
Error: rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File: QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier: nXiFjOR9jb55n887rJN6u8Vk1Y38ZUeBTgxA7ARuBE8=
Subject key identifier: 32:5D:7F:6A:73:81:92:81:59:82:80:38:34:28:69:13:22:A9:FD:CC
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer: /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial: 01DD
Authority info access: rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number: 01DB
Signing time: Sat 26 Sep 2026 04:56:02 +0000
Manifest this update: Sat 26 Sep 2026 04:56:02 +0000
Manifest next update: Mon 28 Sep 2026 04:56:02 +0000
Files and hashes: 1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: hJMCCvT+gpOe2h+tbe5yisuiz8Ro3eULYLcChv4d65Q=)
2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Validity
Not Before: Sep 26 04:56:02 2026 GMT
Not After : Sep 28 04:56:02 2026 GMT
Subject: CN=6ab75062-33d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:32:2f:4a:d1:f0:75:10:ff:a0:0e:ee:b7:
4c:f6:11:20:18:28:5e:58:47:3a:8b:fc:42:f1:a2:
f4:a1:f6:22:8b:89:ee:cb:04:45:2c:d7:65:ec:8f:
4e:a2:be:56:f0:fe:44:ec:0a:42:ab:c2:3b:98:cb:
40:28:fc:98:70:c3:6e:7c:52:da:4e:06:bd:cb:9d:
80:33:88:f5:e4:ad:62:b6:d6:de:93:8e:49:5b:33:
99:96:0b:1f:5c:a7:25:a8:07:0e:83:70:42:6c:07:
33:6a:b9:50:bd:c9:24:f1:b6:5c:77:25:a2:64:67:
77:a6:e4:83:c2:37:0e:74:60:b8:d4:20:1c:21:1b:
e3:34:e4:ad:23:7f:26:88:ec:fd:87:80:6a:4d:6f:
3d:38:3e:f3:34:9b:44:64:2d:35:c1:d9:89:45:9c:
86:a8:1c:74:40:41:83:17:63:8e:39:7f:94:56:bc:
22:2d:68:b6:74:cc:2a:60:0e:4f:5e:da:af:e3:1d:
2a:04:21:71:3c:75:b0:03:ae:f9:65:89:a2:64:2b:
d7:bb:17:c8:4a:e4:2f:86:f5:7e:a8:48:c0:e6:6b:
5e:0e:05:34:b8:bc:31:32:f3:a4:f6:72:aa:47:07:
a8:fa:c2:e6:0c:8a:de:70:cb:ad:4e:42:c3:e8:fa:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:7F:6A:73:81:92:81:59:82:80:38:34:28:69:13:22:A9:FD:CC
X509v3 Authority Key Identifier:
keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:63:43:2b:2e:47:7b:89:0e:35:75:f0:b8:d9:76:7b:3b:ad:
98:9b:95:4b:e8:3d:fb:1a:84:3a:ba:1a:24:b2:96:a8:c2:b3:
85:84:20:a2:1a:8b:df:33:e7:fa:d4:0f:95:ae:8a:b8:d4:20:
74:3c:03:6d:20:7d:bd:3c:43:4a:9b:b3:33:d3:ed:b2:29:08:
5d:2b:80:dd:db:11:2d:aa:7e:a3:de:af:3e:03:6f:2f:9e:20:
fe:d7:2f:7d:b1:b5:dd:5b:72:c2:04:0e:f5:02:ae:a5:7a:f7:
d9:3d:bb:50:90:e0:eb:86:bc:65:e8:8e:fd:a8:28:5b:28:6b:
54:9c:d3:76:1e:e9:1b:80:e7:75:e5:4d:1b:d2:86:a2:2e:46:
ce:4a:f5:48:41:43:b1:25:76:fe:15:ea:c4:42:97:ae:42:35:
0e:5c:34:73:f4:48:52:e6:97:34:55:51:11:86:05:21:86:7b:
23:11:93:94:39:68:80:a8:73:2f:dc:d7:df:5c:3a:d0:19:aa:
fa:a8:95:aa:e2:f0:89:3a:7c:85:b0:05:1f:de:3d:94:5c:08:
d7:c5:12:56:78:fc:1c:bb:95:b6:4a:98:1c:b6:49:55:ee:8a:
dc:65:e7:21:28:ca:2e:7d:2a:06:fb:45:c3:8d:26:ad:f3:bb:
5c:c2:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:35:41 2026 by rpki-client