F7KwY2xZ6Yn4oqv2zh5mKKnhsgyLNek9olFB4NCap
wCnuEpUpFxwRctpNk9el7aVgSgGWTz9CAwB9YNC2uViQ5Adl9XvneceUwAh7pour
ufG2HNnCQ41HE6BPntnaPvhL4W8keFWhXsYPCt4n0dx1yn3ilWHV1I88wT0/svWH
xB9S9KbPOY11BtY9FqWEQuDq0Moh5R7Q6LwrYe0DXxf6nVN9t82ZHC/t
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:57:29 2026 by rpki-client