
Error: rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
File: QOQ11_MUFa_OV9DelQm3hi-WClc.mft (raw, json)
Hash identifier: MNi+3HINiYmoxZcQnaW6ZRk5AbDdlJ7VGJNhWNqPwBw=
Subject key identifier: 39:38:C3:72:3D:81:60:14:A6:77:F6:D2:C1:CC:D4:73:54:D3:9E:DF
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Certificate issuer: /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial: 0AD1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
Manifest number: 0ACE
Signing time: Sun 11 Oct 2026 01:21:18 +0000
Manifest this update: Sun 11 Oct 2026 01:21:17 +0000
Manifest next update: Tue 13 Oct 2026 01:21:17 +0000
Files and hashes: 1: QOQ11_MUFa_OV9DelQm3hi-WClc.crl (hash: fXpTtWyT7xe83GQL5gbExv5CmKCFMfVonBTMPWDhMSY=)
2: DD1E8AE47BAB11E98D80B33FF8AEA228.roa (hash: BTzcxln9lknQk/0gio9sglyD4baCdk8/WR9c29o94Hk=)
3: 881335FA7BAA11E9A046BD3EF8AEA228.roa (hash: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=)
4: 54220D207BAA11E9BEE08A3EF8AEA228.roa (hash: 6mAfvCPcBikixr82UHSocOCucUOi7FCh+gOmIS/+gHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Validity
Not Before: Oct 11 01:21:17 2026 GMT
Not After : Oct 13 01:21:17 2026 GMT
Subject: CN=6acae48d-059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:1b:33:74:e5:07:4c:83:50:2f:3d:a3:ca:
f5:5e:23:65:f3:ff:65:48:6f:f6:22:07:a0:03:fc:
42:cc:3a:cd:11:61:1e:a9:e8:11:9b:97:a4:c3:67:
8a:14:c4:90:3b:a5:d0:7d:c1:2a:0a:6a:ae:ab:2e:
cd:25:28:87:3f:74:90:93:1c:44:94:14:7b:de:62:
f4:0c:f7:cb:61:dc:3a:c8:83:4e:e0:66:0f:4d:c6:
27:c1:3f:a3:88:db:1b:c8:2c:74:84:75:78:6f:92:
ca:63:a4:31:27:61:16:ce:dc:45:24:8f:cb:8b:08:
e8:07:b6:5c:76:8c:98:29:ff:f0:76:03:40:77:cb:
3e:93:b3:e4:1f:fd:61:2f:5d:90:08:8e:09:90:6a:
e8:b7:2b:22:33:56:69:96:30:d4:a1:29:99:e0:a5:
6c:8d:9f:32:22:19:4d:69:04:71:6d:4a:02:a5:9f:
ad:78:8c:1d:38:54:25:36:b1:4f:80:5d:e9:7a:2e:
bd:56:dc:46:63:46:05:56:7a:61:65:5f:ed:5e:ab:
75:c4:c5:8c:74:60:9e:1c:f3:ab:e5:80:fa:d3:b4:
f6:46:f9:45:c3:72:ba:89:8d:15:66:66:a1:65:10:
de:ac:96:04:f9:da:07:e4:03:a7:0c:f1:5a:2f:e6:
8e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:C3:72:3D:81:60:14:A6:77:F6:D2:C1:CC:D4:73:54:D3:9E:DF
X509v3 Authority Key Identifier:
keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:46:b4:6b:30:25:1e:cc:d4:99:a4:a0:1d:7f:3d:e8:77:1c:
6b:3c:e7:e7:9c:1a:10:75:61:73:5c:04:1c:6c:0f:8f:cb:21:
dc:02:f0:50:b0:76:c5:4e:59:a6:6a:c5:d0:47:d2:ef:75:1b:
85:75:68:38:f5:db:ab:ff:09:a7:42:61:f3:75:b9:04:8a:d3:
69:38:f2:de:99:78:f7:d8:52:88:e3:16:a4:57:ff:7d:52:1a:
ba:82:12:c5:e7:81:6c:c5:3f:31:e6:8f:6b:43:5c:5d:ee:56:
41:04:37:d9:ce:27:30:a6:79:ef:90:8c:84:2a:b5:f0:18:2d:
d3:21:89:ba:f9:2f:a9:7b:58:28:07:9c:fe:11:0a:9b:ec:90:
27:45:da:8f:84:58:20:a2:e4:5f:48:f6:66:ae:2b:9a:9b:10:
c6:37:f0:ec:30:35:fb:ae:d6:b2:45:fa:83:8d:7f:e3:c1:a6:
45:9d:59:aa:8c:cf:74:d5:98:0e:44:07:7c:f4:39:95:7e:46:
10:3a:07:50:b1:ae:ce:75:2b:80:1b:35:26:bb:a6:20:db:e2:
2c:1f:0c:ec:58:92:cc:a2:68:0c:b9:b0:23:95:cd:00:d2:f0:
38:b3:77:3f:87:57:d2:ec:39:43:94:1b:29:bb:99:1c:9f:9a:
38:51:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:09:46 2026 by rpki-client