
Error: rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
File: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft (raw, json)
Hash identifier: zreE4oPBqDsW1pVY7E0ToPsBXPuVvd0tplHNukPRZdw=
Subject key identifier: 29:8E:8B:20:48:95:7D:01:39:4F:65:07:B9:6B:EC:7E:95:14:2C:78
Authority key identifier: E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
Certificate issuer: /CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Certificate serial: 0ACD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
Manifest number: 0AC3
Signing time: Sat 26 Sep 2026 01:22:58 +0000
Manifest this update: Sat 26 Sep 2026 01:22:57 +0000
Manifest next update: Mon 28 Sep 2026 01:22:57 +0000
Files and hashes: 1: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl (hash: W1wuP2Z3iINvGGZSueuge3xHOlJK3rFXzuHFXWmu30s=)
2: A70D973E035811EB8CD6BB2EF8AEA228.roa (hash: xD1TsSOLzb9zgs5taA+QevFCLmTa0OLA9qXS/G/GWVw=)
3: 6FCCF99E035911EBA2969D2FF8AEA228.roa (hash: Brj3mGjB3Yf03eWIJCSVbmDY44O5T8140En+VTMw/XM=)
4: 4AAB98F0035911EB9D53632FF8AEA228.roa (hash: u6MKKtyNGkyNHWMBVkyzfCJjg2ohp3vSDpNE9KtffTs=)
5: 08E422B6035911EBB3240F2FF8AEA228.roa (hash: /Zi4DjYvbwyH8lralhYmtbRDBTQdUunZaejcHcESqgQ=)
6: 505E6CAAF83111F082A4E095DAE4EC9C.roa (hash: w5mN97uCWsUBvGHsC6kiqTtZ9/reHDjZERztz56UvmE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2765 (0xacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D6E6DAF, serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Validity
Not Before: Sep 26 01:22:57 2026 GMT
Not After : Sep 28 01:22:57 2026 GMT
Subject: CN=6ab71e72-d524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:55:3c:21:df:95:be:3d:09:ca:b5:6f:3e:
a4:63:fc:e5:60:7a:80:3c:70:a1:c6:ac:f3:b7:c6:
57:57:23:d0:13:b0:32:aa:f2:c1:ef:2b:c5:86:ad:
84:a6:69:63:71:e5:7f:08:95:a6:eb:f0:a1:c7:01:
5b:96:c5:ad:e7:32:af:5a:da:ca:25:51:58:87:4b:
4b:36:00:93:e8:6c:0a:a8:f6:8c:5d:53:cb:16:45:
7b:69:0b:e2:22:7a:b9:dd:81:13:91:84:3d:b6:9e:
5a:de:8d:3f:9f:9c:87:94:96:f6:a0:3d:ec:29:f9:
45:91:0e:56:bc:2d:b3:7c:9e:31:5d:bc:6e:5c:51:
5d:80:6c:a5:4b:e4:4f:9c:25:0a:95:3a:71:b6:51:
b5:2e:aa:8f:86:ee:61:9c:7d:a6:b8:0c:54:ea:5a:
9b:48:cb:d9:52:68:74:2d:e9:7f:bd:e7:50:2f:ad:
03:df:a9:d5:b4:22:fd:9f:a2:24:5e:59:f9:04:b1:
45:1a:29:d2:65:25:8a:6a:29:3c:cd:59:08:04:17:
67:75:d2:77:49:c3:a9:c6:30:9b:c8:9a:55:60:ba:
d7:c2:a3:90:a4:35:8e:a1:2c:78:9b:f7:1f:38:22:
5d:d5:f9:27:0b:8e:68:11:4b:fa:55:2e:b1:49:c4:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:8B:20:48:95:7D:01:39:4F:65:07:B9:6B:EC:7E:95:14:2C:78
X509v3 Authority Key Identifier:
keyid:E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:96:ab:22:49:f4:8d:c7:bf:53:a9:53:15:cb:40:92:be:60:
a7:eb:0b:3e:e5:5f:1f:23:58:4c:bf:2d:6d:b6:80:1e:a1:5e:
2a:fe:53:d9:ff:76:b7:4f:1c:9e:d9:a0:b4:92:d6:c0:71:b4:
09:21:00:c8:86:22:8c:2e:5e:2f:c6:37:fc:1d:6a:6b:03:32:
6e:36:c1:02:3d:f7:48:0d:64:10:f0:82:85:47:2b:3b:7a:86:
10:f3:d5:8f:50:c4:e3:33:3e:3b:1f:58:70:af:ff:db:9e:8a:
37:b4:66:99:d6:aa:f8:47:95:da:42:90:ff:58:d1:97:8f:57:
a7:ee:40:8d:50:c2:00:15:bc:8a:99:ae:f7:4b:bd:c0:d9:ab:
45:75:53:cd:46:d3:14:0a:24:e9:af:d6:77:ed:c9:dc:23:1d:
69:c7:65:a0:22:b4:0f:56:45:cc:7c:b1:61:be:28:d9:fd:f2:
8d:e8:25:45:86:fd:47:36:a3:e4:b8:14:ca:77:3e:b1:09:6a:
44:b0:49:b2:e0:4c:6b:23:a0:14:42:46:31:72:1b:98:eb:be:
fd:c0:19:7b:2c:a9:f0:fa:e8:b1:87:0f:d2:df:3e:39:ac:5d:
b1:fa:6a:d9:82:b3:60:4a:87:66:21:09:c2:1e:22:e4:ea:a1:
87:81:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:25 2026 by rpki-client