
Error: rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File: U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier: ftfcniu/tEAEjL+Ib4kQBOdw9XOw8VyiiY9fL+FJ4cs=
Subject key identifier: 8A:5F:EF:2F:E4:5D:31:5C:40:2E:5B:3D:7F:94:1F:42:2D:8D:84:18
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer: /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial: 0621
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number: 061B
Signing time: Thu 24 Sep 2026 02:53:57 +0000
Manifest this update: Thu 24 Sep 2026 02:53:57 +0000
Manifest next update: Sat 26 Sep 2026 02:53:57 +0000
Files and hashes: 1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: ajKNMepy0D6hiQTLNAcQI034hRscb6MVb55A4favxrs=)
2: FDDEDCAC21D011F18474A17CDAE4EC9C.roa (hash: SZFd5PkVE834obyPBshtPMz+lsFfdRXHPh1ZlI1rujI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 02:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Validity
Not Before: Sep 24 02:53:57 2026 GMT
Not After : Sep 26 02:53:57 2026 GMT
Subject: CN=6ab490c5-7671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:8e:4c:d5:96:e3:5b:dc:1d:31:84:e6:2c:
56:51:78:c0:cf:df:f3:3e:80:44:65:5e:c5:38:ab:
79:9c:60:f2:0b:10:8d:9a:b4:49:f4:a6:14:3f:4a:
48:bc:67:a6:04:2c:c2:1f:cc:34:dd:a3:c5:f6:6f:
01:aa:0c:e5:d9:17:01:b4:a6:4a:2b:6d:5d:68:19:
b7:f2:d0:85:84:ac:bb:c1:f7:8b:d1:4e:ef:4b:33:
52:93:82:92:8f:d4:a5:a1:9d:56:21:c7:55:79:5c:
b8:55:00:f0:51:a3:db:21:51:4d:d7:04:0f:6f:47:
51:98:9d:9d:7a:52:92:39:5c:b7:36:62:86:9c:d8:
1b:7e:fa:4d:ac:ed:bf:2f:da:e1:15:0e:5b:80:74:
6f:d6:68:5c:b3:3e:11:cb:d1:e6:24:92:cf:69:e8:
ae:4c:5a:0a:18:6a:20:53:03:b1:ff:5f:f7:56:bf:
cd:a8:3a:66:d6:4a:7f:58:cf:f5:38:0e:b3:60:2d:
be:f2:f0:97:00:67:09:76:2b:8c:3e:3e:38:7a:18:
d3:74:83:7a:a0:b0:f3:8c:61:89:dc:80:4c:cf:fb:
8f:41:71:90:93:a6:c7:e8:28:56:8c:67:77:7e:55:
6c:0f:f8:3a:97:63:ce:6b:d7:90:00:29:03:96:64:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:EF:2F:E4:5D:31:5C:40:2E:5B:3D:7F:94:1F:42:2D:8D:84:18
X509v3 Authority Key Identifier:
keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:6d:20:2d:be:16:94:b5:be:e3:05:eb:10:74:d2:f8:98:
6d:02:2a:a3:14:72:aa:df:20:e3:3d:06:16:1b:5f:f6:b5:ef:
54:ee:d9:b7:f7:90:87:c5:36:24:bd:68:0c:f6:fd:6a:41:8c:
41:fb:b0:8b:68:6c:ec:08:e4:0e:cb:a5:fc:c2:bf:5f:65:5f:
e9:e8:21:4d:d1:3f:90:63:25:9e:f4:a0:95:16:e7:55:c0:80:
90:4d:c3:3a:e1:15:fc:2f:93:35:f3:9a:da:b4:6b:b4:ee:ab:
c3:37:9a:05:61:fa:24:78:1d:ad:27:d8:a8:79:08:89:20:37:
47:89:a5:16:fd:c9:ff:95:5b:f8:8d:77:58:06:b7:a1:9a:a3:
94:98:63:2d:5f:13:63:8f:af:e0:44:25:47:64:f0:19:72:8e:
11:7b:b7:9c:45:09:92:0e:ad:6a:ba:29:36:90:e7:53:44:d1:
f4:d8:e3:55:ed:3d:e9:3e:bb:d4:bf:44:71:8e:5a:33:f1:55:
45:5a:73:45:d4:66:91:8a:fb:0f:ad:1a:8e:4d:d4:34:05:6f:
c0:5f:e3:64:84:f9:ed:7b:5e:3a:4d:5d:4e:26:aa:64:5d:df:
2b:c8:be:99:3c:93:f0:83:1e:a8:63:1e:91:0b:e1:bb:05:d9:
d5:13:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:52 2026 by rpki-client