
Error: rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File: Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier: xY4WLCc+2yZETz/R3BhcrL3hIDSrFJEx4xUducKvKzI=
Subject key identifier: 6F:09:8F:AC:A3:93:69:B7:42:89:BC:C2:19:0F:BC:AA:AB:4B:9D:C8
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer: /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial: 05FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number: 0610
Signing time: Sun 11 Oct 2026 02:59:50 +0000
Manifest this update: Sun 11 Oct 2026 02:59:49 +0000
Manifest next update: Tue 13 Oct 2026 02:59:49 +0000
Files and hashes: 1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: mCxoPZ4QL5EqwA4ervixjDYi9jG426BLU1TijRIdo8g=)
2: 171E9A8816E411F1A88C6BB9DAE4EC9C.roa (hash: vJQ48Pdad/mMI/K9zYFw3poQzcd4T1o72/4e9rHed8k=)
3: A572A8A416E111F19EA4E7ACDAE4EC9C.roa (hash: n7gCG2uQxTeIhVaPEx4goN+jApSMUA/WmCugEwzQCJw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Validity
Not Before: Oct 11 02:59:49 2026 GMT
Not After : Oct 13 02:59:49 2026 GMT
Subject: CN=6acafba6-90c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:d6:4b:98:6c:3e:b6:46:69:41:ab:e1:a6:
27:89:82:e6:51:14:0c:29:f1:21:08:f5:35:90:4a:
71:fe:cc:97:a8:23:42:12:69:19:04:c3:ab:e3:57:
fa:81:fe:72:23:55:bc:3d:1a:84:f5:1e:0a:51:eb:
2a:74:f1:55:7c:cc:c2:b1:38:fb:cf:d6:bb:d6:dd:
c2:7d:0d:dc:c2:a0:9e:31:39:bf:a9:64:97:97:86:
30:89:ec:ff:d3:b4:de:70:9c:6d:c8:12:ee:94:a7:
58:4a:08:37:17:67:9e:25:9e:df:68:a0:b7:53:62:
83:86:21:82:fc:4f:bb:9c:2b:6f:e0:00:b3:84:51:
b5:f5:92:98:72:f3:a5:98:7d:46:ba:30:5d:67:d0:
7b:22:5e:c9:97:fd:07:f1:81:fb:f0:37:15:5d:a7:
cd:de:fc:89:7b:84:41:da:4f:f8:07:7c:fb:65:d8:
ae:49:43:45:64:28:5e:56:5b:d0:a5:4a:58:0d:7e:
b5:14:41:b2:b6:d0:96:6b:90:45:fd:b5:07:04:92:
93:49:66:11:0e:06:81:d8:2d:9a:14:86:82:34:c6:
8c:d0:9c:18:29:17:2f:4e:04:ba:e7:fd:6b:13:14:
10:10:ff:7f:b4:db:7c:97:80:df:12:7e:fa:20:bd:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:8F:AC:A3:93:69:B7:42:89:BC:C2:19:0F:BC:AA:AB:4B:9D:C8
X509v3 Authority Key Identifier:
keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:e8:6d:07:24:14:f9:48:76:d6:17:e2:a2:f2:db:b0:59:
46:bf:36:4c:8a:f3:bf:a8:a4:c6:79:0b:69:62:75:ba:b7:02:
79:4f:e0:e0:68:45:6f:ba:69:2c:b4:94:41:5b:1a:88:a6:e1:
50:44:32:26:c8:58:17:c1:b1:5e:00:31:c3:f9:c0:db:6e:51:
de:48:a2:09:a9:78:d3:6b:d8:94:15:7d:53:77:2e:30:68:14:
08:bd:65:cc:8e:52:28:f5:cd:9b:6b:eb:ac:76:62:c2:cb:36:
ee:f9:bb:69:ae:c3:d3:8f:d5:ab:58:60:ca:c7:ee:f4:33:58:
0c:bd:46:22:7e:5e:72:95:69:4e:fc:f4:ed:a1:54:e1:35:1e:
47:44:4b:41:51:97:96:d6:3f:63:38:fe:ed:a6:68:5c:e2:c6:
c4:f4:93:29:d7:61:8e:19:eb:e1:b8:de:72:1c:8f:dd:ef:37:
db:3a:07:71:bd:f6:37:31:86:92:3c:be:45:f8:ac:d5:b8:95:
ef:ff:18:08:63:42:36:3d:69:c6:95:63:75:70:a3:fd:e1:60:
73:37:61:47:c1:ad:03:ff:2e:e3:5e:98:fb:28:a0:d0:fb:70:
44:40:b2:9c:db:c4:41:8c:47:dd:28:27:2a:d4:ce:7e:32:fd:
bf:33:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:31:42 2026 by rpki-client