
Error: rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
File: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft (raw, json)
Hash identifier: y+b3K9JxnER2mvIxJxw9/lBQsCZuKeVqqwXldiG/Izs=
Subject key identifier: C5:13:D7:80:CD:0B:02:40:9B:A4:0A:4F:A3:81:F5:E7:72:62:BB:13
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Certificate issuer: /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial: 0164
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
Manifest number: 015F
Signing time: Sun 15 Nov 2026 05:16:55 +0000
Manifest this update: Sun 15 Nov 2026 05:16:54 +0000
Manifest next update: Tue 17 Nov 2026 05:16:54 +0000
Files and hashes: 1: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl (hash: yKRMp3nuOoSIgLTqz39ezLcB0m/6UtbLHCZ3zC7qLxQ=)
2: D84805CA842911F1A87FADD3CE1D38B0.roa (hash: Bb8BvIkxNfUEG8CAuLAlAE29AWUszoCKzzlh0ch3r/w=)
3: 0DBF4A56842A11F1957CDAD3CE1D38B0.roa (hash: Fgl+emJScu5akPkuue+0W6zA/h0FF95KqJIyjubrPFc=)
4: 4A5868D04DD911F1ABB268C4CE1D38B0.roa (hash: u0pAqj+9c5bW6sNCCZBPt13ns/bNVxnzw0j3JVWmkPI=)
5: ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa (hash: J8FadMK7Ea9bvlPNiTTJTPLhHgQY+iwpbXSBMwmh9Yw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Validity
Not Before: Nov 15 05:16:54 2026 GMT
Not After : Nov 17 05:16:54 2026 GMT
Subject: CN=6af94047-5e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:82:c7:ae:07:28:cb:ed:32:0d:1e:54:d1:
78:32:00:08:9a:18:b6:be:dd:ad:3a:56:47:1a:10:
3c:99:0f:45:69:72:fd:05:cd:1a:a2:3e:d5:ab:c7:
a2:eb:65:ff:dc:1b:bd:8a:81:70:2d:9a:77:3a:2f:
69:fd:b3:e0:3c:61:e1:4f:9d:d0:b9:b5:de:55:33:
bf:96:88:73:9d:a7:c7:93:b3:83:d5:60:e1:04:09:
18:e3:f1:81:74:ed:22:e5:43:62:a3:9b:8b:72:b3:
2d:a8:0e:5a:99:bd:bb:2e:0f:a0:1e:14:41:b1:ae:
c9:12:5e:fe:b0:bb:6c:87:71:aa:e1:86:3c:7a:bf:
2f:7b:b4:e3:e2:18:49:3b:d5:6a:52:a8:61:d0:11:
d2:e6:4a:52:d6:3e:16:e0:bb:1e:ce:18:d1:ac:77:
7e:2c:ac:ac:4b:f8:be:f8:3e:c4:22:6f:e5:f7:26:
4b:23:db:8c:1d:c6:6f:26:8d:35:f0:9b:ec:d5:00:
10:9a:ff:4e:e2:5a:52:a6:56:87:55:db:88:50:6b:
6f:66:7c:a4:97:40:f2:b2:ab:03:90:77:90:70:93:
82:0f:e4:ad:73:62:1e:c3:89:d8:ac:ac:91:ea:8d:
af:a7:81:de:fc:26:d4:f1:d2:e3:5b:23:77:4b:d3:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:D7:80:CD:0B:02:40:9B:A4:0A:4F:A3:81:F5:E7:72:62:BB:13
X509v3 Authority Key Identifier:
keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:65:1e:6d:1d:6a:60:56:83:cb:c8:95:fc:db:7b:fb:e6:
94:e5:26:f3:cb:e3:9e:9a:f6:d8:af:7f:92:3d:4e:b9:e6:52:
bb:f8:06:fe:9e:fc:38:b2:bf:6d:be:d7:5a:2a:2f:fb:15:93:
a9:fd:d4:07:df:fe:25:7f:9a:4e:b5:c6:d1:ce:91:b5:22:13:
8d:38:83:90:59:bc:96:40:45:af:ad:bb:c9:2c:33:7e:57:6a:
e1:d2:1b:e0:a3:ba:46:d5:ae:43:e1:81:5d:6c:f3:92:a3:3b:
c7:8c:07:ff:87:c5:81:e2:15:79:81:8a:ec:5e:86:b5:dc:5a:
c7:c4:83:6a:b2:aa:8a:e2:e1:0b:8b:ef:a0:03:ba:ca:ec:91:
dd:26:46:29:fe:b3:7e:55:49:a0:49:a5:16:52:f9:25:7c:8e:
ef:77:50:65:96:85:ab:e4:b6:a2:54:ea:ab:37:7a:4a:23:18:
63:2a:e1:8d:55:e1:95:ab:58:fc:00:b2:d7:99:e0:d8:96:54:
80:09:fe:41:46:61:5a:d8:e1:c9:40:5b:65:28:11:82:f1:b6:
91:5c:8f:37:e0:2a:ac:5e:ba:81:dd:47:92:72:88:96:22:aa:
b1:b3:d3:93:2c:ee:14:66:23:53:a8:cc:b9:af:d9:e5:f2:b1:
69:b3:2c:74
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0UyOTBBRjExMC8GA1UEBRMoNDYxRkQ5Qjg2MkE2ODI5QUUxRTRGRUQyQUMxMjQ2
QjJERDBDNzkxNDAeFw0yNjExMTUwNTE2NTRaFw0yNjExMTcwNTE2NTRaMBgxFjAU
BgNVBAMTDTZhZjk0MDQ3LTVlNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV24LHrgcoy+0yDR5U0XgyAAiaGLa+3a06VkcaEDyZD0Vpcv0FzRqiPtWr
x6LrZf/cG72KgXAtmnc6L2n9s+A8YeFPndC5td5VM7+WiHOdp8eTs4PVYOEECRjj
8YF07SLlQ2Kjm4tysy2oDlqZvbsuD6AeFEGxrskSXv6wu2yHcarhhjx6vy97tOPi
GEk71WpSqGHQEdLmSlLWPhbgux7OGNGsd34srKxL+L74PsQib+X3Jksj24wdxm8m
jTXwm+zVABCa/07iWlKmVodV24hQa29mfKSXQPKyqwOQd5Bwk4IP5K1zYh7Didis
rJHqja+ngd78JtTx0uNbI3dL052RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxRPX
gM0LAkCbpApPo4H153JiuxMwHwYDVR0jBBgwFoAURh/ZuGKmgprh5P7SrBJGst0M
eRQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFMjkwLzNGOTkxM0M2RDRDMjExRjA4MjBDNzdEN0RBRTRFQzlDL1JoX1p1
R0ttZ3ByaDVQN1NyQkpHc3QwTWVSUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JoX1p1R0ttZ3ByaDVQN1NyQkpHc3QwTWVSUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0UyOTAvM0Y5OTEzQzZENEMyMTFGMDgyMEM3N0Q3REFF
NEVDOUMvUmhfWnVHS21ncHJoNVA3U3JCSkdzdDBNZVJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjCWUebR1qYFaDy8iV/Nt7++aU5Sbz
y+OemvbYr3+SPU655lK7+Ab+nvw4sr9tvtdaKi/7FZOp/dQH3/4lf5pOtcbRzpG1
IhONOIOQWbyWQEWvrbvJLDN+V2rh0hvgo7pG1a5D4YFdbPOSozvHjAf/h8WB4hV5
gYrsXoa13FrHxINqsqqK4uELi++gA7rK7JHdJkYp/rN+VUmgSaUWUvklfI7vd1Bl
loWr5LaiVOqrN3pKIxhjKuGNVeGVq1j8ALLXmeDYllSACf5BRmFa2OHJQFtlKBGC
8baRXI834CqsXrqB3UeScoiWIqqxs9OTLO4UZiNTqMy5r9nl8rFpsyx0
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:41:15 2026 by rpki-client