
Error: rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
File: -vPHS9tBaK0Umzg5f1vk--Qjx1I.mft (raw, json)
Hash identifier: 6A6lDsIj7MgapzMmPPjXKUzYwnfD1N97GNYhTm0iQQs=
Subject key identifier: 65:1F:D4:66:7B:0C:3B:28:77:11:6F:62:CA:2A:68:6C:9A:7E:CB:28
Authority key identifier: FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
Certificate issuer: /CN=F36BDAEAAF/serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Certificate serial: 74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
Manifest number: 73
Signing time: Thu 15 Oct 2026 05:40:59 +0000
Manifest this update: Thu 15 Oct 2026 05:40:59 +0000
Manifest next update: Sat 17 Oct 2026 05:40:59 +0000
Files and hashes: 1: -vPHS9tBaK0Umzg5f1vk--Qjx1I.crl (hash: rbbuEzpEnMSlgK153AxTLG/7asrrHeEy18v207BQ2MI=)
2: A166CB0A6FB511F1A388A7EBCE1D38B0.roa (hash: N2A8A30zOOL02+LkqB3kmhadKKBzgndfImHLlNc0+Fg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 Oct 2026 05:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDAEAAF, serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Validity
Not Before: Oct 15 05:40:59 2026 GMT
Not After : Oct 17 05:40:59 2026 GMT
Subject: CN=6ad0676b-0356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:7e:03:1f:9c:4d:2e:d2:33:ec:1d:52:af:
ff:f3:dd:4e:2a:a6:86:58:f3:7a:e2:39:87:63:06:
68:bb:35:52:4d:a1:82:06:46:d7:64:77:ce:39:3d:
c1:ee:f7:13:c0:e8:09:7f:1c:7f:43:14:9f:85:26:
39:d2:0f:55:21:94:98:ea:41:a3:08:ff:99:fb:b3:
00:b3:72:17:33:23:3d:12:b3:dd:74:ec:01:b4:a5:
4f:ee:7a:d4:8e:0e:dc:9f:86:72:4c:91:d1:bc:4e:
db:7c:c0:84:bd:e6:e8:04:db:32:a4:45:62:eb:6b:
07:2c:45:be:43:a0:cf:05:14:13:87:20:88:18:cf:
0f:c0:84:35:f8:f3:d9:5e:e7:0d:6e:c5:35:0f:a2:
ba:bf:d5:25:3e:d4:74:8c:af:b2:9e:f2:2a:80:f3:
f1:b8:5d:3d:36:8e:ba:6b:8b:c7:a3:cb:05:5a:5c:
67:f4:dc:f0:47:c2:22:74:e4:4d:c5:bf:34:b1:83:
3d:fd:15:d8:98:f0:72:8e:12:37:47:d2:30:c0:ea:
cd:9d:dd:19:ab:dc:a0:93:9f:81:ba:0c:2a:7b:c3:
80:cd:8c:7c:27:b0:2a:a3:c6:b4:77:e8:33:cf:09:
3a:34:a8:25:20:3c:1e:1c:f0:62:c0:0d:1a:36:24:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:D4:66:7B:0C:3B:28:77:11:6F:62:CA:2A:68:6C:9A:7E:CB:28
X509v3 Authority Key Identifier:
keyid:FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:a3:7f:50:fb:d6:1a:a5:18:9c:6d:ec:51:8d:eb:97:3e:
d1:26:ff:54:dd:cd:0e:6a:d9:2f:21:35:30:4b:7b:57:61:b2:
97:7b:5f:c7:69:51:45:8c:b4:90:c7:34:52:af:72:84:29:b0:
fb:2d:47:d9:60:d5:c8:36:7b:85:ad:ff:cd:8a:89:b1:91:68:
22:0b:66:a1:84:20:84:f5:03:d4:bd:ed:69:f5:ea:8e:6d:97:
76:32:e0:9c:6a:53:4c:40:73:ca:35:cc:3f:d2:d6:60:d5:d8:
2f:91:dc:43:14:45:a8:ca:63:8c:fe:ce:61:3b:4d:d2:42:d6:
c1:02:95:14:c8:e7:0b:db:96:9e:e5:64:00:93:2c:71:d4:9d:
0a:70:59:69:a2:72:8b:f8:47:6f:1c:13:b2:da:8f:47:a7:5c:
b9:a0:d9:87:d4:56:bd:5a:bb:6e:b3:71:f3:34:96:b8:e2:3d:
25:83:57:b4:f8:63:65:4c:63:6a:44:30:7b:60:f3:93:ed:9a:
03:4d:d3:06:37:c8:f9:cc:a1:86:69:68:20:01:17:82:2e:51:
4b:3c:34:0b:ca:24:54:3e:6e:c6:2c:29:23:fb:dc:83:64:75:
59:87:ed:28:9e:72:de:5d:dc:13:19:4d:94:d3:65:f2:0c:42:
9b:51:bd:75
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBdDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
REFFQUFGMTEwLwYDVQQFEyhGQUYzQzc0QkRCNDE2OEFEMTQ5QjM4Mzk3RjVCRTRG
QkU0MjNDNzUyMB4XDTI2MTAxNTA1NDA1OVoXDTI2MTAxNzA1NDA1OVowGDEWMBQG
A1UEAxMNNmFkMDY3NmItMDM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9HfgMfnE0u0jPsHVKv//PdTiqmhljzeuI5h2MGaLs1Uk2hggZG12R3zjk9
we73E8DoCX8cf0MUn4UmOdIPVSGUmOpBowj/mfuzALNyFzMjPRKz3XTsAbSlT+56
1I4O3J+GckyR0bxO23zAhL3m6ATbMqRFYutrByxFvkOgzwUUE4cgiBjPD8CENfjz
2V7nDW7FNQ+iur/VJT7UdIyvsp7yKoDz8bhdPTaOumuLx6PLBVpcZ/Tc8EfCInTk
TcW/NLGDPf0V2Jjwco4SN0fSMMDqzZ3dGavcoJOfgboMKnvDgM2MfCewKqPGtHfo
M88JOjSoJSA8HhzwYsANGjYkvvcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRlH9Rm
eww7KHcRb2LKKmhsmn7LKDAfBgNVHSMEGDAWgBT688dL20ForRSbODl/W+T75CPH
UjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkRBRUEvM0E0RkI4NTA2RkI1MTFGMThDMzgxREVCQ0UxRDM4QjAvLXZQSFM5
dEJhSzBVbXpnNWYxdmstLVFqeDFJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLXZQSFM5dEJhSzBVbXpnNWYxdmstLVFqeDFJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZCREFFQS8zQTRGQjg1MDZGQjUxMUYxOEMzODFERUJDRTFE
MzhCMC8tdlBIUzl0QmFLMFVtemc1ZjF2ay0tUWp4MUkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGsco39Q+9YapRicbexRjeuXPtEm/1Td
zQ5q2S8hNTBLe1dhspd7X8dpUUWMtJDHNFKvcoQpsPstR9lg1cg2e4Wt/82KibGR
aCILZqGEIIT1A9S97Wn16o5tl3Yy4JxqU0xAc8o1zD/S1mDV2C+R3EMURajKY4z+
zmE7TdJC1sEClRTI5wvblp7lZACTLHHUnQpwWWmicov4R28cE7Laj0enXLmg2YfU
Vr1au26zcfM0lrjiPSWDV7T4Y2VMY2pEMHtg85PtmgNN0wY3yPnMoYZpaCABF4Iu
UUs8NAvKJFQ+bsYsKSP73INkdVmH7Siect5d3BMZTZTTZfIMQptRvXU=
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:17:44 2026 by rpki-client