
Error: rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File: b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier: vdpMnXhoL+aNb3wkg54ypo7bOvzbmRdPBMJ7skp/fI0=
Subject key identifier: D0:51:25:93:3E:C4:FB:F5:B9:C1:CE:62:BE:25:59:FE:4F:C2:12:D4
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer: /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial: 067D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number: 0677
Signing time: Sun 04 Oct 2026 02:43:12 +0000
Manifest this update: Sun 04 Oct 2026 02:43:11 +0000
Manifest next update: Tue 06 Oct 2026 02:43:11 +0000
Files and hashes: 1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: wRc23rnizHpqYI3LZjHJHJEK5wfZpoqKmpEHx65pGvA=)
2: F532EE8E8D7511F1969D33A0CE1D38B0.roa (hash: SIxmlHckbhsXHCegpL/XNKa7J+R67ZPGCubikG2qARU=)
3: 5156704C8D7511F1B90CF51ACF1D38B0.roa (hash: 3A2ssmGFuuN+MJD7vHz6VAcC5JTqcWYRQfIkL36SqRI=)
4: A61F12AA8D7511F1B00E0A1BCF1D38B0.roa (hash: b9TCBFUNLfLaUSigVaYq828sCFL0o9xUvQVNYUUJxC8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 02:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Validity
Not Before: Oct 4 02:43:11 2026 GMT
Not After : Oct 6 02:43:11 2026 GMT
Subject: CN=6ac1bd40-2faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:5e:72:36:fe:ae:3b:1b:d4:6c:8c:c7:35:
25:51:f5:db:52:9e:fd:cd:55:fc:05:44:b6:f2:35:
7f:ce:93:16:ca:c0:07:47:ab:de:94:fb:5a:24:57:
7a:47:b9:7e:a2:19:0b:41:60:45:4c:28:3a:14:68:
c3:41:a4:7a:83:79:7a:d0:97:62:97:6b:9b:98:26:
42:2a:7b:63:53:66:75:e5:16:73:25:36:64:f3:3a:
6a:71:e7:8e:45:dd:1e:01:6f:93:a4:75:9c:e1:aa:
2e:af:c9:57:e0:2b:12:1e:70:02:5e:1b:d3:23:45:
46:5f:87:8d:a1:d9:28:69:1c:cd:a0:fd:6d:97:89:
ae:62:93:c8:16:20:87:f4:40:c8:2b:fd:0f:b7:0e:
66:d7:b0:dc:3d:3c:d0:b5:77:87:d5:ae:33:30:29:
8f:64:c5:c5:91:39:0a:d8:89:14:53:27:37:ae:07:
2e:b2:45:a2:29:f8:4b:b8:d7:95:0f:a6:ca:91:71:
4f:eb:10:4b:66:91:0f:5f:59:79:cf:d6:3d:ed:bf:
d1:97:65:fd:40:86:4f:4b:b3:76:7f:1f:bd:fa:63:
c4:24:f1:cf:a6:25:3b:a2:69:b5:41:7e:a2:a9:6b:
79:76:91:88:84:79:7d:0e:a6:b8:40:58:e7:14:99:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:51:25:93:3E:C4:FB:F5:B9:C1:CE:62:BE:25:59:FE:4F:C2:12:D4
X509v3 Authority Key Identifier:
keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:40:d6:94:6e:9f:38:2c:fb:b1:fb:47:74:51:22:db:58:
e6:58:64:fc:e5:08:b7:0f:04:79:06:6f:ed:28:7e:c3:5f:4b:
21:ed:8d:80:10:54:13:79:50:51:9a:39:fe:e6:10:0b:77:eb:
44:03:43:6d:1c:51:af:48:72:8f:1a:97:14:bb:2a:dd:2c:68:
cf:e3:27:cb:b2:fb:cd:a0:53:86:f7:e1:b3:4c:85:ee:45:dd:
5f:05:6c:68:86:59:38:83:0b:70:57:09:b3:96:0d:5a:1e:03:
ef:37:10:99:29:03:44:40:be:5b:37:4a:f6:8c:5c:1a:08:36:
86:64:67:a6:88:37:ce:cb:b9:29:b5:ab:57:1d:ea:40:ba:24:
ce:55:5d:82:4e:6f:88:c9:e9:c6:b2:38:e9:49:fa:dc:d8:c2:
42:1d:33:28:54:dc:61:b7:57:d2:dd:9b:51:d2:9d:a7:8f:0b:
4a:e4:fb:84:86:7b:dc:fb:51:74:57:5b:d0:29:6f:13:ce:bb:
c1:e7:e8:0c:d2:32:ae:f9:37:a3:58:16:a4:8f:7c:e8:fb:a3:
25:f5:01:7e:c0:4d:b1:0a:eb:ec:74:9c:6e:50:ce:4b:16:cd:
ed:d2:ed:a3:e9:ea:75:0c:e2:5d:bb:42:90:9b:2e:70:e6:fe:
06:f5:1d:cc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTk0RDdBRjExMC8GA1UEBRMoNkY4MEMwQTE5MDc2ODBEOTc5MDBERjQ1MUNENTU0
RDdGQURCQ0M2NjAeFw0yNjEwMDQwMjQzMTFaFw0yNjEwMDYwMjQzMTFaMBgxFjAU
BgNVBAMTDTZhYzFiZDQwLTJmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQL15yNv6uOxvUbIzHNSVR9dtSnv3NVfwFRLbyNX/OkxbKwAdHq96U+1ok
V3pHuX6iGQtBYEVMKDoUaMNBpHqDeXrQl2KXa5uYJkIqe2NTZnXlFnMlNmTzOmpx
545F3R4Bb5OkdZzhqi6vyVfgKxIecAJeG9MjRUZfh42h2ShpHM2g/W2Xia5ik8gW
IIf0QMgr/Q+3DmbXsNw9PNC1d4fVrjMwKY9kxcWROQrYiRRTJzeuBy6yRaIp+Eu4
15UPpsqRcU/rEEtmkQ9fWXnP1j3tv9GXZf1Ahk9Ls3Z/H736Y8Qk8c+mJTuiabVB
fqKpa3l2kYiEeX0OprhAWOcUmek7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0FEl
kz7E+/W5wc5iviVZ/k/CEtQwHwYDVR0jBBgwFoAUb4DAoZB2gNl5AN9FHNVU1/rb
zGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYxMjIyNDY4L2I0REFv
WkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I0REFvWkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTk0RDcvNDJENDI3MDhEMjg1MTFFQzkyRUQ5N0FGRjEy
MjI0NjgvYjREQW9aQjJnTmw1QU45RkhOVlUxX3JiekdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBErkDWlG6fOCz7sftHdFEi21jmWGT8
5Qi3DwR5Bm/tKH7DX0sh7Y2AEFQTeVBRmjn+5hALd+tEA0NtHFGvSHKPGpcUuyrd
LGjP4yfLsvvNoFOG9+GzTIXuRd1fBWxohlk4gwtwVwmzlg1aHgPvNxCZKQNEQL5b
N0r2jFwaCDaGZGemiDfOy7kptatXHepAuiTOVV2CTm+IyenGsjjpSfrc2MJCHTMo
VNxht1fS3ZtR0p2njwtK5PuEhnvc+1F0V1vQKW8TzrvB5+gM0jKu+TejWBakj3zo
+6Ml9QF+wE2xCuvsdJxuUM5LFs3t0u2j6ep1DOJdu0KQmy5w5v4G9R3M
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:29:52 2026 by rpki-client