
Error: rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
File: e-SeL48taNn-5zmG1EeTdhak7Yg.mft (raw, json)
Hash identifier: e+SYQmmI/Ao1RkPRFQQvdl/Hxoc6EOnc9QYpjFxgn2c=
Subject key identifier: C4:0C:98:C6:9D:44:28:A7:10:05:92:11:1B:96:59:09:31:61:84:B9
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Certificate issuer: /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial: 4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
Manifest number: 48
Signing time: Fri 25 Sep 2026 05:45:20 +0000
Manifest this update: Fri 25 Sep 2026 05:45:19 +0000
Manifest next update: Sun 27 Sep 2026 05:45:19 +0000
Files and hashes: 1: e-SeL48taNn-5zmG1EeTdhak7Yg.crl (hash: 40vQ2QHVTEyK5qZ541lV8lf0mi4OfJvvhTxr7R9h8Iw=)
2: 9E812784844911F1AC6FBF0FCF1D38B0.roa (hash: Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=)
3: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (hash: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 05:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Validity
Not Before: Sep 25 05:45:19 2026 GMT
Not After : Sep 27 05:45:19 2026 GMT
Subject: CN=6ab60a70-dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:d8:ef:27:4f:99:11:e5:11:bc:92:63:68:
be:58:bf:9f:b9:f9:2f:17:48:66:9c:5b:34:49:f4:
d4:c0:51:79:17:27:2b:de:0a:b2:73:b9:2d:d9:ac:
b9:fc:a5:d3:08:8b:fb:03:12:e4:93:11:b4:76:e8:
28:bd:6e:12:0b:9f:df:f7:6e:63:99:84:c5:e3:3d:
75:49:59:0c:31:a7:dd:dd:4c:cd:7b:94:30:84:a6:
f8:54:11:88:32:49:33:61:47:b0:3d:fd:1a:b7:33:
08:eb:0e:aa:75:a3:1b:53:cb:74:ec:4c:d5:a8:03:
c1:57:d0:06:33:b9:0f:8c:97:21:6e:e9:83:ac:56:
6e:0b:0f:f4:bc:34:fc:f1:76:25:6e:cf:a8:3f:c4:
e5:d4:e8:a3:33:0f:35:3b:80:da:72:56:57:57:7d:
bb:fc:f3:d2:1a:66:5d:64:fc:a8:f7:9f:c8:03:5c:
ec:60:5c:23:23:eb:29:55:1f:e7:9a:45:ca:3c:da:
b8:9f:ad:e0:61:ac:97:9e:75:c0:49:67:3c:cd:8e:
02:f1:3c:2f:7c:42:63:f7:cd:88:1d:d3:65:8f:10:
2e:3b:7b:86:3d:c8:dd:cb:5b:03:46:88:b9:e8:91:
0a:eb:20:ef:96:78:9f:05:dd:bf:d6:4a:a8:23:db:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:98:C6:9D:44:28:A7:10:05:92:11:1B:96:59:09:31:61:84:B9
X509v3 Authority Key Identifier:
keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:de:27:7b:45:36:8f:e7:45:71:93:61:28:3f:cb:51:f8:
29:37:dc:98:3b:87:6e:89:6a:73:98:18:75:25:0d:e7:c7:35:
b5:5b:5e:4c:29:69:a1:32:9c:a6:eb:68:a2:94:a2:b8:54:45:
b5:c5:75:4e:58:4a:68:0f:cd:3b:0d:70:cf:1c:5a:87:1c:5a:
db:e3:7e:78:b1:25:66:ee:86:80:a3:f6:5d:c7:cf:41:55:43:
fb:4d:66:10:93:70:cd:be:fa:4b:bd:75:b5:ed:f2:12:20:d0:
11:c3:ff:67:c1:ca:5f:34:70:a4:29:d4:b8:51:e1:82:63:76:
03:88:89:fc:6e:92:8a:a7:4b:c2:fd:ad:df:11:90:3b:da:55:
c1:09:b9:ce:33:0e:7c:e5:02:c3:42:6d:fd:ce:82:82:d4:ba:
8b:03:b1:75:e7:55:1b:57:ac:24:b7:9c:20:a0:08:03:53:4b:
d5:72:44:94:61:f8:89:00:6e:b1:b3:d0:18:e4:68:d7:43:0e:
fe:1b:2b:67:97:40:9d:34:d9:7d:0a:da:b3:09:b6:2d:b6:1f:
94:cf:6a:43:be:25:13:85:25:5a:60:d1:37:c4:41:7d:ae:5e:
16:7d:70:0b:b6:fb:06:f2:eb:5d:6b:de:99:2a:9f:a7:0d:f1:
5a:21:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:45:12 2026 by rpki-client