
Error: rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
File: 0J3KDrqbho_trknCtmkq7gVFeco.mft (raw, json)
Hash identifier: go9lyXRvDoFzH88afWHqLNvJmfnh5NKJc2nJpmKu9ac=
Subject key identifier: 85:6D:C0:B0:D5:50:DE:E0:4E:2B:F0:EC:45:16:C7:43:76:5C:CF:15
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Certificate issuer: /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial: 0157
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
Manifest number: 0154
Signing time: Tue 29 Sep 2026 05:13:09 +0000
Manifest this update: Tue 29 Sep 2026 05:13:08 +0000
Manifest next update: Thu 01 Oct 2026 05:13:08 +0000
Files and hashes: 1: 0J3KDrqbho_trknCtmkq7gVFeco.crl (hash: 1K8SPtXp3TIzHK845+FVv2YZv+mygr78hkSQ/Tw+Omw=)
2: 470BB1C66A2311F1B3AAD9D0CE1D38B0.roa (hash: 3M6LxrpYMIjBXsDC/yD9qpFC3gQ8ZR0LIosDDsOIYTg=)
3: 855E7F48D5D711F0994ACE9CDAE4EC9C.roa (hash: KQqahJlThDjSMN9OoZVjESlj+xV77EpJ7wFMyg/Ikw4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 Oct 2026 00:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Validity
Not Before: Sep 29 05:13:08 2026 GMT
Not After : Oct 1 05:13:08 2026 GMT
Subject: CN=6abb48e5-451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:d6:45:1c:df:2a:03:c9:55:15:28:ab:17:
6d:cc:11:b0:65:d6:36:5c:00:35:aa:01:5d:b6:cb:
f3:31:8d:04:e7:7b:2a:9f:f9:c1:e0:af:7f:80:ad:
a1:20:73:39:dd:82:c9:a2:c6:11:1b:ff:22:ce:be:
dd:9f:8f:7f:80:06:c9:4b:92:3c:1d:95:b1:77:0f:
e0:fb:44:e7:19:3e:1d:23:10:9e:ba:db:18:47:6d:
d0:83:54:13:94:0f:4a:b5:39:34:46:d3:14:11:fe:
3c:15:fc:88:88:6e:3d:89:47:e3:a7:e4:f9:f2:58:
cd:00:eb:59:ca:71:fc:08:2a:4d:10:de:3b:4a:44:
49:ad:1b:54:e6:18:51:02:29:c9:2f:98:2d:b6:a1:
5b:66:3e:76:d1:09:47:24:dd:c6:41:c7:fe:e1:a7:
fa:d5:42:06:2b:28:3a:c8:fd:3a:f1:32:9b:11:7c:
08:1e:b1:84:85:16:c3:17:ba:b6:53:b9:79:15:fc:
ad:d3:85:1d:c7:b8:92:e7:45:ec:02:60:6c:bb:bc:
c3:b0:e3:0c:32:81:5e:0c:2d:5a:4e:9c:49:83:50:
c6:78:40:b2:65:96:a3:99:b9:44:17:2d:d8:20:6d:
e2:a3:f6:54:11:2e:b4:73:03:45:40:a0:47:49:86:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:C0:B0:D5:50:DE:E0:4E:2B:F0:EC:45:16:C7:43:76:5C:CF:15
X509v3 Authority Key Identifier:
keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:ca:fc:18:7b:c1:b4:94:9d:ef:4e:48:0b:90:4c:ec:d1:
40:62:e1:91:13:0b:6e:89:7b:d1:2c:17:0c:a7:20:03:34:bb:
33:b9:e5:a6:e2:af:06:29:a9:f0:cc:07:2d:36:c7:51:3f:ee:
7e:67:9c:f2:cc:eb:34:66:b9:51:97:9e:c8:81:18:a0:97:55:
ca:ae:66:43:56:ac:7b:e6:22:97:9d:68:4d:04:ab:fb:7f:89:
98:55:ae:1c:fa:1b:ab:69:4c:5a:40:8e:92:d4:b9:e5:f5:66:
1e:9d:24:a3:6f:e0:78:5d:35:9f:27:4c:40:45:5f:5d:2d:7b:
58:de:0b:ab:09:21:97:65:d7:7b:67:4e:ef:d5:ac:f0:14:e5:
48:cd:d3:2b:31:aa:f0:61:5f:a9:f2:02:7b:b4:ba:d4:d0:1d:
55:67:85:5c:48:f3:00:83:da:3d:1f:b0:b3:bc:d4:4d:08:f3:
3f:b5:9c:a6:03:f6:07:87:14:e8:66:c2:e0:d1:7f:b8:58:8d:
2c:21:4f:e0:44:d7:6c:f9:03:c7:66:95:d8:4d:2d:fd:aa:b0:
a9:38:99:e5:c1:a4:aa:31:14:2c:59:f5:4b:42:6e:41:07:7c:
6c:dd:a7:97:95:6b:73:47:89:5c:a0:02:3b:ce:e1:25:6a:58:
69:1a:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:08:13 2026 by rpki-client