
Error: rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
File: 8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft (raw, json)
Hash identifier: b92GJlpYKGz7MsSiBBeA5zJGYt9D58F/XWxDXz6adcQ=
Subject key identifier: F6:0C:02:EE:A2:BE:E4:68:A1:9D:E6:8E:5E:2E:9E:22:3F:7F:2F:08
Authority key identifier: F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
Certificate issuer: /CN=F36DB560AF/serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Certificate serial: 01AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
Manifest number: 01AA
Signing time: Thu 24 Sep 2026 05:03:00 +0000
Manifest this update: Thu 24 Sep 2026 05:02:59 +0000
Manifest next update: Sat 26 Sep 2026 05:02:59 +0000
Files and hashes: 1: 8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl (hash: KpHDiLP+0SueUdzOZ2XaPIgQYvhc5XW6g3KmBXkjuEU=)
2: EF1EDC126F1511F0896E51DFDAE4EC9C.roa (hash: nncn04IJgdyOwnNCorMzliS/IExnEzLZa8RXxvCREP8=)
3: 36A34100A71911F0A69F4CB4DAE4EC9C.roa (hash: QKfK7l11b05pQefRS0a/vN3KNRRCGjDcx7/+8e1H4sA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB560AF, serialNumber=F3FD08864FE415436C1EA108ED5ACFE90D4BB0DC
Validity
Not Before: Sep 24 05:02:59 2026 GMT
Not After : Sep 26 05:02:59 2026 GMT
Subject: CN=6ab4af04-cb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:35:17:b4:1b:c0:b7:cb:8b:77:2b:4f:d7:
c0:c4:43:39:e5:f2:49:78:44:dc:32:50:36:09:db:
b2:c5:dc:20:f6:f3:83:95:b5:3d:c5:8b:ba:b9:47:
04:9a:d9:d1:a0:5d:4f:37:40:4c:6e:ab:f9:9d:37:
27:6d:a2:a1:54:ac:5b:e9:90:1a:19:5b:a0:92:5f:
17:8e:9e:bd:09:f0:d5:ac:b1:74:53:a2:09:94:25:
68:b2:8b:bc:89:57:82:f0:9e:78:7f:e0:6a:d1:68:
dd:f0:d6:d1:5d:01:31:7a:cd:83:63:48:82:c4:db:
8d:89:4e:06:39:48:c5:0f:92:a0:fc:3e:98:65:30:
59:26:fe:0a:27:25:eb:d5:0c:7b:08:db:46:95:3e:
27:06:cb:3f:0b:e4:29:70:f4:e9:af:ab:b7:fd:46:
83:b4:5d:1f:05:1d:d9:fb:13:23:de:c5:3b:4e:57:
b7:be:5d:0a:27:de:b8:d1:20:63:cb:6f:32:39:0b:
19:9d:f5:dc:b7:c9:a4:a7:1d:6c:4e:f9:62:f8:86:
47:13:25:21:69:b3:75:99:92:da:e1:8a:1a:0a:a1:
60:d9:01:cb:b8:1d:f7:69:96:f0:95:98:69:38:94:
51:31:57:6a:0b:4e:a1:06:dc:61:de:e0:d7:67:34:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:02:EE:A2:BE:E4:68:A1:9D:E6:8E:5E:2E:9E:22:3F:7F:2F:08
X509v3 Authority Key Identifier:
keyid:F3:FD:08:86:4F:E4:15:43:6C:1E:A1:08:ED:5A:CF:E9:0D:4B:B0:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB560/8DC5FACE6EFF11F0B3F601D1DAE4EC9C/8_0Ihk_kFUNsHqEI7VrP6Q1LsNw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:b8:de:1b:7e:70:60:e1:e0:27:81:d3:06:57:5b:7c:be:
07:03:37:69:2e:1b:06:f1:b7:c4:fa:19:82:55:32:cf:1f:fa:
c3:d6:fc:f2:96:2f:77:0c:c5:90:51:4b:f7:6a:7a:29:96:80:
46:09:5b:a8:f3:76:a6:80:73:87:9b:18:d3:a4:58:d7:d9:aa:
cd:48:b9:15:26:60:57:2f:68:77:09:65:a9:7b:f2:50:4c:82:
c6:17:86:0a:14:56:57:de:f6:73:32:83:f4:1c:fa:87:9a:d6:
11:27:d8:85:11:fc:f7:30:f9:fb:18:ca:a5:98:6e:76:53:ab:
75:8c:7e:1d:c0:49:27:26:d2:3f:f7:b8:18:f4:64:56:19:3d:
89:52:3f:4f:97:cb:5a:e1:b2:46:49:22:e7:b3:27:ae:68:c2:
fa:15:df:aa:21:27:a7:2f:0b:17:b2:43:23:c1:dc:41:45:61:
02:50:7a:89:3d:e0:5f:a5:0f:1b:56:8d:b4:6c:a4:37:1e:6d:
3c:72:49:c9:3a:0f:2c:13:93:e5:5b:2d:25:03:9e:46:89:81:
17:76:06:6c:6d:c1:f0:e5:45:27:cb:6b:59:e7:71:11:2b:4b:
78:73:54:06:b8:07:63:a9:78:4f:ea:9b:66:04:5e:4c:5d:aa:
05:ee:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:25 2026 by rpki-client