
Error: rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
File: Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft (raw, json)
Hash identifier: jOJog9metNWz0oTPFN/Xis2un7bJdoH+5NFncwK4y20=
Subject key identifier: 88:BA:D5:A6:AD:DB:39:04:2C:0B:70:E0:9A:4B:30:D4:48:F8:71:9F
Authority key identifier: 67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
Certificate issuer: /CN=F36EBDD7AF/serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Certificate serial: 07EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
Manifest number: 07E4
Signing time: Mon 28 Sep 2026 02:09:31 +0000
Manifest this update: Mon 28 Sep 2026 02:09:30 +0000
Manifest next update: Wed 30 Sep 2026 02:09:30 +0000
Files and hashes: 1: Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl (hash: FGS7b+pQkhZnEIhh8JS4vVlSbkv67KFtcQmqImIGYQA=)
2: E5C8743C8C1C11F18D30F3DDCE1D38B0.roa (hash: W+5KoaoLW00uM+JReOyeBhujyL96fmtu2WjSNxk7kGo=)
3: 615EB3088C1E11F18EB146E6CE1D38B0.roa (hash: cFc4VbWS8pPLVxvgeV+rsX9un5t5+xDWd6XIIl7MFNc=)
4: A908BF3E8C1C11F18D5C00DACE1D38B0.roa (hash: ay2Oo58ii92wCWlCO+qZraMpyz3d1mefW2U8vFEbUe0=)
5: DDC146828C1D11F1B05B37E2CE1D38B0.roa (hash: HKzZfAl6PRyLBevY4HJw4aOs9rhun1HPEqVPgy3QrCk=)
6: BC2736C68C1D11F1B9162CE2CE1D38B0.roa (hash: 1PlQo8FzqujBW7LOnLXLqOyXp4HW9LnbXLI0V7zZNLY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7AF, serialNumber=671762DF2F4B65E8350EF43DFE6E347765751B67
Validity
Not Before: Sep 28 02:09:30 2026 GMT
Not After : Sep 30 02:09:30 2026 GMT
Subject: CN=6ab9cc5b-5f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:be:83:5f:70:81:fa:34:66:e7:d8:a3:84:
f5:7e:d4:3a:4a:e2:26:0e:ca:22:61:e9:bc:fa:55:
f0:ba:d4:cf:a0:c4:87:d3:88:88:9d:2c:e2:e4:d7:
68:4f:40:f9:3b:3d:17:8c:67:4a:62:98:f3:fd:ca:
0a:f1:ef:94:6d:6c:c7:41:f1:58:91:8f:11:18:54:
d9:3d:c4:c4:88:85:a7:7b:92:f1:fb:53:1d:08:eb:
64:e2:c2:60:fc:35:56:86:ba:cb:26:35:ae:67:75:
b2:fc:43:e6:ee:39:63:25:71:7c:3c:9f:6e:26:dc:
f1:af:02:1f:19:e0:54:1e:b4:b6:1c:e1:44:bd:83:
ca:9e:8d:18:ca:49:16:0b:15:cc:eb:9f:0d:cc:35:
60:12:90:e6:41:f4:78:2f:ba:bb:3c:f8:a2:1c:cd:
4c:db:2f:ad:62:26:4d:3b:28:3b:f3:fd:f8:1e:d5:
cd:08:17:ac:87:ce:7d:df:47:4b:c6:64:9b:f9:bb:
6b:e3:00:e4:c2:a0:a4:d1:99:17:aa:41:cd:6d:cb:
e6:19:5c:fe:31:82:9f:df:69:a4:18:1c:f4:07:81:
07:dc:d2:95:39:40:3c:1f:9b:01:55:45:75:75:a6:
c2:7e:e4:fd:7a:48:4e:be:03:d1:78:64:c4:e6:51:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:D5:A6:AD:DB:39:04:2C:0B:70:E0:9A:4B:30:D4:48:F8:71:9F
X509v3 Authority Key Identifier:
keyid:67:17:62:DF:2F:4B:65:E8:35:0E:F4:3D:FE:6E:34:77:65:75:1B:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/59907460BE1D11EB9A348B42F8AEA228/Zxdi3y9LZeg1DvQ9_m40d2V1G2c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:2d:43:25:05:0a:65:ce:b0:6e:5f:48:1f:18:1f:a0:86:70:
5b:83:a6:38:ec:17:37:5a:2d:31:36:9d:a5:d6:1b:bf:d3:a7:
69:ea:dc:a2:66:c1:fe:6d:f9:33:87:ca:99:ab:ee:2d:c6:69:
5c:4e:19:e5:60:78:53:22:f8:d1:68:2d:2e:8f:39:fe:15:39:
f3:93:10:5a:13:52:6c:12:01:a9:0a:26:fc:ab:6e:4e:86:69:
67:f6:2f:73:8f:03:5a:27:88:b1:86:4e:a5:28:e0:22:fe:0f:
28:03:d9:ab:23:47:bc:ff:22:e7:01:09:eb:dd:56:76:75:6c:
3f:1c:11:e5:ae:2f:c7:9e:b1:92:54:eb:84:01:3d:4c:dc:8e:
3d:e3:03:b8:96:87:c4:c5:40:68:dc:ae:95:0b:3d:83:85:38:
7e:32:9f:36:f0:fc:2b:47:43:4f:3c:bb:9d:4a:eb:f6:67:6f:
b6:0e:1d:46:25:98:2c:0b:22:6e:a5:c5:84:dc:21:ef:7a:7f:
83:37:8d:5d:33:bc:be:33:58:aa:eb:66:ed:96:30:c3:71:3f:
99:26:90:4b:b7:e5:a0:00:52:0e:30:9f:40:75:23:d5:2f:a0:
b9:29:d6:1b:71:ea:63:00:b6:80:6b:e4:30:7c:49:6b:9c:d1:
7d:38:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:43:26 2026 by rpki-client