
Error: rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
File: DTBvSAc93XLccOnbp6ScT27cvII.mft (raw, json)
Hash identifier: Ft/dG+pXO8jEIxWlOlf+pbZNAULKsqTkWZJUKHuh0Mk=
Subject key identifier: 90:14:62:E5:91:7A:0D:76:33:22:B7:B0:30:8E:B2:E7:28:FF:A6:DC
Authority key identifier: 0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
Certificate issuer: /CN=F36E201DAF/serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
Certificate serial: 049F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
Manifest number: 049C
Signing time: Thu 24 Sep 2026 03:37:00 +0000
Manifest this update: Thu 24 Sep 2026 03:37:00 +0000
Manifest next update: Sat 26 Sep 2026 03:37:00 +0000
Files and hashes: 1: DTBvSAc93XLccOnbp6ScT27cvII.crl (hash: A9MP62Uju+7ErZs8Zr2WNW8WXILQ0G1AnlQdcEWtWK4=)
2: 167BE270311311EE90196C2D4AD9E6FC.roa (hash: dZ+rQksE6z+SZB/mbDVm25XJgP/+R2iDhZ47qWEyHqs=)
3: 74FF55AC311311EEAA4CBB2E4AD9E6FC.roa (hash: YFcZ13YkooKk8gZs9EKDPRGIE46mgixe3+C0QIIMAH0=)
4: 52FAF038311311EE9319652E4AD9E6FC.roa (hash: CPXHz3C00Kr9ga8MYMPZ99obmxz+ufFsJiCHPSIPn0I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAF, serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
Validity
Not Before: Sep 24 03:37:00 2026 GMT
Not After : Sep 26 03:37:00 2026 GMT
Subject: CN=6ab49adc-3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:60:e9:84:33:4e:63:4f:89:7d:19:1a:f6:
40:70:02:e2:ce:be:c3:e4:43:b1:b5:82:7c:52:ed:
fa:56:a4:00:b2:48:94:65:a6:57:74:07:c7:41:8f:
b6:fa:6b:37:7c:14:53:5a:a6:84:b2:cb:6f:96:e7:
41:26:ae:b6:c7:1a:23:43:af:00:94:f1:57:20:5b:
f9:b7:31:49:a0:cc:82:5c:08:2d:a1:54:3c:8a:c7:
b8:e8:55:af:48:b7:7e:d4:a0:1d:a3:c3:9a:32:64:
db:a5:61:2f:aa:4f:eb:3b:50:f2:c7:a0:5f:f7:b6:
6d:ca:fd:02:ca:43:f2:86:e6:75:93:5f:ab:81:30:
3a:e2:3a:08:ca:b5:4d:08:ff:88:ed:9e:fe:3d:24:
4a:f9:98:ac:6a:59:d4:7d:ce:5b:d5:21:9d:ea:3f:
68:f6:d6:12:3c:7b:f7:5a:7e:14:9b:46:6c:61:40:
ec:cd:84:86:a3:1f:63:37:ac:fc:8a:90:4c:a7:38:
e7:b1:7e:a2:42:4c:c9:ae:56:55:74:81:fd:3a:9d:
bb:a2:79:26:66:e1:fd:76:98:a3:4c:b9:f7:04:c6:
90:d0:95:62:03:e4:44:9a:cd:db:0c:d3:2b:d3:21:
34:6a:29:23:10:81:2c:e9:1c:20:d7:9d:6c:af:83:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:62:E5:91:7A:0D:76:33:22:B7:B0:30:8E:B2:E7:28:FF:A6:DC
X509v3 Authority Key Identifier:
keyid:0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:50:4d:7e:1f:39:73:0d:bd:44:e7:8a:a2:7a:a2:f7:30:
1b:7d:f7:69:84:5b:22:d9:fe:d5:4a:b2:a2:90:e6:0c:23:9d:
34:b1:c1:17:b7:54:ab:43:c2:37:8d:bf:52:d7:a1:7e:da:67:
d7:6f:76:ad:c7:d2:ad:d0:e7:a0:7f:e4:33:a6:af:d8:f0:78:
e1:37:18:46:bc:b8:e1:a6:c3:f8:5d:65:9a:d0:0d:22:a2:0b:
38:a5:75:85:4d:a7:95:59:42:a2:07:5f:fe:7d:37:cf:8b:88:
fc:3d:ef:f7:8b:ca:e3:81:8c:e6:40:80:ab:9f:55:21:fd:a8:
c8:0f:96:6d:ee:dc:5d:56:cc:2d:33:4e:ac:e0:69:c2:fb:9d:
0d:fd:b6:38:22:84:67:61:e0:86:32:a4:24:61:85:2f:a2:5a:
c0:da:67:42:12:e2:b6:4e:18:76:6c:87:71:a6:5e:ea:50:ea:
78:ed:af:cd:54:68:e9:05:d7:c8:2c:19:6e:21:14:6a:47:06:
3b:3b:d3:9f:1c:9b:29:a1:31:93:e2:d9:db:fe:ae:09:6b:a5:
3c:fa:3a:30:bb:0c:c3:94:69:08:65:a9:0b:ef:87:3b:19:61:
b1:bb:14:08:58:9f:d5:78:31:a1:18:94:84:8f:4a:44:a2:bb:
a2:61:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:40:02 2026 by rpki-client