
Error: rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
File: yFh1TID6yDlgC6mAc_zwo3zMrOs.mft (raw, json)
Hash identifier: 3e2Nz4GMVx8/fYLTCobKB7F5LY5IlNQ1vUbLWbPLQao=
Subject key identifier: 69:7A:E7:59:D2:17:A2:35:C7:48:C4:EB:A9:43:F4:B2:A0:9F:20:9C
Authority key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Certificate issuer: /CN=F36E567DAF/serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
Certificate serial: 0240
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
Manifest number: 023E
Signing time: Sat 26 Sep 2026 04:48:48 +0000
Manifest this update: Sat 26 Sep 2026 04:48:47 +0000
Manifest next update: Mon 28 Sep 2026 04:48:47 +0000
Files and hashes: 1: yFh1TID6yDlgC6mAc_zwo3zMrOs.crl (hash: XvM2bmbsACtkgqFjQ3yYL6gzg9uC3brZzaczEPWMs/k=)
2: C3D088FEFE4411EF844C4251762E951A.roa (hash: 8c/UcInEU32uCkkd0bW2sydpnWRZBq/yumh8oAWslXQ=)
3: 78CEE0D6FE4311EFAC01C048762E951A.roa (hash: S/ZsWMJD4DtM1oXbegUkV+3ds1wHL2z8dUl+XkcuPAo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 04:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E567DAF, serialNumber=C858754C80FAC839600BA98073FCF0A37CCCACEB
Validity
Not Before: Sep 26 04:48:47 2026 GMT
Not After : Sep 28 04:48:47 2026 GMT
Subject: CN=6ab74eb0-dec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:4d:df:fb:21:40:38:04:1f:46:85:9c:df:
4b:a4:10:33:cf:be:29:61:0a:77:ab:92:c9:54:a7:
b3:39:01:3b:ee:61:2f:f3:14:ce:42:36:6b:47:08:
7c:41:36:f3:73:dc:1d:96:4d:60:3c:3a:02:00:c3:
a1:1c:fb:1f:03:88:0c:81:99:a6:a2:1c:be:68:a5:
98:69:a8:30:01:fb:6c:a3:c2:19:82:50:d4:60:9c:
5c:94:4b:7c:88:e7:ed:93:fc:df:fc:84:47:20:36:
1b:0b:e9:50:6c:b0:b2:1a:b0:fe:8f:14:a3:7b:b5:
1a:fe:b9:32:f9:d5:5b:d5:6c:03:93:04:14:ad:94:
c4:d6:92:02:aa:c2:23:29:05:c3:e9:15:a6:8e:6a:
b5:0d:99:e4:68:ff:39:77:6d:b5:71:d3:1f:df:ef:
77:1f:b9:b2:f5:2e:7b:63:8b:f8:37:5d:d9:e5:ff:
a0:f1:0a:18:87:ec:da:12:01:dc:05:a3:46:fd:69:
4b:c0:74:db:58:d9:0e:f6:b4:34:69:aa:ff:eb:72:
47:d3:c8:25:be:56:50:87:e1:53:9d:fc:03:7e:33:
5c:6d:ae:26:3c:ab:02:93:18:f8:19:39:ed:bf:a4:
0f:33:f1:ce:91:1f:a7:9d:11:b3:5c:0b:92:1b:d3:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:E7:59:D2:17:A2:35:C7:48:C4:EB:A9:43:F4:B2:A0:9F:20:9C
X509v3 Authority Key Identifier:
keyid:C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:83:4e:ad:90:1d:a5:30:58:dd:dc:44:83:c2:74:11:2e:
36:c7:b3:4f:92:82:22:e0:bb:bd:16:e2:4a:06:c4:28:94:4e:
1b:f1:43:cd:a6:98:f0:63:b8:c2:47:19:98:ee:44:2e:86:41:
2a:32:b5:a8:bf:87:01:62:e3:a3:c4:e0:47:8a:08:01:d3:7e:
04:29:a1:bd:f0:f3:7a:06:cf:75:49:f8:b9:ae:be:d5:05:bd:
f9:0d:ba:1f:1f:44:49:05:01:a1:61:e4:6a:0a:90:91:72:99:
75:fc:f2:51:f8:ab:2d:f2:41:79:21:ac:b2:0b:2f:e0:55:e5:
59:21:9f:c7:8c:fc:57:34:12:03:6a:90:91:aa:e0:07:7a:59:
64:b2:cd:67:fb:39:d4:b8:0d:2f:3b:ba:e5:32:00:97:2b:0a:
e7:cf:27:20:fd:56:d1:aa:c6:24:1f:2c:45:d3:d1:58:d0:c2:
b5:54:db:c1:e1:8a:54:30:4d:10:cc:53:c3:82:3d:50:66:23:
85:d3:03:c1:26:e8:c9:fd:f3:73:8b:15:cd:03:03:e7:75:86:
20:fc:6e:7f:a3:d0:7e:d8:b4:d1:b6:43:ee:ea:30:c5:98:c2:
de:68:80:30:d4:f3:35:1e:ca:c4:2d:32:49:75:b3:bb:b8:18:
70:19:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:07:34 2026 by rpki-client