
Error: rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
File: 3qpe4dcNYY7NkB2u26jIYjuvyv4.mft (raw, json)
Hash identifier: BDcPoRcW7XpFIB+i0yYu/VEgDNcCtC+exlFsB1U5nCk=
Subject key identifier: 2C:2A:C8:42:48:66:64:1F:97:2E:10:6E:0E:D4:46:EB:B5:55:2C:BA
Authority key identifier: DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
Certificate issuer: /CN=F36B506BAF/serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
Certificate serial: 0525
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
Manifest number: 0523
Signing time: Tue 22 Sep 2026 03:20:26 +0000
Manifest this update: Tue 22 Sep 2026 03:20:26 +0000
Manifest next update: Thu 24 Sep 2026 03:20:26 +0000
Files and hashes: 1: 3qpe4dcNYY7NkB2u26jIYjuvyv4.crl (hash: lZlR7rKiCoTdgC8ZW4HIVlx+q+oIteYlAfgIPyKtcpg=)
2: E2E14C2019A411F1874D809DDAE4EC9C.roa (hash: Gyz75bHFBI+885Dp50htnig2U7RWk+zk570MtVkAIvA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1317 (0x525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B506BAF, serialNumber=DEAA5EE1D70D618ECD901DAEDBA8C8623BAFCAFE
Validity
Not Before: Sep 22 03:20:26 2026 GMT
Not After : Sep 24 03:20:26 2026 GMT
Subject: CN=6ab1f3fa-419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e6:93:4f:63:d4:e1:e3:06:a9:bb:7a:18:9d:
92:f4:e1:d7:4b:9e:a4:53:ba:7e:0f:35:34:57:09:
b4:bc:1f:f1:50:c3:5b:e8:c2:b4:8b:06:11:83:41:
cb:19:40:7f:db:7b:b3:7f:8a:80:2b:5b:d8:c0:6a:
5a:5f:6a:d6:82:34:de:42:9f:c3:58:4c:7a:45:61:
0f:9b:b2:36:54:70:ed:7b:27:aa:42:76:93:2c:13:
95:3e:e5:c0:2d:06:a4:71:87:28:cc:bd:cc:17:46:
f8:59:be:78:28:a4:6e:20:cd:44:45:90:c7:dd:92:
0a:47:2a:7e:f9:0b:2a:2c:98:a8:70:86:c4:da:63:
cb:30:c9:bc:69:8b:76:51:fb:af:22:21:9c:15:23:
60:35:fe:9b:da:10:be:44:36:24:3d:32:78:3d:c9:
b2:c9:60:9d:ca:29:a8:4f:35:02:47:40:37:2a:f1:
6c:ca:46:c1:b4:1a:39:17:42:3e:48:82:a6:7e:66:
83:9f:c5:30:67:49:95:1f:73:01:3d:63:0d:52:dc:
0c:5a:ba:db:df:96:7b:d1:c4:13:d1:d2:02:9b:3c:
f3:e5:85:02:b0:21:85:f9:cf:ef:78:a3:50:6c:f0:
f4:c5:b1:90:3b:55:23:2e:0a:68:71:35:7a:04:78:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:C8:42:48:66:64:1F:97:2E:10:6E:0E:D4:46:EB:B5:55:2C:BA
X509v3 Authority Key Identifier:
keyid:DE:AA:5E:E1:D7:0D:61:8E:CD:90:1D:AE:DB:A8:C8:62:3B:AF:CA:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3qpe4dcNYY7NkB2u26jIYjuvyv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B506B/FFEF4F82CA2F11ED8402B4ABF1222468/3qpe4dcNYY7NkB2u26jIYjuvyv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5f:78:3c:c5:18:ba:70:f6:08:98:0e:4f:3c:1d:97:29:0f:
c7:c8:09:ee:a0:12:b9:87:71:6a:08:56:61:e3:f4:7c:f9:c5:
cd:35:4b:88:7b:8e:63:d3:1c:7a:c1:58:73:8a:b2:b7:f9:aa:
b2:fc:ff:c6:70:14:cb:9f:08:8c:92:1e:7e:67:33:fd:d9:9b:
91:6b:58:44:19:f7:36:ae:e1:7c:04:a7:9d:90:35:e9:2f:4c:
0e:27:ba:73:11:93:b9:40:d4:49:c2:0f:88:3a:5f:4d:d3:39:
24:de:a1:18:a5:a8:e0:de:7c:1f:df:d1:71:be:51:a5:f0:4d:
6e:b7:71:8b:82:f0:d1:6c:54:4c:a7:e6:31:25:b4:6d:72:e3:
4b:2c:2d:fa:42:4c:fd:a5:fe:2a:b7:c7:a1:17:82:88:23:aa:
52:f4:19:8d:a6:5c:94:94:a9:37:b0:29:65:83:a9:57:66:4c:
f5:58:0a:eb:f6:ad:d5:6d:70:5f:33:72:85:f7:11:96:88:9d:
cb:f4:ad:e6:50:33:1e:9b:1e:ed:97:b9:9f:b0:0a:9a:b6:52:
09:25:78:a2:42:72:c7:a7:0f:09:ab:e1:70:68:96:aa:bd:40:
53:cd:c9:42:b5:bb:97:be:c0:2f:cb:61:18:e1:ec:eb:2d:bf:
74:7b:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:14 2026 by rpki-client