
Error: rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
File: DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json)
Hash identifier: zzwVak/mql0DMZ3qCzKhJYQhiM27WxAXeqPk4xpP37E=
Subject key identifier: 55:BC:B5:5E:3E:28:69:92:6F:7C:DE:B6:A0:DC:11:E8:B5:71:2C:BE
Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Certificate issuer: /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Certificate serial: 03D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
Manifest number: 03D6
Signing time: Fri 25 Sep 2026 04:00:55 +0000
Manifest this update: Fri 25 Sep 2026 04:00:54 +0000
Manifest next update: Sun 27 Sep 2026 04:00:54 +0000
Files and hashes: 1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: tP5VvgNsJTl2XAsWGkff+kvT/g4WA9StErQlSVzfg1Q=)
2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=)
3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Validity
Not Before: Sep 25 04:00:54 2026 GMT
Not After : Sep 27 04:00:54 2026 GMT
Subject: CN=6ab5f1f7-0215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:3b:b3:3e:ba:d1:36:5e:49:fd:b5:bf:bb:
32:0a:c4:82:7f:8e:77:b2:ec:61:61:48:20:38:4d:
50:57:a5:ff:02:9c:48:e5:41:64:6f:21:a5:15:6f:
4e:9b:93:44:8c:fe:92:21:c7:e6:a2:f9:af:21:96:
7d:46:49:7d:51:af:4c:be:a8:b2:a3:89:1c:79:69:
86:4f:47:13:78:66:85:93:fe:b9:d4:e8:cc:0a:6c:
ba:0d:b5:61:8a:62:51:f8:57:ea:89:95:e9:4c:1a:
f4:9a:33:c5:c5:a8:6f:3a:2b:1e:94:f7:ce:15:e2:
76:96:98:d7:7c:a0:5e:ca:aa:48:25:a9:3d:08:5e:
7b:68:9f:69:81:c3:b7:38:01:ef:6f:04:33:d0:c7:
76:41:41:57:27:cb:67:d6:e1:af:2b:2a:77:47:a8:
b0:fa:ea:f8:7b:ee:4a:80:9a:86:da:34:94:59:89:
83:3c:10:e8:6c:8f:e0:0b:f1:2d:08:69:7c:17:61:
59:4f:fc:82:0e:28:1f:c0:fd:ce:37:11:4f:3f:81:
f3:be:3f:2a:4d:1b:e1:3a:aa:35:2a:4d:99:7f:47:
6a:fc:40:8b:34:7e:bc:8b:b8:50:2e:18:f7:56:f4:
d7:86:67:af:84:99:bd:34:2b:64:2b:7a:53:8a:12:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BC:B5:5E:3E:28:69:92:6F:7C:DE:B6:A0:DC:11:E8:B5:71:2C:BE
X509v3 Authority Key Identifier:
keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:df:49:c0:3c:d9:3a:90:e9:91:6a:03:66:1b:10:80:48:
dd:8c:1a:99:c8:5f:31:06:8d:d0:06:19:aa:ba:17:34:d7:97:
ef:80:8d:4e:c2:b6:3c:ee:6d:5d:10:38:3b:fa:2e:ed:94:a7:
47:6c:a7:64:72:20:71:e3:c7:4b:9d:01:ed:78:bc:fc:40:94:
41:e1:40:4f:13:ea:15:9f:17:e9:80:88:01:d8:20:2c:67:9f:
9e:ab:d0:52:da:3d:f9:5a:23:93:45:df:f4:1f:fe:db:dc:6e:
fa:ce:15:5e:6d:8a:5c:82:e7:21:93:ef:20:44:af:d1:89:93:
f3:21:d1:37:64:93:8c:8b:de:22:5a:ce:09:41:51:16:fb:3e:
bb:17:7a:b0:58:cd:5f:91:04:24:3b:ef:d0:f1:1c:96:3d:ac:
4e:6a:0b:e5:ee:6f:52:e8:60:fa:6d:a5:53:ed:9c:16:16:25:
c6:6a:ae:be:4d:a9:e3:f1:ba:bc:11:59:1b:e3:12:4c:a1:43:
7e:e5:29:e8:8d:83:e1:25:22:04:3c:6c:ac:a9:c9:bf:83:25:
86:ed:85:2f:77:c8:ff:6d:cc:76:84:88:ac:3e:22:0c:2b:41:
d1:be:4b:dc:d0:3b:81:89:8a:cc:9b:4f:68:ab:5a:5d:25:2b:
d6:1e:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:24:52 2026 by rpki-client