
Error: rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
File: I_gUu0fVw67dUQPzb124opvj1x0.mft (raw, json)
Hash identifier: C5JtsbGATO0Ikpav4gel15HNY/Ul6m/Gs+hNNRTqQ0w=
Subject key identifier: A3:DF:BE:56:F8:BF:4B:49:A6:ED:EC:66:E1:FD:1D:5B:8C:64:54:01
Authority key identifier: 23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
Certificate issuer: /CN=F36D9B5BAF/serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Certificate serial: 10AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
Manifest number: 1093
Signing time: Wed 14 Oct 2026 00:51:22 +0000
Manifest this update: Wed 14 Oct 2026 00:51:21 +0000
Manifest next update: Fri 16 Oct 2026 00:51:21 +0000
Files and hashes: 1: I_gUu0fVw67dUQPzb124opvj1x0.crl (hash: rrrqWvefmH825nrOVf3qIE7CBm33XvxJokn1IYqIRWM=)
2: 86606974028F11E98C883E0FF8AEA228.roa (hash: IsZ6cJV4+0zN9ms5jaDsieqPGhductkQxgMv7qyHTNI=)
3: 48577586FE1C11E8BD980782F8AEA228.roa (hash: H3dWHGNGyzufXdXyAcUTICFJNlUoK78HWc23kkq1F/s=)
4: 5F34A6C2DE7D11EBBAC31B64F8AEA228.roa (hash: MWk8EFTOF3/10HYUuFgbnJ/fqlc/s+3SXXavsJ4h6cE=)
5: 3D3E31C6498E11EFBB02DB76762E951A.roa (hash: u0Z0y5U3GM/VfkEEbg/zEJIp4QkqBJm1umtwXpHXzsE=)
6: 132EAD18DE7D11EB86A3C563F8AEA228.roa (hash: iZGBXlM3XPYurzi9+dHJxzDxI/7/keWoCIvY/ASFKFI=)
7: 6A1AC78E8B7911F1BD1178F0CE1D38B0.roa (hash: QUOWHmwzaypfkLt4gq3IZwQCB7NAzRf3Pmho3pE3kuQ=)
8: B7C01426FED211E89B120309F8AEA228.roa (hash: Cu6wxRaLD5ODNZaYGqU1rGwfd0FTt/GsL/H9WnzG7Vs=)
9: 36E8B606FE1D11E88DCDCE82F8AEA228.roa (hash: SvO8wCmqFCCs7pvZRw0lkVxnGHmag+waEJa8/soA19E=)
10: B084894E8B7911F1AFD2E0F0CE1D38B0.roa (hash: rPJiD9pbEc7Ixy/dsXmR+8yF3poxIOXlvyQ/6UYx7yo=)
11: 9C9A7614DE7C11EBB1191063F8AEA228.roa (hash: syinLKpAl//f2BEe6KYX31IZj04lDHjk0Tp/mellwQo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 00:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAF, serialNumber=23F814BB47D5C3AEDD5103F36F5DB8A29BE3D71D
Validity
Not Before: Oct 14 00:51:21 2026 GMT
Not After : Oct 16 00:51:21 2026 GMT
Subject: CN=6aced20a-7842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7c:d0:6a:b1:b9:32:a9:c8:aa:4f:b9:ef:f6:
a0:22:d8:2c:5d:c9:76:a8:d4:e3:f2:07:b0:de:66:
f3:47:9c:c7:65:34:36:4b:b5:54:bf:2f:1a:30:ae:
4c:56:22:a6:4c:76:48:3a:c1:d7:4c:a5:0a:4e:cb:
09:21:79:a2:41:81:c5:46:45:45:ce:9f:5f:c3:71:
d6:6a:e4:52:66:2e:68:c3:1a:c9:4e:35:13:18:3e:
04:2a:25:5d:3a:26:66:72:33:82:29:9d:41:72:34:
b3:c2:e6:0e:73:c3:b3:41:7b:76:5d:74:d9:26:bb:
32:5b:65:9b:fa:57:de:48:5f:89:5c:d5:d2:18:c2:
76:e9:df:cd:9e:cb:c3:6b:23:d2:0a:01:1f:b9:63:
a9:1c:51:cb:67:2c:bc:aa:42:87:ed:a5:6a:db:fc:
5b:5b:c0:7f:8b:42:66:69:79:71:8a:d1:bb:71:9d:
e4:8f:f0:ce:bd:1c:db:17:85:45:df:56:11:60:15:
ea:f0:a5:65:09:76:df:fb:c7:a9:28:e4:ea:69:0b:
54:4f:58:32:44:a1:1e:f3:8d:73:e1:59:29:ac:c5:
1d:64:dd:af:11:69:4c:3e:cc:d8:72:5d:87:6e:43:
fb:4c:aa:c7:33:f2:c5:4b:7e:9e:6b:3c:12:23:d3:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:BE:56:F8:BF:4B:49:A6:ED:EC:66:E1:FD:1D:5B:8C:64:54:01
X509v3 Authority Key Identifier:
keyid:23:F8:14:BB:47:D5:C3:AE:DD:51:03:F3:6F:5D:B8:A2:9B:E3:D7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I_gUu0fVw67dUQPzb124opvj1x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/9E1BD378135A11E5B68D4286F8AEA228/I_gUu0fVw67dUQPzb124opvj1x0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1b:08:f9:94:32:98:f7:9c:be:cb:61:45:a1:9e:4c:97:8c:
30:81:c2:75:d6:64:34:4f:57:72:e2:c5:ac:53:1b:c5:7c:db:
37:99:67:aa:e4:2d:01:9b:6a:eb:ff:1e:b5:30:fc:75:af:1e:
65:30:59:e9:db:7e:e2:f7:92:c1:92:8e:c8:c7:e0:44:fd:26:
d6:62:03:ec:14:75:ef:00:2a:9a:aa:b0:4e:20:a4:ad:f4:b5:
31:9c:14:84:bc:10:13:85:57:fb:1f:9c:90:f6:c4:2b:bd:54:
9a:06:07:7a:cc:c8:55:3b:a8:72:3f:6a:86:89:30:18:dd:16:
c3:21:16:05:b2:f1:75:4a:30:33:bc:d3:9e:0f:c9:98:0c:ba:
f4:89:60:76:d7:0f:4d:b6:cf:3e:d4:5c:fd:c8:da:4b:c2:28:
01:92:be:be:a2:85:52:42:38:45:ac:21:41:ea:3e:0c:24:ec:
6a:a2:9a:c9:f1:e4:dd:fb:1a:49:00:65:4c:ac:7e:4f:3b:b9:
b9:c3:44:51:4b:85:46:7a:ea:9c:09:48:56:e2:17:09:8a:72:
29:73:dc:17:7f:5f:27:7b:31:77:fc:87:92:62:12:c7:68:9a:
64:e8:de:d1:73:17:4e:a9:e1:98:f4:09:c4:ee:bf:0e:32:8f:
ae:b3:5d:de
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDlCNUJBRjExMC8GA1UEBRMoMjNGODE0QkI0N0Q1QzNBRURENTEwM0YzNkY1REI4
QTI5QkUzRDcxRDAeFw0yNjEwMTQwMDUxMjFaFw0yNjEwMTYwMDUxMjFaMBgxFjAU
BgNVBAMTDTZhY2VkMjBhLTc4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDufNBqsbkyqciqT7nv9qAi2CxdyXao1OPyB7DeZvNHnMdlNDZLtVS/Lxow
rkxWIqZMdkg6wddMpQpOywkheaJBgcVGRUXOn1/DcdZq5FJmLmjDGslONRMYPgQq
JV06JmZyM4IpnUFyNLPC5g5zw7NBe3ZddNkmuzJbZZv6V95IX4lc1dIYwnbp382e
y8NrI9IKAR+5Y6kcUctnLLyqQoftpWrb/FtbwH+LQmZpeXGK0btxneSP8M69HNsX
hUXfVhFgFerwpWUJdt/7x6ko5OppC1RPWDJEoR7zjXPhWSmsxR1k3a8RaUw+zNhy
XYduQ/tMqscz8sVLfp5rPBIj036ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUo9++
Vvi/S0mm7exm4f0dW4xkVAEwHwYDVR0jBBgwFoAUI/gUu0fVw67dUQPzb124opvj
1x0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ5QjVCLzlFMUJEMzc4MTM1QTExRTVCNjhENDI4NkY4QUVBMjI4L0lfZ1V1
MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lfZ1V1MGZWdzY3ZFVRUHpiMTI0b3B2ajF4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDlCNUIvOUUxQkQzNzgxMzVBMTFFNUI2OEQ0Mjg2RjhB
RUEyMjgvSV9nVXUwZlZ3NjdkVVFQemIxMjRvcHZqMXgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2Gwj5lDKY95y+y2FFoZ5Ml4wwgcJ1
1mQ0T1dy4sWsUxvFfNs3mWeq5C0Bm2rr/x61MPx1rx5lMFnp237i95LBko7Ix+BE
/SbWYgPsFHXvACqaqrBOIKSt9LUxnBSEvBAThVf7H5yQ9sQrvVSaBgd6zMhVO6hy
P2qGiTAY3RbDIRYFsvF1SjAzvNOeD8mYDLr0iWB21w9Nts8+1Fz9yNpLwigBkr6+
ooVSQjhFrCFB6j4MJOxqoprJ8eTd+xpJAGVMrH5PO7m5w0RRS4VGeuqcCUhW4hcJ
inIpc9wXf18nezF3/IeSYhLHaJpk6N7RcxdOqeGY9AnE7r8OMo+us13e
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:56:13 2026 by rpki-client