
Error: rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
File: IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft (raw, json)
Hash identifier: BRj5jb3Zy/90FdL/DUqpyg697PrnBDt5PYqwYKvCzOg=
Subject key identifier: 03:91:71:78:17:80:07:2A:9C:1D:F4:FA:CB:54:DA:CC:78:44:46:0F
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Certificate issuer: /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial: 055A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
Manifest number: 0556
Signing time: Thu 24 Sep 2026 03:15:04 +0000
Manifest this update: Thu 24 Sep 2026 03:15:03 +0000
Manifest next update: Sat 26 Sep 2026 03:15:03 +0000
Files and hashes: 1: IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl (hash: KMyGDD2O2eaYgCUmT5a8qLvSG/RwkfgXEILJQWs/ads=)
2: 375BCD788A6811F1BF7143F0CE1D38B0.roa (hash: oVUo+t/et85fqSTTr6zsQae5fnGPc7bNZZM1y/Lf9V0=)
3: EB75AAA08A6711F1AF4A57EECE1D38B0.roa (hash: hBL7Bw0T1p6qOiAygZ/IygqoLmmJFrYyoL3SKs5rE9I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A1BAF, serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Validity
Not Before: Sep 24 03:15:03 2026 GMT
Not After : Sep 26 03:15:03 2026 GMT
Subject: CN=6ab495b7-f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:e6:0b:4b:1c:0b:d4:59:97:44:1e:42:40:
c7:26:a9:2d:36:64:e6:65:da:8c:a9:aa:ab:f2:a1:
65:6c:57:2e:5d:ce:b9:65:e2:fa:11:1f:9e:25:29:
0c:ea:96:1d:85:01:9b:98:a3:87:5e:52:b1:05:55:
1e:58:25:47:09:2f:d2:ed:7b:08:da:84:76:f0:47:
b3:29:ec:18:da:51:f1:f0:2a:58:0e:5d:46:a5:f9:
8b:ac:73:49:20:90:a0:4c:c8:c4:02:c4:4e:01:c4:
88:05:5e:51:0b:8a:dd:06:f5:86:ed:37:51:79:f8:
8e:ec:81:6e:58:3b:83:52:06:ff:e1:c9:56:4d:a5:
9c:88:cc:d0:bc:b0:f3:3c:e8:8c:1e:36:a2:7d:1a:
11:05:f5:2c:80:8f:53:53:26:09:22:20:90:a3:05:
9b:d6:5e:94:f7:e2:3a:6a:a3:b1:08:87:bb:07:4b:
61:8b:6d:48:e3:29:7f:78:88:49:59:f6:12:dd:7a:
2b:b6:30:97:06:a5:1a:a5:07:78:d8:34:11:23:c5:
b0:65:10:9c:b8:9b:5f:7d:8b:86:89:40:36:be:c0:
fa:02:0a:ed:53:75:f1:cd:05:6f:dd:64:90:1f:e9:
ec:aa:c5:8e:00:0d:ee:8a:b6:01:ab:bc:3a:ca:d8:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:91:71:78:17:80:07:2A:9C:1D:F4:FA:CB:54:DA:CC:78:44:46:0F
X509v3 Authority Key Identifier:
keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:b4:a6:20:1d:76:ba:59:a0:4e:60:00:07:01:62:d8:46:
d3:24:08:93:ef:a1:65:32:7c:3e:8f:76:8e:f3:4d:2c:86:70:
9a:66:d1:c2:2d:70:cf:38:54:89:08:c1:08:3e:94:86:a1:56:
3e:e2:fa:b2:cf:e9:c9:0d:c4:1b:2d:0f:1d:74:ca:db:64:1e:
85:e6:9e:53:a9:b3:b7:8e:8b:8b:8f:a3:44:99:45:02:be:dc:
d2:49:8d:92:5e:a7:26:c4:68:80:ee:54:28:a1:51:90:f2:a1:
d5:fe:dd:2f:4e:29:ef:4b:d5:1d:5b:60:98:18:de:44:94:60:
ba:86:79:d7:7e:14:3d:05:e3:9e:c8:12:33:b7:81:f7:63:fa:
39:bc:4b:44:1a:04:ef:85:36:d4:ad:a9:c0:40:37:30:a1:91:
9a:42:09:45:e8:f1:bb:c6:65:46:53:bd:0f:5e:15:9c:01:f5:
91:e1:fe:f0:4c:aa:b6:58:9f:cd:92:a4:a8:1a:64:51:1f:0f:
10:9b:63:44:ec:ee:d5:6e:ef:9e:52:bc:17:eb:4d:0f:7b:89:
03:9e:cf:71:d4:17:9d:78:aa:84:eb:19:d7:98:1c:a0:65:9c:
ed:8e:dd:47:f6:2e:16:fc:2f:48:c2:3f:36:fd:f7:c6:d5:25:
f6:4f:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:43 2026 by rpki-client