
Error: rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
File: h8J36lRFUp3Qay_l7p8zzcfOhOA.mft (raw, json)
Hash identifier: zqoTcXNutxR+eSjMWUT5MwlV0aC+5ISXuLnot+JTZeE=
Subject key identifier: 2E:29:04:22:C1:E6:17:71:B5:B2:03:DD:3B:0F:AE:81:3F:01:E8:D2
Authority key identifier: 87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
Certificate issuer: /CN=F36BCC19AF/serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Certificate serial: 0723
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
Manifest number: 0718
Signing time: Thu 24 Sep 2026 02:32:57 +0000
Manifest this update: Thu 24 Sep 2026 02:32:56 +0000
Manifest next update: Sat 26 Sep 2026 02:32:56 +0000
Files and hashes: 1: h8J36lRFUp3Qay_l7p8zzcfOhOA.crl (hash: oS3nAZ1/UYtacEp/IPtnctjmvLp3aXoeUaBr2ohsbaQ=)
2: 6102702E926911F18CD387A1CE1D38B0.roa (hash: wlFhrMwDQWEukdgHUfz2btTKwMRTeU8PJVqB0Z0/5s4=)
3: B41EB764926811F1A676011CCF1D38B0.roa (hash: hp5HvaErW5kZ3OMkXlumMkZfmIv4oZk4P8mkt6kpQcI=)
4: 21F9DAFE926711F19BE7BD13CF1D38B0.roa (hash: hlqxVblCqEYiX3zs6q6tVa68Gx9o5Mqky5bydrTjViI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BCC19AF, serialNumber=87C277EA5445529DD06B2FE5EE9F33CDC7CE84E0
Validity
Not Before: Sep 24 02:32:56 2026 GMT
Not After : Sep 26 02:32:56 2026 GMT
Subject: CN=6ab48bd9-07c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:b4:93:88:9b:63:d7:09:29:72:fe:3b:34:
49:f5:e4:44:b7:a2:c7:8d:82:f1:3f:d2:7c:8f:aa:
4a:d1:98:83:4e:9a:c4:ae:d7:25:cf:04:09:ca:1b:
02:52:3f:01:7d:5f:1b:32:08:f2:de:9b:87:f9:1d:
db:e6:45:e9:8f:3c:33:9d:7c:9d:a4:ae:4a:1d:c1:
60:6f:47:d1:e1:4f:84:9a:3b:2c:4c:df:f2:2d:78:
b6:e8:29:20:d9:0a:cb:4c:b2:ba:09:29:f7:09:79:
fc:01:00:44:42:f7:ee:fd:c3:b3:f0:34:d9:9a:82:
e6:45:7e:8f:d8:6f:4e:63:8a:53:59:e1:49:b3:1d:
94:ed:b4:a0:bd:ef:27:f0:cf:1d:06:5e:c7:03:97:
06:77:e4:be:a1:b5:28:a0:b8:eb:6d:d8:b7:f3:a5:
cc:f3:85:2e:ac:ba:00:d6:a3:7e:d8:c8:06:6c:f8:
f9:b1:d4:3f:e1:22:c8:16:da:1b:94:cb:6b:03:89:
ea:03:93:ad:c6:a4:f8:9f:a0:ee:f6:ca:e5:ac:4f:
de:a5:d3:f4:f9:22:6e:b5:e4:7e:74:fd:51:7a:33:
36:32:29:ff:74:53:4e:3d:a8:db:dc:fd:25:95:7b:
6c:ac:a0:99:87:43:59:c0:5e:97:f5:1c:06:c6:cc:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:04:22:C1:E6:17:71:B5:B2:03:DD:3B:0F:AE:81:3F:01:E8:D2
X509v3 Authority Key Identifier:
keyid:87:C2:77:EA:54:45:52:9D:D0:6B:2F:E5:EE:9F:33:CD:C7:CE:84:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h8J36lRFUp3Qay_l7p8zzcfOhOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCC19/F6336432550111ECB65B497AD8A014CE/h8J36lRFUp3Qay_l7p8zzcfOhOA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:5b:a7:c5:b8:b8:32:38:7d:c0:2b:19:e5:ef:63:5f:89:
71:cb:3e:04:c3:8c:c0:f0:68:2b:4b:3a:90:74:12:5d:a2:77:
07:b4:d0:94:94:35:e7:cd:d3:ed:23:b6:20:c3:78:ea:b5:c2:
78:18:28:96:d8:66:c0:79:98:19:a1:21:e6:eb:39:c2:8a:39:
ff:bc:95:b6:19:0a:2e:88:17:62:64:42:a4:8f:5f:cf:76:16:
c6:ed:0d:77:80:ba:85:f0:f6:2b:a9:ed:ee:ee:d2:79:a3:c7:
15:12:e3:36:d1:e9:23:91:50:9c:cd:f2:c8:b7:39:bf:ee:f8:
53:8f:4c:f0:65:ab:ed:d3:1d:f8:17:74:c4:2b:8b:11:6b:ef:
c3:7a:ff:02:ae:98:fa:a1:21:d7:f8:23:59:02:b9:87:4e:09:
2b:20:cb:83:3a:12:3d:14:99:47:e0:1e:78:3a:3a:bf:4f:da:
2b:7a:7e:e0:be:36:f7:28:4f:d7:fc:37:ea:89:17:9b:e3:e7:
41:c9:73:ef:fa:33:e0:87:d6:dd:0c:81:1e:72:10:7d:93:02:
7d:b8:6d:c7:09:38:18:73:37:7d:0a:e4:02:47:73:0e:41:3a:
bc:bb:a2:0f:3d:a3:a5:12:99:50:00:be:1e:83:25:cb:3f:35:
17:64:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:48:48 2026 by rpki-client