
Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
File: 60qJySS6F_Dpu5lYNPUjWoYZtHE.mft (raw, json)
Hash identifier: 1kPG2Xg1wFZ+6/LLsMxEUI0kA5rekecz+9b3qdcpVic=
Subject key identifier: 97:70:4A:C2:1F:38:76:E6:24:FC:D2:69:0E:34:66:3E:39:66:87:BF
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Certificate issuer: /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial: 01C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
Manifest number: 01BC
Signing time: Thu 24 Sep 2026 05:02:36 +0000
Manifest this update: Thu 24 Sep 2026 05:02:35 +0000
Manifest next update: Sat 26 Sep 2026 05:02:35 +0000
Files and hashes: 1: 60qJySS6F_Dpu5lYNPUjWoYZtHE.crl (hash: T0eVGsbw9mGCcvTZc5WVibgTkU1OGLsGew8Rqt9v568=)
2: CDDD6EBC9FA511F18196C91DCF1D38B0.roa (hash: xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=)
3: 20630D049FA611F1995C501ECF1D38B0.roa (hash: JhYhKmI5GODnNurventhICsk25X3A9B8WorGrCRrC2c=)
4: FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (hash: g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=)
5: B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (hash: oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=)
6: 129948809FA811F1A7EF49ACCE1D38B0.roa (hash: N4nEZtBTkM1SOciV0TfCwkWUPzDRHw09DLkdtyiUNio=)
7: 689BCBC49FA611F18785A4A3CE1D38B0.roa (hash: GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=)
8: BAF999E69FA611F1A500E1A3CE1D38B0.roa (hash: aV9FiklXCd8gQFnELSpe+SYak8Dl2un61ShGI8iNFrs=)
9: 443868DC9FA611F19908A5A1CE1D38B0.roa (hash: C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=)
10: B2FE915A9FA711F1806425ACCE1D38B0.roa (hash: sSgssLn1kZB+wHJmWWTYjTwP+BvQpVgLL7TDV51d7qo=)
11: 950608329FA611F184EBCDA3CE1D38B0.roa (hash: NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Validity
Not Before: Sep 24 05:02:35 2026 GMT
Not After : Sep 26 05:02:35 2026 GMT
Subject: CN=6ab4aeec-0750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:0c:b0:ec:f4:4a:30:51:ee:9b:2e:42:18:
02:b0:b4:9c:20:88:84:06:f8:b4:3f:24:ff:ce:60:
85:28:1d:df:cb:81:29:2c:2d:a4:9e:ec:57:e4:5b:
46:7b:16:c4:89:f8:81:47:b9:46:61:6d:ae:64:92:
13:2d:b5:5e:7c:de:fd:57:56:7a:5b:f7:40:af:65:
80:16:fe:1d:e6:c2:ce:98:91:fa:54:16:73:b6:94:
0c:38:3e:e3:6a:eb:ce:d0:4e:c2:a7:50:ea:d0:1c:
25:77:ba:1f:66:cd:18:98:4e:88:8f:f9:a8:fa:85:
ae:83:78:00:52:16:c0:a2:2a:e3:75:51:79:d9:3e:
48:bd:dc:ce:5e:7c:e3:88:eb:ae:5a:46:74:72:30:
5f:9d:2c:d1:53:ee:c4:bb:a1:ac:e3:4f:31:77:35:
8f:f3:19:e5:16:cb:00:0d:b5:c2:b3:e7:81:9c:6c:
d9:a8:21:99:d7:07:a3:29:17:62:1b:93:ae:91:82:
c6:22:29:e9:eb:7d:33:dc:52:81:c0:5a:b9:25:b7:
22:57:06:e8:d2:3e:4c:8f:cd:7c:ad:d7:ce:e1:b1:
85:47:72:33:fd:95:c6:50:70:bb:7f:49:5e:3a:8d:
9c:e7:39:2b:a2:6a:a5:cb:b7:f8:f0:09:23:06:45:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:4A:C2:1F:38:76:E6:24:FC:D2:69:0E:34:66:3E:39:66:87:BF
X509v3 Authority Key Identifier:
keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:40:b3:77:bc:b1:ee:e4:c5:4b:69:14:b7:93:0d:bd:3c:
e2:8d:bb:3b:a7:e6:7b:c7:69:ea:f8:94:9b:0b:41:81:06:7a:
f4:29:b0:75:e6:bf:bc:2d:e7:0b:0e:c8:de:46:50:83:ee:28:
0b:72:73:27:1f:fe:7d:ee:9b:d2:3c:a1:a6:1d:f3:3d:88:c7:
fe:11:7e:ef:eb:a9:b3:1f:4d:d7:7f:df:f8:00:6d:b7:3d:ff:
ff:26:1f:2d:89:8e:8f:5d:78:0a:67:d8:e2:7b:06:84:ac:6d:
b2:51:53:bd:d0:f1:1c:49:2d:bd:8e:43:96:95:1d:9b:fb:96:
36:b2:e0:df:03:a7:a9:57:56:a5:0c:71:52:e8:23:39:f7:17:
00:9b:dc:f9:cd:bb:cb:18:f9:e7:6c:41:4e:f5:ac:84:c9:aa:
b0:73:13:0b:35:a9:08:5a:34:40:60:91:a0:c4:7f:5f:60:39:
ff:11:28:df:f0:24:0a:36:8f:45:a9:af:26:83:9d:34:01:95:
3f:27:2a:81:cb:8d:6f:0f:a9:0f:20:09:17:76:48:81:64:25:
c9:86:05:18:ab:47:77:cb:f0:be:4d:2d:1f:16:f5:a9:d8:ff:
c8:f1:ff:e3:5c:fe:8a:57:3f:c8:d4:c2:48:dd:b3:fc:53:39:
29:95:d5:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjVFRTdBRjExMC8GA1UEBRMoRUI0QTg5QzkyNEJBMTdGMEU5QkI5OTU4MzRGNTIz
NUE4NjE5QjQ3MTAeFw0yNjA5MjQwNTAyMzVaFw0yNjA5MjYwNTAyMzVaMBgxFjAU
BgNVBAMTDTZhYjRhZWVjLTA3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7XQyw7PRKMFHumy5CGAKwtJwgiIQG+LQ/JP/OYIUoHd/LgSksLaSe7Ffk
W0Z7FsSJ+IFHuUZhba5kkhMttV583v1XVnpb90CvZYAW/h3mws6YkfpUFnO2lAw4
PuNq687QTsKnUOrQHCV3uh9mzRiYToiP+aj6ha6DeABSFsCiKuN1UXnZPki93M5e
fOOI665aRnRyMF+dLNFT7sS7oazjTzF3NY/zGeUWywANtcKz54GcbNmoIZnXB6Mp
F2Ibk66RgsYiKenrfTPcUoHAWrkltyJXBujSPkyPzXyt187hsYVHcjP9lcZQcLt/
SV46jZznOSuiaqXLt/jwCSMGRWtPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUl3BK
wh84duYk/NJpDjRmPjlmh78wHwYDVR0jBBgwFoAU60qJySS6F/Dpu5lYNPUjWoYZ
tHEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1RUU3LzE1Q0I5NERDNkI5MTExRjA4NkVBOEQ4NURBRTRFQzlDLzYwcUp5
U1M2Rl9EcHU1bFlOUFVqV29ZWnRIRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzYwcUp5U1M2Rl9EcHU1bFlOUFVqV29ZWnRIRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjVFRTcvMTVDQjk0REM2QjkxMTFGMDg2RUE4RDg1REFF
NEVDOUMvNjBxSnlTUzZGX0RwdTVsWU5QVWpXb1ladEhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARrUCzd7yx7uTFS2kUt5MNvTzijbs7
p+Z7x2nq+JSbC0GBBnr0KbB15r+8LecLDsjeRlCD7igLcnMnH/597pvSPKGmHfM9
iMf+EX7v66mzH03Xf9/4AG23Pf//Jh8tiY6PXXgKZ9jiewaErG2yUVO90PEcSS29
jkOWlR2b+5Y2suDfA6epV1alDHFS6CM59xcAm9z5zbvLGPnnbEFO9ayEyaqwcxML
NakIWjRAYJGgxH9fYDn/ESjf8CQKNo9Fqa8mg500AZU/JyqBy41vD6kPIAkXdkiB
ZCXJhgUYq0d3y/C+TS0fFvWp2P/I8f/jXP6KVz/I1MJI3bP8UzkpldUP
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:56:11 2026 by rpki-client