
Error: rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
File: MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft (raw, json)
Hash identifier: HWSZu9J4KCWx0z2//RSnvXlLfd6EAgWlJXXI7PCe4rM=
Subject key identifier: FE:4A:55:D4:1E:A8:4F:CA:65:52:0D:89:EE:6B:0B:B9:F3:BB:4E:8A
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 0312
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
Manifest number: 030D
Signing time: Sat 10 Oct 2026 04:29:09 +0000
Manifest this update: Sat 10 Oct 2026 04:29:08 +0000
Manifest next update: Mon 12 Oct 2026 04:29:08 +0000
Files and hashes: 1: MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl (hash: 6a0iEoMxqqkHO12jhjAKIcgEvQpxWSuRPMsg69/F074=)
2: 26FC764A6FAC11EF8469D197762E951A.roa (hash: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=)
3: B25B5AD66FAB11EF87286395762E951A.roa (hash: vwW65Nr7lh1XhWegso15AlnrJBnrQ6EFgBiPcl1lNqQ=)
4: D16713486FAB11EFBBD4B095762E951A.roa (hash: 8SVqRCmZw8s4aV8wC2vczr/9L/GkHhk4+czM91U/KkQ=)
5: ED98BED66FAB11EF9A20B695762E951A.roa (hash: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=)
6: 099CAAA26FAC11EF9F68F695762E951A.roa (hash: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Oct 10 04:29:08 2026 GMT
Not After : Oct 12 04:29:08 2026 GMT
Subject: CN=6ac9bf15-d530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:63:c0:e0:c9:f2:97:62:ca:42:e4:6c:57:
20:bd:45:d5:59:5a:d1:14:a0:c9:4e:2f:af:8c:a2:
97:06:2a:32:28:6e:28:a1:7a:38:74:10:14:35:97:
8a:63:93:93:a8:0f:6d:e4:14:6d:5e:88:d4:36:58:
0d:f0:ee:a2:31:ef:11:c1:d8:4c:18:6e:9b:b7:7c:
4e:55:8f:39:77:61:bd:70:48:a0:ce:91:17:55:6e:
d7:61:d9:ff:35:a2:d2:3b:ce:cc:57:82:d8:8c:61:
84:f5:ce:c4:cd:79:09:34:ba:71:2e:56:97:17:79:
11:6d:21:7b:fd:17:68:b5:69:9b:15:9f:47:0a:7e:
7d:2c:31:2a:58:92:ae:bb:56:36:a7:97:45:55:ca:
73:14:60:a8:1e:aa:14:a3:a7:3c:7a:ed:44:15:e2:
e4:94:ab:b4:39:c2:8b:c3:20:4b:8f:07:b2:0c:5a:
20:27:7f:e4:88:b9:92:1a:58:90:48:ce:75:e1:c0:
b0:95:3c:0a:d1:2e:ba:4a:f4:94:5c:f1:02:d5:29:
cd:17:53:b0:dd:b1:63:f7:fe:b2:db:d9:fb:03:d9:
c0:62:e4:5f:dc:f6:0d:0c:13:98:ab:ab:9c:ff:fd:
6d:cf:5f:0b:9f:a5:c4:83:b2:a8:df:3d:a2:d5:97:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:55:D4:1E:A8:4F:CA:65:52:0D:89:EE:6B:0B:B9:F3:BB:4E:8A
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:41:f3:a9:19:c7:aa:6d:8d:9d:9b:a1:28:98:71:e4:8b:
09:4d:14:e5:01:31:93:bf:0d:b3:97:b8:78:3c:a1:f0:ad:2b:
71:a5:33:89:d6:94:81:e5:f8:0f:58:b7:63:18:50:3c:99:1c:
b5:da:38:7d:f2:54:8b:e4:b4:3b:52:9e:2c:9d:b9:22:f5:0f:
76:30:6f:3e:50:58:8a:50:77:64:fd:47:4b:c4:51:f4:5c:36:
ee:5f:94:0c:32:33:60:c0:89:88:cc:72:23:a7:d6:01:d8:7f:
31:c2:92:10:34:06:63:51:1e:3f:a6:8b:05:20:b0:40:4a:8a:
bc:b3:45:c1:6d:b3:b2:86:37:af:54:d9:e9:9c:59:61:0e:a1:
fa:62:a7:b5:b1:67:24:a4:98:be:a5:01:85:e8:8c:6a:04:43:
e3:2b:0d:2c:58:b9:b7:99:35:12:ac:30:69:81:06:04:b4:4f:
94:0d:ac:85:84:8f:c7:52:1c:83:b0:c3:91:fd:cd:8c:df:eb:
c3:8e:cb:dc:b6:f8:da:0d:23:25:32:08:6c:ff:2f:15:76:8f:
cc:2b:0e:a4:ce:f7:c1:70:f5:43:7e:ca:d4:df:2e:31:57:fa:
a0:c1:4c:b6:f0:40:45:6e:de:63:82:48:be:02:0e:31:55:01:
ed:4c:6a:7f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM3MjdBRjExMC8GA1UEBRMoMzFGQ0QzOTJGRThFQkQ1N0UxMjUzOERDNjBBODA1
OUZGQTM5QTAzQTAeFw0yNjEwMTAwNDI5MDhaFw0yNjEwMTIwNDI5MDhaMBgxFjAU
BgNVBAMTDTZhYzliZjE1LWQ1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPK2PA4Mnyl2LKQuRsVyC9RdVZWtEUoMlOL6+MopcGKjIobiihejh0EBQ1
l4pjk5OoD23kFG1eiNQ2WA3w7qIx7xHB2EwYbpu3fE5Vjzl3Yb1wSKDOkRdVbtdh
2f81otI7zsxXgtiMYYT1zsTNeQk0unEuVpcXeRFtIXv9F2i1aZsVn0cKfn0sMSpY
kq67Vjanl0VVynMUYKgeqhSjpzx67UQV4uSUq7Q5wovDIEuPB7IMWiAnf+SIuZIa
WJBIznXhwLCVPArRLrpK9JRc8QLVKc0XU7DdsWP3/rLb2fsD2cBi5F/c9g0ME5ir
q5z//W3PXwufpcSDsqjfPaLVl9b5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/kpV
1B6oT8plUg2J7msLufO7ToowHwYDVR0jBBgwFoAUMfzTkv6OvVfhJTjcYKgFn/o5
oDowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDNzI3LzI3ODk0NUU0NkZBQjExRUZCNDI5NzI5MTc2MkU5NTFBL01melRr
djZPdlZmaEpUamNZS2dGbl9vNW9Eby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01melRrdjZPdlZmaEpUamNZS2dGbl9vNW9Eby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUM3MjcvMjc4OTQ1RTQ2RkFCMTFFRkI0Mjk3MjkxNzYy
RTk1MUEvTWZ6VGt2Nk92VmZoSlRqY1lLZ0ZuX281b0RvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBniEHzqRnHqm2NnZuhKJhx5IsJTRTl
ATGTvw2zl7h4PKHwrStxpTOJ1pSB5fgPWLdjGFA8mRy12jh98lSL5LQ7Up4snbki
9Q92MG8+UFiKUHdk/UdLxFH0XDbuX5QMMjNgwImIzHIjp9YB2H8xwpIQNAZjUR4/
posFILBASoq8s0XBbbOyhjevVNnpnFlhDqH6Yqe1sWckpJi+pQGF6IxqBEPjKw0s
WLm3mTUSrDBpgQYEtE+UDayFhI/HUhyDsMOR/c2M3+vDjsvctvjaDSMlMghs/y8V
do/MKw6kzvfBcPVDfsrU3y4xV/qgwUy28EBFbt5jgki+Ag4xVQHtTGp/
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:45:50 2026 by rpki-client