
Error: rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File: M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier: sYNfwXp7R+vg4Z58Q33LVXW5JiJp2IFfX9RX4fTEhR0=
Subject key identifier: E9:85:00:73:FB:F6:11:02:EF:90:B1:D3:AD:84:FC:3A:76:AD:C3:C5
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer: /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial: 0394
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number: 0393
Signing time: Thu 08 Oct 2026 04:08:26 +0000
Manifest this update: Thu 08 Oct 2026 04:08:25 +0000
Manifest next update: Sat 10 Oct 2026 04:08:25 +0000
Files and hashes: 1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: iatGI5khmwYj4jmrgKtkCphD1bi2+8M+8XADXUcURJI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 04:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Validity
Not Before: Oct 8 04:08:25 2026 GMT
Not After : Oct 10 04:08:25 2026 GMT
Subject: CN=6ac71739-1229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:12:b7:7d:15:b0:0b:a5:c5:56:d2:d0:d6:
98:9d:b1:a4:1c:07:87:c7:8e:b3:b6:04:64:4b:84:
c2:44:74:fd:38:34:74:89:7a:65:d0:2d:37:86:90:
1f:27:82:e1:2a:90:f1:48:18:df:b0:47:04:8b:86:
2d:ee:0e:0e:a7:72:b2:39:02:b4:a7:9b:f6:09:20:
5b:12:aa:6a:bd:2a:e7:11:2e:81:0d:fe:34:d8:49:
9e:a8:85:e3:58:f5:86:1b:d2:7b:3d:0f:fd:9e:cf:
20:87:c5:0b:dc:4f:85:70:3f:c1:e5:e0:ce:9d:c3:
ed:86:b1:9e:0b:a9:e8:52:2b:21:5a:bd:97:b6:29:
b6:8b:3e:09:90:3f:9d:3e:88:91:ed:32:7d:18:83:
fd:52:f3:a9:7b:92:82:08:8f:ea:0a:11:59:be:07:
d3:12:9c:df:be:0e:94:ce:6c:aa:8e:17:d0:be:a5:
7a:0d:d2:2c:09:74:59:14:92:35:e4:9e:9e:ba:b9:
6b:f1:3b:e6:2e:c6:de:32:48:de:20:e5:ad:4b:34:
15:ef:74:03:23:bf:a1:f2:71:79:e1:7a:3f:42:87:
fc:14:93:14:b0:3f:0c:c1:a9:53:a5:60:86:2c:93:
a0:37:b2:f2:e4:35:a1:40:b3:57:5a:ba:eb:44:79:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:00:73:FB:F6:11:02:EF:90:B1:D3:AD:84:FC:3A:76:AD:C3:C5
X509v3 Authority Key Identifier:
keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:d3:fa:fd:4a:ff:86:f8:50:e3:7e:fd:8d:0a:29:ad:6d:
f1:b7:45:82:f2:5d:42:65:e8:59:16:5c:10:81:47:12:1b:3d:
94:52:bc:d1:58:d3:a1:90:cf:5b:41:c8:fc:b1:43:ed:79:06:
b0:13:bf:34:e8:5d:87:b0:ac:ff:dc:d8:7c:2c:eb:48:e7:b8:
68:74:a3:c8:c5:7f:85:ea:d4:50:93:40:93:3a:d1:7a:f3:2f:
cd:80:46:92:e2:38:70:8b:50:11:65:cd:e9:23:dc:c1:9e:3e:
10:56:c9:7b:48:d0:82:89:f7:41:1a:9b:cd:3c:59:c3:66:cf:
be:c2:da:de:97:2c:d8:e0:33:40:9d:d8:a1:5f:00:3d:17:57:
e3:57:d8:de:50:91:d4:75:3f:bd:ce:69:a4:ed:7c:8e:88:9a:
c8:ee:c0:47:c5:75:de:fb:e8:17:49:cc:d8:da:5e:05:2d:a1:
31:ff:5e:e3:18:8c:bf:ca:56:d7:3e:ae:9a:c6:f8:9f:0f:1d:
05:66:c6:6a:55:77:9b:c7:c4:f9:c7:df:1e:dc:43:99:14:60:
96:64:9c:9c:41:bf:9f:97:1d:1b:5d:46:01:1e:16:b2:ec:75:
64:8d:0f:e6:f7:e2:19:2e:4b:09:50:29:70:84:0c:5b:32:82:
91:99:b2:31
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRDQzZBRjExMC8GA1UEBRMoMzM5NERGNzAxOTIzNDQzQzVGOThGMDNEQjdGRjA1
NzNBRUI3NjQ5MjAeFw0yNjEwMDgwNDA4MjVaFw0yNjEwMTAwNDA4MjVaMBgxFjAU
BgNVBAMTDTZhYzcxNzM5LTEyMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7hBK3fRWwC6XFVtLQ1pidsaQcB4fHjrO2BGRLhMJEdP04NHSJemXQLTeG
kB8nguEqkPFIGN+wRwSLhi3uDg6ncrI5ArSnm/YJIFsSqmq9KucRLoEN/jTYSZ6o
heNY9YYb0ns9D/2ezyCHxQvcT4VwP8Hl4M6dw+2GsZ4LqehSKyFavZe2KbaLPgmQ
P50+iJHtMn0Yg/1S86l7koIIj+oKEVm+B9MSnN++DpTObKqOF9C+pXoN0iwJdFkU
kjXknp66uWvxO+Yuxt4ySN4g5a1LNBXvdAMjv6HycXnhej9Ch/wUkxSwPwzBqVOl
YIYsk6A3svLkNaFAs1dauutEeeTVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6YUA
c/v2EQLvkLHTrYT8Onatw8UwHwYDVR0jBBgwFoAUM5TfcBkjRDxfmPA9t/8Fc663
ZJIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0Q0M2LzNGQkZDRTJFMDI1NzExRUY4OTM1NTdGNDAwNzAwMUIxL001VGZj
QmtqUkR4Zm1QQTl0XzhGYzY2M1pKSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL001VGZjQmtqUkR4Zm1QQTl0XzhGYzY2M1pKSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTRDQzYvM0ZCRkNFMkUwMjU3MTFFRjg5MzU1N0Y0MDA3
MDAxQjEvTTVUZmNCa2pSRHhmbVBBOXRfOEZjNjYzWkpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClPtP6/Ur/hvhQ4379jQoprW3xt0WC
8l1CZehZFlwQgUcSGz2UUrzRWNOhkM9bQcj8sUPteQawE7806F2HsKz/3Nh8LOtI
57hodKPIxX+F6tRQk0CTOtF68y/NgEaS4jhwi1ARZc3pI9zBnj4QVsl7SNCCifdB
GpvNPFnDZs++wtrelyzY4DNAndihXwA9F1fjV9jeUJHUdT+9zmmk7XyOiJrI7sBH
xXXe++gXSczY2l4FLaEx/17jGIy/ylbXPq6axvifDx0FZsZqVXebx8T5x98e3EOZ
FGCWZJycQb+flx0bXUYBHhay7HVkjQ/m9+IZLksJUClwhAxbMoKRmbIx
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:53:19 2026 by rpki-client