
Error: rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
File: f5DbGDX56nljonlPXDJUNY30PvQ.mft (raw, json)
Hash identifier: ZoAI3rIs4xRYPccZEqn4JczXDD0aw2JpHfe/vETUgYc=
Subject key identifier: 9A:90:93:77:4D:31:01:F9:CF:D3:11:41:D4:D4:B3:96:A0:97:41:62
Authority key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Certificate issuer: /CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Certificate serial: 036B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
Manifest number: 0368
Signing time: Sun 15 Nov 2026 04:18:33 +0000
Manifest this update: Sun 15 Nov 2026 04:18:33 +0000
Manifest next update: Tue 17 Nov 2026 04:18:33 +0000
Files and hashes: 1: f5DbGDX56nljonlPXDJUNY30PvQ.crl (hash: 783SZZvDnpSCGQEUAccK+cjri45B8/pb5oHOGryJ00g=)
2: 9D6BC0A2F1EB11F0A880BEA8DAE4EC9C.roa (hash: T5AlM0cdDWsgrJOzsfZ2QwHjdJWPRUtlN9T0HbFf7rA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875 (0x36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9B8FAF, serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Validity
Not Before: Nov 15 04:18:33 2026 GMT
Not After : Nov 17 04:18:33 2026 GMT
Subject: CN=6af93299-45cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:6e:8b:2f:54:ca:8f:14:a1:f0:36:ea:6e:
02:23:57:38:d2:79:81:85:55:da:a9:51:e3:2c:fe:
f7:a8:e2:1d:73:89:ca:38:b5:ce:29:58:3b:e9:c1:
1d:47:17:e9:92:4f:d0:c9:78:4e:a1:14:87:4e:de:
14:c5:68:19:26:5e:55:64:eb:da:c2:02:2b:58:ad:
06:15:57:5f:96:53:37:32:d4:88:ca:ec:53:1e:0c:
62:6e:9f:7c:d1:9c:a4:61:9c:56:d2:10:11:1b:3b:
b5:99:91:58:d4:41:80:e2:e2:72:db:44:43:ad:26:
34:a3:7b:57:e3:aa:4c:7c:6f:d6:52:c4:56:08:58:
db:3a:9f:66:85:fa:0b:59:0c:6a:03:bd:ad:79:1f:
0f:f0:96:21:2c:89:c6:a9:63:4f:d4:e3:22:20:99:
d3:69:29:69:da:f0:d4:58:9b:2f:7f:77:e8:9b:79:
8d:f5:f7:dd:02:dd:e9:1e:94:be:6d:79:a6:44:b3:
1e:ac:e7:30:02:41:33:a0:fa:6b:39:0c:76:ea:cf:
8e:04:6b:50:83:af:6c:47:39:ed:29:3b:79:73:78:
7d:e6:93:a2:3c:0b:cb:86:53:67:82:c3:00:9c:b1:
d4:9c:d0:39:b8:72:12:9d:bf:e0:54:e9:43:5a:cc:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:93:77:4D:31:01:F9:CF:D3:11:41:D4:D4:B3:96:A0:97:41:62
X509v3 Authority Key Identifier:
keyid:7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5d:c9:47:7c:11:84:0e:6f:e6:2d:25:5e:a4:c8:a8:7d:af:
35:6c:d6:a2:fa:2e:9e:22:06:89:13:7f:85:99:f7:b7:de:b0:
e6:cc:05:e5:41:04:b8:90:b2:50:d7:41:de:fd:2b:d5:dd:6d:
db:f1:99:aa:dc:2b:cb:f6:54:8d:0b:a5:12:79:f5:13:3e:36:
01:48:01:ee:64:44:85:63:12:3a:40:3b:9d:98:43:39:13:df:
41:e9:97:b1:9a:9c:f2:14:5e:8b:1f:2e:bc:9e:65:80:40:3c:
48:24:d8:e8:8e:69:4a:20:70:73:ac:71:10:92:dc:18:4b:ec:
cd:8b:17:84:f3:b7:7c:07:90:64:8f:d9:bc:4e:b1:b7:92:e1:
e6:fc:bb:1a:ef:16:9e:a2:9f:f5:e0:25:5b:1e:4b:80:4b:34:
32:9a:30:73:77:46:d8:ae:fd:e3:58:9e:98:e7:a6:9f:73:80:
1f:74:7a:07:22:dd:eb:8e:93:a7:6e:ac:6e:b3:6b:43:5a:2e:
4a:21:50:2a:d2:24:7d:cf:f6:dc:63:a8:35:90:04:25:f9:9e:
52:e0:8c:46:ed:86:71:bd:00:c6:21:b4:3b:84:d5:d3:dd:6c:
03:67:79:4c:5d:74:7a:c9:04:5a:70:f3:59:64:0a:c0:dd:bc:
14:57:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:42:12 2026 by rpki-client