
Error: rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File: 4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier: FcYbzsUsnLZPeKpHu33dCWNrHVFNyigm3aHrkfn4834=
Subject key identifier: 8D:2E:89:CC:C4:35:9F:57:3E:88:56:3A:24:74:33:F3:6C:35:AF:FE
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer: /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial: 0EAF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number: 0EAD
Signing time: Sat 10 Oct 2026 01:04:28 +0000
Manifest this update: Sat 10 Oct 2026 01:04:28 +0000
Manifest next update: Mon 12 Oct 2026 01:04:28 +0000
Files and hashes: 1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: COb6fUEDyBM2ZssGyQHMF5SA0IjevJRw1PbGSsEUVeQ=)
2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3759 (0xeaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Validity
Not Before: Oct 10 01:04:28 2026 GMT
Not After : Oct 12 01:04:28 2026 GMT
Subject: CN=6ac98f1c-bbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:49:84:0c:44:3f:14:37:93:b1:11:32:e8:
6b:c6:55:73:4e:af:fb:3b:e5:b4:c0:85:93:a7:fb:
6b:c3:16:7d:0d:01:84:b1:06:f3:9e:dd:3b:8a:15:
f9:24:d8:e0:10:86:44:17:16:ef:49:b6:8c:1f:3d:
2e:05:1e:b7:48:2e:85:40:2a:7d:96:94:d7:19:c6:
4e:79:a9:fe:77:59:a3:0b:f0:23:fb:33:3c:21:37:
b5:5d:e8:1d:b7:c5:43:c4:fa:12:6f:81:c8:a9:da:
87:cf:f3:c3:2c:c8:d4:8d:de:db:ff:66:5e:cd:f5:
09:80:00:e6:f2:cc:b9:9b:86:c4:0e:92:30:57:e8:
7e:98:90:cd:65:77:c6:52:ec:47:00:d2:2d:dd:51:
70:85:32:9e:36:60:3a:66:4b:2a:43:69:78:f6:30:
85:47:5e:58:74:eb:a5:be:27:72:4a:77:17:1c:33:
33:8a:72:95:19:c6:78:63:4d:fe:a2:8c:18:41:6e:
97:9f:7d:1c:0f:ec:47:d1:b6:6e:47:66:93:3e:ae:
fe:b4:3f:fe:6f:29:b0:29:8f:75:a2:32:8f:70:41:
f0:81:fe:b3:8b:57:3c:2b:4e:24:b8:1a:ba:b4:c7:
1c:47:ea:5c:bc:94:35:99:fb:4d:f2:dd:ef:68:5a:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:89:CC:C4:35:9F:57:3E:88:56:3A:24:74:33:F3:6C:35:AF:FE
X509v3 Authority Key Identifier:
keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:06:09:4d:05:b5:73:2f:6a:79:16:29:ea:a0:87:e4:d3:
54:ab:d8:1d:ab:6c:05:06:58:86:5e:55:87:97:74:c4:1c:c7:
1f:09:12:9e:02:cf:2c:a6:a6:4f:57:57:c6:1a:af:86:96:9e:
98:73:3f:30:af:ed:58:2f:49:79:19:31:39:6a:3b:09:32:d5:
10:c8:68:d7:13:c9:ff:fa:fc:5b:67:90:0b:d3:82:62:5f:1f:
39:34:aa:ef:20:8f:ae:48:7f:12:a7:c1:15:22:2b:ac:b8:70:
38:72:68:70:2e:8c:a7:0d:ac:3f:c0:c6:3f:d3:d8:ce:72:ff:
70:ce:99:90:59:b4:19:39:31:a7:03:e9:c9:18:1f:46:1e:1b:
72:c6:ad:03:95:9e:7a:a6:09:80:aa:28:46:60:ed:37:ca:53:
3e:65:34:56:14:2a:d5:6e:57:ee:18:50:5f:ac:57:85:ca:0d:
ab:f7:92:c3:f1:22:13:85:a5:ba:b5:d3:fc:17:aa:5f:d8:cc:
3d:1e:da:17:aa:99:8c:45:32:33:e1:cd:cd:dc:eb:1f:da:a8:
14:af:ef:a8:3c:0c:23:e7:8d:d6:eb:0d:1f:74:da:db:eb:c1:
9b:4d:de:86:30:d9:49:0a:1c:13:52:96:ce:2a:3c:b1:4f:23:
84:ca:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:34:12 2026 by rpki-client