
Error: rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File: IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier: 2mFiCxNxjoUFfSsLj/MTa58RTXuMBDaV1e4F8YWTCWs=
Subject key identifier: 86:81:82:3A:65:D2:12:EB:68:DD:4D:36:78:0C:74:73:AD:74:C2:6F
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer: /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial: 010D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number: 010B
Signing time: Sat 14 Nov 2026 05:27:28 +0000
Manifest this update: Sat 14 Nov 2026 05:27:27 +0000
Manifest next update: Mon 16 Nov 2026 05:27:27 +0000
Files and hashes: 1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: /c0fpI5XgtsaMKx63RTg4bBEdcg97H1g4zWAjctNHbY=)
2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Validity
Not Before: Nov 14 05:27:27 2026 GMT
Not After : Nov 16 05:27:27 2026 GMT
Subject: CN=6af7f13f-a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:48:80:6a:58:e8:95:10:12:e0:59:f8:90:
1f:9f:15:13:f8:e0:c5:fd:b6:0a:2f:63:2a:c3:bc:
56:2f:9d:89:90:ac:61:4a:dd:3a:50:d2:5f:cc:c9:
21:a4:f5:ea:4a:a8:95:75:a6:4c:c8:34:d4:5d:1b:
dc:6b:84:2b:31:39:ff:ec:b7:ef:ba:a1:66:a5:59:
e1:6e:6a:22:d3:62:7a:b6:41:4c:a8:50:f6:b1:a9:
88:03:8b:ea:1c:8c:ae:bd:a9:71:5c:d0:49:c0:24:
40:f4:1e:a8:c0:da:9d:2e:b7:33:ec:59:7f:de:96:
c8:57:d8:f2:de:e1:2a:60:fc:1e:28:54:b6:47:9b:
d4:f9:64:1d:c6:ec:3f:ac:11:18:64:76:99:10:5d:
5d:50:a3:f6:7b:47:7f:e1:71:21:24:e3:3d:5e:76:
9e:c4:40:78:e5:4c:d7:17:ed:d9:2e:13:bf:cc:61:
5f:2d:f8:56:1d:5a:b9:de:e7:0c:14:69:0f:46:d1:
92:f0:65:ec:72:c7:12:7b:66:35:04:79:d6:82:8c:
14:f1:ad:fb:0d:5d:aa:02:f8:3d:b7:f2:e1:c4:31:
fa:9d:9a:c1:c7:f0:32:51:71:28:d1:50:87:ee:89:
5e:89:4f:be:6a:5d:e8:98:e9:41:39:98:04:df:23:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:82:3A:65:D2:12:EB:68:DD:4D:36:78:0C:74:73:AD:74:C2:6F
X509v3 Authority Key Identifier:
keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:9b:ec:f5:32:57:15:50:21:26:10:65:94:e9:0f:c2:3a:
15:b4:7c:a7:b4:89:fc:37:b9:3f:77:ae:df:1f:96:01:5d:12:
05:de:3d:28:4e:3f:49:a8:e8:c6:85:f0:1b:0f:31:28:fd:7d:
4b:8e:57:fc:d5:a9:33:20:05:1a:29:09:4c:1e:2f:dc:00:9c:
8b:ee:d6:9b:db:31:54:50:c6:16:b9:10:f3:33:82:42:98:5d:
20:97:24:3f:31:ae:8b:b5:72:d2:0f:8c:47:e7:46:d9:d4:20:
23:c0:f1:dc:2e:62:65:aa:15:01:c9:f1:2c:fc:59:b7:a1:cc:
b4:55:7a:57:3c:8f:8c:76:fc:e2:d0:af:83:89:63:d1:ba:c3:
3d:0e:a9:2a:0b:10:df:bd:d0:59:29:4f:3f:56:ff:f9:bc:77:
ea:5e:ca:64:c8:57:a9:ac:27:35:98:64:0d:18:e5:f4:37:20:
a8:68:d8:c2:e8:c5:ee:34:ba:20:c0:16:5b:d8:15:61:99:f6:
9e:aa:f6:21:bb:0c:18:1d:da:46:55:8a:a0:3e:c5:ee:cb:55:
39:6e:0e:07:62:94:16:01:64:a3:79:75:06:9a:c9:de:34:36:
ad:ca:e2:20:65:20:88:6f:58:17:d8:5e:20:04:c7:f3:d3:3f:
89:04:fe:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:34 2026 by rpki-client