
Error: rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File: xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier: ImdPKOCSrF+EjZKqQCBbtqYzC1TG9m09hMDUAejjego=
Subject key identifier: 90:65:7E:43:87:25:17:73:3D:BE:6C:7F:34:AE:2C:91:3B:AF:AA:EF
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer: /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial: 0577
Authority info access: rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number: 0575
Signing time: Sun 27 Sep 2026 03:10:15 +0000
Manifest this update: Sun 27 Sep 2026 03:10:14 +0000
Manifest next update: Tue 29 Sep 2026 03:10:14 +0000
Files and hashes: 1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: 9q4tHlh2gbOrVh7O5SiJ75t+OdNteibgM11JAqO5tzg=)
2: B307C7908CF411F1A260CE00CF1D38B0.roa (hash: 7+7iCNVIWT6E40tpferJJaH5xHzZfV/GotmSnRGdanQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Validity
Not Before: Sep 27 03:10:14 2026 GMT
Not After : Sep 29 03:10:14 2026 GMT
Subject: CN=6ab88917-bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:f2:50:c8:5f:91:75:f2:cc:fc:e3:d0:dc:
ea:d9:ee:37:16:87:8d:1e:bc:47:9e:55:96:2d:49:
0f:66:cb:91:1e:d6:30:14:ac:12:9a:80:cf:73:97:
74:a6:04:9a:4d:c1:d6:aa:e4:c0:86:ed:e6:07:9a:
8d:9d:e8:8b:23:ad:6c:41:2e:f3:f7:57:8c:20:65:
46:7c:67:9d:09:57:c4:4b:45:35:11:52:08:b0:28:
c0:5d:d2:3b:b6:c7:24:77:ef:7a:78:ea:57:92:1c:
26:1d:00:ad:de:e3:2f:8b:6a:01:af:9f:c5:6a:29:
9f:25:c6:e1:88:66:f4:f4:2a:94:f7:98:c0:8a:7e:
c9:25:50:b6:af:ca:98:59:2a:12:ef:34:de:1a:a8:
ab:af:52:eb:67:9d:29:f7:11:23:5f:91:3c:0d:08:
66:14:db:1c:df:0d:09:e5:d0:f0:90:21:fd:d3:95:
9f:86:fd:60:96:17:40:eb:95:30:f0:9a:24:9a:6a:
b5:e2:3a:b1:49:4b:ec:46:30:34:32:d8:ef:0c:6b:
ae:62:f3:db:f1:63:21:95:93:e2:ad:c9:d3:72:7b:
44:24:43:46:6a:f6:7e:dc:e4:cf:e4:ad:92:70:4c:
77:b5:78:cc:51:fd:1d:f2:a9:35:4a:f1:91:b2:cf:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:7E:43:87:25:17:73:3D:BE:6C:7F:34:AE:2C:91:3B:AF:AA:EF
X509v3 Authority Key Identifier:
keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:b7:87:65:8b:c4:3f:8b:b9:d7:84:a2:f1:44:3f:a2:df:
6e:1e:f2:09:3a:d2:18:14:a7:e7:84:e8:1a:c4:39:93:c5:f4:
da:1b:26:c0:c2:2a:83:2e:eb:e4:6d:18:92:fd:b0:9b:11:bc:
f9:2e:83:60:c1:25:89:57:91:d0:07:65:cc:2d:8d:68:a6:3e:
ef:50:d4:d3:14:ee:f0:55:b6:f3:25:d1:53:1f:ea:d0:e3:47:
9d:7d:33:07:d5:fe:b9:2e:65:10:69:d1:64:55:ef:73:3b:15:
9a:db:87:51:fe:66:95:49:dc:68:b9:c7:b2:fd:ff:d8:4f:55:
44:d1:f5:16:d5:f5:3b:c0:08:57:82:ea:4f:11:4d:20:75:3a:
2f:cd:1f:07:3f:b2:c5:e4:e3:62:82:dc:00:63:35:22:97:ce:
5c:3a:be:5f:11:89:b0:84:44:0e:6b:42:39:46:33:54:d5:74:
85:cf:9b:92:e9:4e:72:1b:23:f8:73:15:f3:38:30:d1:03:0a:
38:e3:e0:af:15:86:7a:38:0a:4d:fc:5d:c3:1a:ef:14:ac:8b:
b2:7d:01:10:3a:4f:db:df:7e:5e:c6:65:3d:c6:0a:65:27:6e:
03:e1:f3:f4:c3:dd:3a:f4:66:cc:b6:d9:ea:20:d3:0f:92:c2:
c1:5d:40:78
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg5MzZBUjExMC8GA1UEBRMoQzUyQkYyN0ExNEQ0QzQ5QkFBMDJGMDk5NTkwREJD
RUNCMEUwNEI5NzAeFw0yNjA5MjcwMzEwMTRaFw0yNjA5MjkwMzEwMTRaMBgxFjAU
BgNVBAMTDTZhYjg4OTE3LWJkMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfofJQyF+RdfLM/OPQ3OrZ7jcWh40evEeeVZYtSQ9my5Ee1jAUrBKagM9z
l3SmBJpNwdaq5MCG7eYHmo2d6IsjrWxBLvP3V4wgZUZ8Z50JV8RLRTURUgiwKMBd
0ju2xyR373p46leSHCYdAK3e4y+LagGvn8VqKZ8lxuGIZvT0KpT3mMCKfsklULav
yphZKhLvNN4aqKuvUutnnSn3ESNfkTwNCGYU2xzfDQnl0PCQIf3TlZ+G/WCWF0Dr
lTDwmiSaarXiOrFJS+xGMDQy2O8Ma65i89vxYyGVk+KtydNye0QkQ0Zq9n7c5M/k
rZJwTHe1eMxR/R3yqTVK8ZGyzxqVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUkGV+
Q4clF3M9vmx/NK4skTuvqu8wHwYDVR0jBBgwFoAUxSvyehTUxJuqAvCZWQ287LDg
S5cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4OTM2LzkxQjQ4RDA2OTBFQzExRURBOUUzNDJGOEYxMjIyNDY4L3hTdnll
aFRVeEp1cUF2Q1pXUTI4N0xEZ1M1Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hTdnllaFRVeEp1cUF2Q1pXUTI4N0xEZ1M1Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTg5MzYvOTFCNDhEMDY5MEVDMTFFREE5RTM0MkY4RjEyMjI0
NjgveFN2eWVoVFV4SnVxQXZDWldRMjg3TERnUzVjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1mLeHZYvEP4u514Si8UQ/ot9uHvIJOtIY
FKfnhOgaxDmTxfTaGybAwiqDLuvkbRiS/bCbEbz5LoNgwSWJV5HQB2XMLY1opj7v
UNTTFO7wVbbzJdFTH+rQ40edfTMH1f65LmUQadFkVe9zOxWa24dR/maVSdxoucey
/f/YT1VE0fUW1fU7wAhXgupPEU0gdTovzR8HP7LF5ONigtwAYzUil85cOr5fEYmw
hEQOa0I5RjNU1XSFz5uS6U5yGyP4cxXzODDRAwo44+CvFYZ6OApN/F3DGu8UrIuy
fQEQOk/b335exmU9xgplJ24D4fP0w9069GbMttnqINMPksLBXUB4
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:45:03 2026 by rpki-client