
Error: rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File: YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier: JYWsIBKsuxotYdDv5KapCI4Mh+cQ7/tBeau7dMpFug8=
Subject key identifier: 2C:5F:09:40:7B:22:43:B6:8C:66:01:52:64:C0:E1:72:2B:BE:01:1C
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 068F
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number: 0686
Signing time: Mon 28 Sep 2026 02:42:48 +0000
Manifest this update: Mon 28 Sep 2026 02:42:47 +0000
Manifest next update: Wed 30 Sep 2026 02:42:47 +0000
Files and hashes: 1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: dv7an4Hha+QFSAbYJfRFXfG4h8/FaObHGWBLevurL9Y=)
2: 8E8DDE1C6FD111F1A724E610CF1D38B0.roa (hash: 1KMlFaEajdNRT3rBNkJK3leEidm1bkbbNhMaz2bl61o=)
3: B715016C631511F18D69FFF3CE1D38B0.roa (hash: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=)
4: 0201DC14657711F1B151DFE6CE1D38B0.roa (hash: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Sep 28 02:42:47 2026 GMT
Not After : Sep 30 02:42:47 2026 GMT
Subject: CN=6ab9d428-8e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:c1:eb:27:4c:fe:75:46:30:de:d3:15:af:
1b:57:0f:84:09:90:18:81:61:b8:80:d7:bb:e4:7a:
3b:c9:61:ea:7e:17:35:90:28:1a:97:a9:b0:42:96:
8f:65:36:0f:04:fc:22:65:da:b5:58:c1:3d:78:1a:
9b:49:4c:a0:b3:fb:2a:25:c9:07:14:2b:38:32:74:
72:e7:b3:c4:e6:a3:d0:23:6b:90:40:1c:92:4a:87:
1f:c6:09:0a:63:d0:a5:59:4a:f7:71:5f:e0:70:aa:
1b:4f:67:f2:93:27:83:df:a8:33:55:77:a8:c7:27:
cf:5d:56:3a:5f:12:af:e1:81:bd:ad:c3:6e:cf:a3:
cc:70:c4:88:a7:16:cb:cc:04:88:83:68:bf:fb:cd:
ab:8e:84:fc:b0:24:98:a6:82:dd:65:13:95:a2:d5:
ec:39:10:62:57:1b:47:be:c5:48:8c:f6:5c:23:f7:
80:9f:d8:60:d4:0d:a7:00:3e:99:6f:4d:aa:57:94:
1d:61:1f:76:76:8a:92:9c:c2:b0:6e:40:91:37:bf:
7c:2c:b0:5b:db:24:36:e1:26:bb:1d:94:9a:bd:d1:
e9:24:af:83:04:5f:05:39:94:c7:7a:51:3f:5c:11:
bf:d0:89:1c:a5:4c:ed:c6:76:55:7f:5d:30:d1:df:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:09:40:7B:22:43:B6:8C:66:01:52:64:C0:E1:72:2B:BE:01:1C
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:19:33:99:2e:9b:49:c9:c2:cc:9b:0e:d7:fb:f5:4e:a2:
76:ea:0b:00:b8:db:a1:a4:f3:a4:48:da:a9:2e:69:bf:08:2d:
8b:0b:30:7a:73:91:8a:7d:6c:28:f2:9d:ac:2d:4f:7a:51:98:
59:ba:5d:17:12:6e:3f:3a:b8:96:c1:ba:a0:23:1d:e8:86:cf:
3c:f9:56:fc:c6:5c:9b:14:dc:af:4e:17:a5:b7:0e:e3:c6:16:
3b:c5:db:a7:0c:d1:32:fd:c6:73:11:99:24:85:e2:9e:e0:3f:
77:b4:66:2e:c0:88:fd:d0:06:da:8f:d6:e0:34:1a:63:8e:6f:
71:66:98:98:d5:96:c8:53:75:81:1f:e3:86:58:b6:85:8c:32:
92:03:51:7e:95:ab:34:8b:a9:c7:55:f0:1d:06:ba:f2:f9:42:
df:99:80:b5:45:a8:4a:7f:bc:69:63:a5:9a:49:23:29:d0:8b:
76:4d:51:6f:6a:26:05:cb:59:69:e6:aa:80:ec:aa:ee:c9:07:
8f:e1:68:1c:8f:4b:73:89:85:ce:ba:82:c0:9f:43:37:69:48:
41:c8:cc:d3:d2:5f:69:9c:82:a2:ce:d5:8d:ba:e7:c0:96:95:
21:64:f2:18:57:94:be:16:76:63:f0:24:8b:d6:d2:af:94:b9:
0b:32:d3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:49:11 2026 by rpki-client