
Error: rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
File: T3XDDaGtpMwafonY6RTQz1wvWgs.mft (raw, json)
Hash identifier: zwkH2fCYOY20OR8f+M4b+14YdHGpv7nW9jDCRadWxIs=
Subject key identifier: DA:34:D3:8D:78:0B:81:AA:FF:ED:48:D8:5C:F0:76:44:2D:A4:DE:9B
Authority key identifier: 4F:75:C3:0D:A1:AD:A4:CC:1A:7E:89:D8:E9:14:D0:CF:5C:2F:5A:0B
Certificate issuer: /CN=F36EE209AF/serialNumber=4F75C30DA1ADA4CC1A7E89D8E914D0CF5C2F5A0B
Certificate serial: 64
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
Manifest number: 63
Signing time: Sat 26 Sep 2026 05:41:04 +0000
Manifest this update: Sat 26 Sep 2026 05:41:03 +0000
Manifest next update: Mon 28 Sep 2026 05:41:03 +0000
Files and hashes: 1: T3XDDaGtpMwafonY6RTQz1wvWgs.crl (hash: aqAKsKQBsslcxcSYQXIzgDt2RhEGKJTva8QY4jeOrcw=)
2: 8E5119466E2311F189622DE3CE1D38B0.roa (hash: XhsWhAAmmhdpiJK+WNp0zODpLcbXPq81CKKIzHRL6g0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE209AF, serialNumber=4F75C30DA1ADA4CC1A7E89D8E914D0CF5C2F5A0B
Validity
Not Before: Sep 26 05:41:03 2026 GMT
Not After : Sep 28 05:41:03 2026 GMT
Subject: CN=6ab75af0-23c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:73:1d:be:12:52:23:39:8f:54:f3:fd:63:
38:47:5b:8f:64:a1:0a:d3:ec:d4:a8:aa:88:8e:27:
56:04:61:47:ff:60:ec:5f:65:16:6b:50:67:1b:0d:
5a:d5:d8:72:ed:50:3e:03:52:78:fe:08:f1:e7:01:
ee:a5:cd:a5:11:55:c5:26:a0:ed:cb:a2:88:b1:5f:
6b:91:7b:7a:ea:32:7b:3f:11:18:34:24:5e:7d:bf:
8f:15:d0:d6:13:6c:cf:60:c8:6a:0e:4e:e9:2f:0e:
01:b0:b2:ce:2c:ed:08:fc:ea:c4:7b:a4:e3:b5:53:
3c:8d:e9:da:49:7d:01:a2:9e:ea:e5:91:12:5d:6c:
4a:30:4a:c6:e1:c8:2e:0c:9b:73:cc:0c:d8:fe:af:
93:6e:e8:ad:82:d7:13:80:09:4d:49:8e:57:1e:0b:
7b:af:71:cc:9b:1e:10:ca:37:5c:ff:3f:83:7d:b3:
43:65:18:aa:cb:f3:16:f2:11:d2:60:a1:bb:df:57:
17:7c:77:df:69:76:a4:7c:64:32:89:35:90:c3:d4:
0d:40:7a:4f:b8:fd:6d:29:6e:e1:f4:9c:dd:95:99:
05:ee:eb:57:e8:4b:a1:be:5f:cd:cb:5d:ce:d2:f0:
21:9a:27:6e:a8:c9:d3:96:28:8b:da:57:ea:4c:42:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:D3:8D:78:0B:81:AA:FF:ED:48:D8:5C:F0:76:44:2D:A4:DE:9B
X509v3 Authority Key Identifier:
keyid:4F:75:C3:0D:A1:AD:A4:CC:1A:7E:89:D8:E9:14:D0:CF:5C:2F:5A:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:20:1c:4d:60:8d:6c:d3:af:e4:87:d6:79:47:4c:df:1c:65:
d3:ad:8f:cf:44:e2:93:c8:dc:98:18:8e:ef:9a:6d:f9:8f:4b:
48:78:4a:99:86:35:52:66:20:bf:f1:57:bb:df:4c:be:b7:78:
42:ef:be:d7:0a:81:30:95:51:c8:7f:05:c8:99:01:7e:26:cf:
7b:5e:37:d8:fc:35:15:ab:a2:e5:67:11:a6:ae:8a:23:5e:71:
d7:97:77:ba:16:0a:bd:ef:43:63:7c:c3:db:eb:4c:0d:2e:bb:
22:dd:ff:a6:18:d5:7b:5b:4f:f5:7d:4c:47:a9:9a:d3:d3:75:
b6:b2:69:e3:e0:57:4f:15:78:9f:4c:9e:8b:5e:5d:d3:6f:e7:
6c:9c:df:15:76:b3:9d:af:fb:ed:f3:7e:54:d5:52:1c:4b:71:
8c:88:cc:59:51:a7:13:ab:84:7c:ef:42:45:86:8a:fe:36:f3:
63:b2:ee:4f:d3:eb:0b:34:5a:c6:0a:a2:f4:15:74:52:bf:c6:
8e:19:67:3c:81:fb:02:07:bd:ed:8a:4b:1a:9f:b9:6e:04:dd:
49:92:f6:1d:5d:84:45:42:97:25:3a:00:87:ad:68:f4:95:d6:
73:99:11:40:89:54:b5:b5:d0:08:be:f9:df:27:2f:f2:17:15:
d1:db:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:59:30 2026 by rpki-client