
Error: rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: DxWQsrmK6QMuGmF45QGq76Krlgmb/SOursf2jKHtf08=
Subject key identifier: 78:B0:DD:D0:A5:5F:7C:20:02:25:3E:91:89:F8:88:77:90:7A:5E:35
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 04E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 04E0
Signing time: Sun 04 Oct 2026 03:29:03 +0000
Manifest this update: Sun 04 Oct 2026 03:29:02 +0000
Manifest next update: Tue 06 Oct 2026 03:29:02 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: KBwNdRB/i+4O10SEAL6EemqpnbzZy6LqUbv9tAIycmQ=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 03:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: Oct 4 03:29:02 2026 GMT
Not After : Oct 6 03:29:02 2026 GMT
Subject: CN=6ac1c7ff-3f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:68:ab:42:7e:58:30:45:00:9d:35:7e:4f:
ad:dd:bf:e6:ed:ef:f5:dc:da:be:bc:5e:1d:3d:f6:
5d:ab:6f:a8:6b:fb:2e:84:67:71:15:2a:48:7c:d7:
d6:1c:34:91:45:6b:4a:0a:eb:3a:26:f5:6a:e0:09:
8d:0c:51:20:9f:a4:bb:1c:ac:66:64:14:6f:d6:92:
cf:54:5e:b0:86:fd:27:6c:c7:16:88:88:69:e5:0b:
0e:e7:9a:1e:c5:d4:5f:78:2f:3e:c0:2d:22:36:8f:
cb:03:6a:cd:ee:19:6c:79:de:48:4b:1a:c4:e8:fa:
3f:51:a2:89:e0:67:45:dc:bf:42:eb:36:73:67:f3:
b1:2c:df:59:4f:81:3f:24:8c:c1:be:93:5b:2a:65:
c5:5d:9f:95:7f:2f:7f:df:16:b2:9b:e0:a1:63:90:
61:2e:02:e0:34:b4:90:d9:b2:a5:bd:dc:8f:01:ab:
ae:64:99:b5:c2:a0:76:c2:e2:e4:48:40:09:23:24:
3a:77:ca:2a:4b:7d:24:1b:06:41:1a:8f:ef:1e:3e:
39:0f:91:62:d5:74:0f:b8:1c:42:25:cc:c8:c0:91:
71:04:40:3d:74:1c:69:2a:b4:a3:63:fa:96:d9:65:
00:15:94:d9:d2:44:94:9b:5e:2c:65:42:11:91:d8:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:DD:D0:A5:5F:7C:20:02:25:3E:91:89:F8:88:77:90:7A:5E:35
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2c:dd:26:bb:9b:a5:ed:06:bf:64:f7:be:95:0d:06:9e:54:
6e:15:10:e1:4c:c1:d9:ad:c0:de:9b:60:e6:4f:c7:a1:c0:43:
14:20:0c:7d:dc:4d:b9:42:10:ab:99:c9:1d:4d:26:c0:89:05:
2c:7e:d2:dc:ea:72:58:73:21:82:5e:f1:0e:5d:b5:90:62:63:
19:e8:31:8c:5a:f5:d2:e3:16:c4:e6:df:a1:b9:dc:b7:8d:75:
70:0c:f1:52:c2:98:a6:7c:78:ea:69:9c:32:ee:bc:7f:90:71:
ec:87:1a:52:78:fe:1a:de:53:4e:fa:06:bd:bf:59:97:a9:f2:
ef:c7:00:c6:8c:c9:f1:c8:7a:6d:78:a6:3a:a2:d3:8c:c5:d7:
79:63:fd:c7:a5:c0:d9:ad:d9:64:77:54:ce:12:8b:80:1f:69:
32:2a:cc:52:a2:d0:ce:8a:6d:04:b5:20:31:dc:a7:94:50:49:
b2:7d:0f:8c:c2:b9:9c:3a:2b:a5:13:7d:71:46:22:cd:a3:61:
d2:78:1a:82:a5:93:84:cf:51:1e:6e:47:d1:b5:39:0b:33:26:
ed:91:5f:36:24:15:15:4f:88:fe:00:be:c8:da:76:97:31:7c:
78:af:3d:00:0c:4f:68:91:18:0c:13:bb:e5:6a:94:5f:09:7a:
e2:8b:0b:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC
RTM5MzRBQTUyMDAeFw0yNjEwMDQwMzI5MDJaFw0yNjEwMDYwMzI5MDJaMBgxFjAU
BgNVBAMTDTZhYzFjN2ZmLTNmOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrsmirQn5YMEUAnTV+T63dv+bt7/Xc2r68Xh099l2rb6hr+y6EZ3EVKkh8
19YcNJFFa0oK6zom9WrgCY0MUSCfpLscrGZkFG/Wks9UXrCG/SdsxxaIiGnlCw7n
mh7F1F94Lz7ALSI2j8sDas3uGWx53khLGsTo+j9RoongZ0Xcv0LrNnNn87Es31lP
gT8kjMG+k1sqZcVdn5V/L3/fFrKb4KFjkGEuAuA0tJDZsqW93I8Bq65kmbXCoHbC
4uRIQAkjJDp3yipLfSQbBkEaj+8ePjkPkWLVdA+4HEIlzMjAkXEEQD10HGkqtKNj
+pbZZQAVlNnSRJSbXixlQhGR2MzTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeLDd
0KVffCACJT6RifiId5B6XjUwHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK
pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH
blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RThCRjcvRUVFNkVGQUMwQUEyMTFFRUFBMUUyMTQzNEFE
OUU2RkMveHpQdEduWjBJTzcxUGdWaGg0RUw0NU5LcFNBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDALN0mu5ul7Qa/ZPe+lQ0GnlRuFRDh
TMHZrcDem2DmT8ehwEMUIAx93E25QhCrmckdTSbAiQUsftLc6nJYcyGCXvEOXbWQ
YmMZ6DGMWvXS4xbE5t+hudy3jXVwDPFSwpimfHjqaZwy7rx/kHHshxpSeP4a3lNO
+ga9v1mXqfLvxwDGjMnxyHpteKY6otOMxdd5Y/3HpcDZrdlkd1TOEouAH2kyKsxS
otDOim0EtSAx3KeUUEmyfQ+MwrmcOiulE31xRiLNo2HSeBqCpZOEz1EebkfRtTkL
MybtkV82JBUVT4j+AL7I2naXMXx4rz0ADE9okRgME7vlapRfCXriiwuE
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:36:30 2026 by rpki-client