
Error: rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier: q43dtBia9Vo7X9Ye4Ct711JhPQ4RjA1RdBGDmegMT2M=
Subject key identifier: 23:90:DE:71:88:1D:08:81:D1:9C:DB:83:67:20:5D:2F:5E:D1:0E:FA
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer: /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial: 013B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number: 013A
Signing time: Wed 23 Sep 2026 05:16:15 +0000
Manifest this update: Wed 23 Sep 2026 05:16:14 +0000
Manifest next update: Fri 25 Sep 2026 05:16:14 +0000
Files and hashes: 1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: P4JGwfbt9R3NjaLy3ISP4ysJDMPTJiMPuhjsL5N2qwM=)
2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 05:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Validity
Not Before: Sep 23 05:16:14 2026 GMT
Not After : Sep 25 05:16:14 2026 GMT
Subject: CN=6ab3609f-9656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:83:a1:84:bb:ab:bf:a0:2a:ab:80:52:57:
1f:0e:c8:55:07:f2:6f:c1:28:c9:bb:90:f0:c7:cd:
80:1a:f9:7c:e9:7e:16:2d:9c:45:16:3e:b2:34:05:
c1:91:78:9c:64:b0:bb:13:9c:5b:a4:a5:8c:97:60:
22:b7:a5:74:4b:53:15:35:91:f2:5c:c5:bb:8e:81:
29:b1:8c:f9:e1:56:49:e7:cf:06:56:5c:fa:4b:68:
eb:21:0b:f8:dd:b0:c8:6c:83:27:b0:93:fc:75:64:
d8:db:c8:e6:3a:0e:4b:5c:69:db:e6:81:b7:51:e6:
ed:f3:59:ff:1e:0a:6f:d8:79:11:0a:5c:f6:c6:06:
d9:ba:88:2e:32:f4:b6:4c:05:44:9c:67:c7:4f:43:
df:83:12:d7:63:3a:05:c5:cf:7a:f0:0b:06:3b:d8:
a0:7a:ee:37:2a:ba:e0:38:ba:9d:11:86:84:0f:14:
3d:53:78:a2:0f:38:a8:df:59:ba:d1:54:a8:40:3b:
c7:96:da:08:40:51:be:d0:f3:91:01:a6:6c:20:2d:
2a:38:38:f0:52:ed:8d:f5:2d:9f:6f:76:b6:86:0f:
59:f8:77:99:41:ce:fb:0a:9a:81:8b:fb:78:5a:9b:
2f:18:84:70:42:40:ed:9f:bd:cf:5f:ff:8d:90:57:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:DE:71:88:1D:08:81:D1:9C:DB:83:67:20:5D:2F:5E:D1:0E:FA
X509v3 Authority Key Identifier:
keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f9:e9:bc:62:9c:aa:9a:23:65:54:4e:ff:42:ba:42:c8:1a:
93:ca:a2:c0:44:62:df:7c:f8:e3:ec:5f:93:3d:fa:17:aa:ef:
d7:27:dc:4e:81:ef:39:a1:24:a6:3b:2a:66:8d:d5:73:d8:09:
ff:e4:c8:c7:54:65:38:24:86:c5:8a:f0:fa:62:a3:ea:23:a8:
e3:6d:a0:8a:5f:9c:4f:cd:6f:b5:3d:c5:16:ba:79:c9:7f:41:
05:5a:40:a6:1a:3a:5a:a7:a7:75:37:05:bf:72:e4:54:1a:ba:
e5:f3:0c:b9:3c:e4:59:e2:78:fe:16:d2:65:d5:2d:a5:78:4d:
34:7e:08:f8:68:e8:d2:59:39:0c:3d:da:05:3b:ca:21:e2:f8:
f5:07:e2:5b:13:dc:67:da:8f:f3:1f:e9:f7:47:a5:7a:f6:74:
2e:4a:e1:46:2f:79:f5:f4:62:6b:ed:53:9f:ff:11:8d:2b:cd:
82:db:65:a6:5a:10:9a:c5:69:6f:c9:58:4d:6f:8f:dd:2f:a6:
ff:01:5c:90:1f:24:29:2a:f7:25:14:4b:f1:cb:1b:48:28:85:
06:4d:3a:6a:ad:14:2f:ad:31:b7:af:4a:55:e0:df:f9:5b:8f:
8c:fc:9e:4b:0a:7b:19:e7:f1:2f:5c:73:42:3e:76:e1:1b:b0:
3a:ae:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:16:59 2026 by rpki-client