
Error: rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
File: DZvooDz0-SG-roASCfDNqfpcKKk.mft (raw, json)
Hash identifier: TvE/mAFCLdrq3gbYvRVJjWSwJpdWTEAg6MedCgEa7Bo=
Subject key identifier: DA:31:47:A0:A8:81:7E:F4:2C:37:AC:3F:E2:3C:23:EE:1B:6A:C6:8B
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Certificate issuer: /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial: 01C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
Manifest number: 01C2
Signing time: Thu 24 Sep 2026 04:59:37 +0000
Manifest this update: Thu 24 Sep 2026 04:59:36 +0000
Manifest next update: Sat 26 Sep 2026 04:59:36 +0000
Files and hashes: 1: DZvooDz0-SG-roASCfDNqfpcKKk.crl (hash: mssuJj5xyVCqL3ON4xdFgQvPfzc3LZAO0RkDtEc8Q5c=)
2: 61276BBA8FE211F1A322B3D5CE1D38B0.roa (hash: ZgYi187X+5Outlah/ax0NZjZ4kzN2fXozzCC/u2qZ/I=)
3: 481A94F88FE211F196C1ACD5CE1D38B0.roa (hash: /b4HJPRNHI6xpg0bDUmbfP0kip9OmM0xcDOIsyuagII=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 04:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Validity
Not Before: Sep 24 04:59:36 2026 GMT
Not After : Sep 26 04:59:36 2026 GMT
Subject: CN=6ab4ae38-aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:d2:d9:c1:06:50:82:b2:59:c6:f5:35:7c:
73:1e:a9:5b:51:86:97:d5:fa:74:80:83:63:1d:34:
52:a4:46:e2:2b:40:dc:b7:01:f4:37:cd:70:e2:4f:
b5:f3:b4:8a:4a:2b:15:7a:49:6e:f0:b1:83:63:7b:
34:69:16:71:96:33:0b:b0:43:03:8a:a1:1d:cb:44:
d5:01:f0:15:96:dd:cd:44:7a:98:41:b9:02:b9:47:
61:8e:cf:4e:84:1d:74:bf:47:88:0d:13:9b:6d:5e:
82:51:9a:76:5c:ff:98:9b:8f:d8:58:dd:6e:21:2e:
10:80:e6:1a:40:79:38:ad:0d:cf:27:82:2b:45:83:
bf:fe:90:cf:12:f9:46:19:f5:22:7e:ba:a3:40:0b:
bc:a0:45:23:a2:a6:fb:df:7d:35:9a:3c:15:77:a7:
53:a0:85:ad:e0:79:18:9a:3a:f9:a2:fb:7c:a6:24:
8d:7d:bd:b5:18:dd:f9:62:e7:69:80:65:f9:61:46:
0a:51:8b:2d:9b:d4:e3:6c:4a:b7:be:31:df:7d:2d:
2e:bd:ce:61:bd:ee:da:bf:8f:d9:36:b2:9c:b6:da:
9b:41:ed:29:85:00:e7:cb:97:ac:0d:40:72:a0:91:
93:5e:10:48:dd:ea:ea:19:74:34:76:3d:39:72:5b:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:47:A0:A8:81:7E:F4:2C:37:AC:3F:E2:3C:23:EE:1B:6A:C6:8B
X509v3 Authority Key Identifier:
keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2c:66:16:f4:d6:a1:a1:9c:8c:53:3d:ec:ad:59:5d:7b:60:
1e:2c:01:0c:1a:c8:b5:ad:fc:4d:e8:52:0f:53:77:c9:31:8c:
f4:e4:b7:68:c4:97:8b:5f:10:c3:a3:87:fb:d5:64:33:b1:f9:
eb:2f:c7:0e:5f:23:0e:f6:36:94:47:32:ef:0b:17:77:1f:43:
93:fd:b0:20:a5:9a:05:12:05:32:3c:96:ea:04:67:30:31:1e:
30:9b:77:53:a9:9c:57:c7:5c:85:b5:43:91:ae:d2:6d:bb:07:
cb:96:ad:1f:68:00:57:68:d7:7b:ac:e8:1e:f3:ea:43:6b:fc:
56:ba:b6:25:a5:1e:6d:b4:a6:db:1c:0f:11:5d:23:9f:a8:84:
13:2a:38:ed:66:db:a9:fa:2c:4e:25:61:ed:e0:60:c4:96:01:
ec:94:10:21:e6:20:0b:a5:25:ba:db:58:3c:89:7d:a2:f3:1c:
9b:9e:d6:f1:3b:77:44:55:69:7f:cb:5f:de:de:37:bd:f1:17:
c0:3b:08:e8:3f:e5:4c:c9:5c:c1:b9:c4:a3:41:4f:56:33:a8:
e2:63:43:a5:aa:15:73:35:b3:84:c9:cb:1a:56:92:3e:bf:61:
fa:9c:94:cb:13:c8:e9:d8:59:4d:48:61:ff:c1:43:94:bf:a6:
f7:7c:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:15:44 2026 by rpki-client