
Error: rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File: 6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier: 9rWy/mrDtLgHVZ1gSZMLbeBEotk0b2DdeJehbK9YNV0=
Subject key identifier: 02:E8:6C:8F:1E:3E:EF:20:8C:95:EE:9C:70:B6:C2:7A:86:82:B7:A1
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer: /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial: 04E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number: 04D8
Signing time: Fri 25 Sep 2026 03:29:22 +0000
Manifest this update: Fri 25 Sep 2026 03:29:21 +0000
Manifest next update: Sun 27 Sep 2026 03:29:21 +0000
Files and hashes: 1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: GSpi8Cl6ix5sDjUJ5O0ZLx7CmJxyircwAGqkbijORqo=)
2: D7B5D4AA3F8A11F0815BE886DAE4EC9C.roa (hash: t5z1XEoM68YeibkOYXPg25COwviOQ/1nhyVvYwVcLc0=)
3: 9A5FD4443F8911F0AA49157EDAE4EC9C.roa (hash: qLmVhnLX4tIjj8b3hArFHAjy/7IR4T4V3Cq6FO7FMiA=)
4: 795EBB4C3F8A11F0AD8BDA84DAE4EC9C.roa (hash: 6t2L+Z6NwtyN3Ljbo05uGeDqv/OHPqQk0PQIwI4ALtk=)
5: AD03A5023F8A11F08735E386DAE4EC9C.roa (hash: u0IiCF72rfY2DVaQwjj716SKv5t/WEVer0mJ4pvV7nU=)
6: 3098838E3F8A11F0BC189482DAE4EC9C.roa (hash: LUsGNRiI9jBYOMZpideG7XX0pRrmTbmUTXJNgXuuIFs=)
7: 1B786B4E3F8B11F0B8041489DAE4EC9C.roa (hash: /bgUPlrvnEdfkbyRwQFx/0fTSHi+6eLubObaEe1n4WY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 03:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A8FAF, serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Validity
Not Before: Sep 25 03:29:21 2026 GMT
Not After : Sep 27 03:29:21 2026 GMT
Subject: CN=6ab5ea92-7086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:7f:43:c0:f7:48:9c:5b:65:d7:4e:29:e5:
e1:0c:b5:90:0e:58:18:60:42:a7:4a:df:90:e4:b4:
95:6c:a2:70:bd:70:ac:b6:82:43:44:a2:28:38:f2:
69:86:98:a8:46:9d:a7:85:ce:ca:b6:74:55:f8:b1:
6b:dc:e0:5c:e4:25:bf:3b:c0:2e:5d:a4:09:f1:93:
36:49:70:87:62:75:1a:36:23:85:85:b5:c7:c0:82:
ef:8d:8e:c8:df:4b:72:c3:a6:a7:3e:38:b3:2f:7e:
a8:d8:e5:a2:8b:c2:1e:ba:54:bf:c0:c9:aa:d4:da:
55:aa:dc:fe:c0:83:58:ce:c2:45:a5:33:46:fa:e4:
27:67:8c:0f:42:3f:c4:fb:a6:98:df:58:ca:bb:fc:
0f:11:40:32:0d:09:e9:c8:1a:a0:65:9a:b4:53:2a:
c6:3a:b7:53:db:b0:a0:81:d5:ab:3c:a0:00:25:b9:
64:2d:d0:32:49:30:46:24:20:d3:02:9c:5f:16:dc:
6b:a6:83:e0:81:12:79:d0:e7:23:f2:4f:a2:74:d2:
3a:39:cf:70:d3:da:5e:25:19:e4:dc:b4:ce:48:d8:
94:4c:3b:e0:1e:49:50:1d:dd:64:7f:d8:04:5c:38:
a7:75:5c:07:f9:f7:0e:91:5d:50:bd:9b:84:a0:20:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:6C:8F:1E:3E:EF:20:8C:95:EE:9C:70:B6:C2:7A:86:82:B7:A1
X509v3 Authority Key Identifier:
keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:8c:24:02:3d:64:94:20:ba:a9:eb:41:3c:0d:b6:66:eb:c6:
da:67:4e:6c:c0:54:72:5a:7b:05:23:a6:b1:ee:57:d6:1d:5c:
c1:4f:98:08:b2:93:13:da:38:e9:fb:ae:0d:a2:f9:37:6f:8f:
99:4a:c0:30:fc:52:63:98:68:0c:c5:22:1f:d1:26:b9:c6:e5:
b3:ad:81:48:d5:8d:70:e7:87:4e:53:e7:ca:9f:f1:4b:c1:f8:
9e:41:27:3c:70:42:0a:86:2d:35:cf:9a:ba:fb:ba:14:95:3c:
04:b3:ff:a5:e4:3b:82:11:ed:f4:16:dc:f6:b1:af:8c:1d:4d:
d5:5b:cd:6a:6a:00:af:f3:40:b5:d0:59:0f:3c:a1:35:25:30:
19:2c:e2:d1:87:e7:ed:4d:0e:e7:02:fc:24:b9:ad:17:d0:06:
f2:f4:80:ee:e0:f2:86:0c:27:b1:0a:d6:a3:41:39:48:9f:fe:
03:99:4c:7f:37:68:0c:49:88:54:c2:d8:34:76:57:33:31:ac:
a6:92:fe:0e:15:18:17:dd:40:ef:ae:0b:5a:d9:46:ae:aa:ec:
9c:b0:2f:8f:1f:39:92:74:b6:a2:ce:3c:a4:a7:98:21:e5:d5:
18:c1:1d:f5:d2:d5:71:87:41:28:0a:c6:fc:2a:60:c2:0a:d8:
46:f1:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:13:55 2026 by rpki-client