
Error: rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
File: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft (raw, json)
Hash identifier: 0jYABMOxX+tGNoV0ClhMWuXo+icssvM136Z4EdsId80=
Subject key identifier: D7:06:5F:7C:84:A2:15:8C:85:E3:5D:07:9E:A9:7D:A3:2C:01:FD:E4
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Certificate issuer: /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial: 066C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
Manifest number: 0665
Signing time: Wed 07 Oct 2026 02:45:11 +0000
Manifest this update: Wed 07 Oct 2026 02:45:10 +0000
Manifest next update: Fri 09 Oct 2026 02:45:10 +0000
Files and hashes: 1: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl (hash: jcuAzcKb3Huoj/10eAiS5iABSVepRJiV/fUoV/lF24s=)
2: C22D8994634611F1A44F9016CF1D38B0.roa (hash: dn0CiA4TD5hJ1aVLDN4K8BucDVCdQvAPyy7W2PdZhn0=)
3: 9EB86A96634711F19C778F1CCF1D38B0.roa (hash: IIR04ujeixANpE1nIcYKkmtOPYw3lT5knLPQfvE77Uk=)
4: 0F79069C634711F18E23381ACF1D38B0.roa (hash: XpA37kO4U/QHFHB+OsDeSIwJyVOkmHHBBXZIvEnz904=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1644 (0x66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Validity
Not Before: Oct 7 02:45:10 2026 GMT
Not After : Oct 9 02:45:10 2026 GMT
Subject: CN=6ac5b236-f461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:02:70:c4:b0:34:39:76:da:87:1b:90:13:
31:2e:29:6b:ca:29:32:a7:ba:e9:f1:3e:99:d1:83:
74:22:27:e5:61:99:64:68:c3:58:94:ad:93:68:db:
c4:48:cf:c9:af:f7:b9:c8:29:c6:0a:54:94:e5:16:
4d:4f:2c:5c:54:c3:bc:a2:6e:71:c5:21:fc:f2:83:
92:7c:e0:8c:6f:39:c6:38:1a:7b:3e:dd:0b:ae:d7:
8c:2d:89:66:74:e8:99:fb:28:e4:db:82:4e:2d:85:
ca:aa:2c:40:1a:63:4b:53:57:29:ee:70:93:b0:47:
bf:3a:87:39:e5:9b:8b:32:ee:20:d8:06:ee:ce:81:
83:65:20:c1:47:4a:ba:49:94:ef:60:93:2a:2d:ab:
0d:24:aa:c8:cb:79:56:07:98:50:39:66:52:56:07:
26:d7:3d:cc:64:7b:2c:4a:7c:c9:1a:fc:d9:ec:36:
22:eb:d4:96:05:4c:a3:11:0c:ec:3f:0e:3e:38:87:
f2:14:90:69:55:f0:37:4b:50:e4:ff:ca:0f:13:7c:
91:bc:df:5e:0e:75:5d:5e:bc:38:5c:8f:16:7e:d5:
fd:32:5a:e3:7b:c4:1c:27:b4:9f:57:7f:d6:df:6a:
40:16:1a:d2:e9:8f:aa:b6:fa:1a:73:60:15:7e:4d:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:5F:7C:84:A2:15:8C:85:E3:5D:07:9E:A9:7D:A3:2C:01:FD:E4
X509v3 Authority Key Identifier:
keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:aa:43:25:1f:2f:34:7a:6e:ca:c7:a1:e6:3a:16:8d:d8:
b1:ed:76:27:67:25:03:4b:65:40:5d:11:9f:6c:83:69:21:95:
27:49:d8:4a:de:26:8e:09:f6:af:4b:69:ff:06:04:35:b3:62:
c2:46:7e:ea:b0:a0:a1:f7:e7:53:13:bc:66:e2:a8:7a:bc:2a:
dd:d1:06:54:62:24:31:5f:45:9d:62:2e:0d:ba:e9:d4:7f:7e:
28:c3:4b:09:35:1f:37:03:a1:53:bc:e8:12:49:99:59:d9:23:
55:18:79:ee:72:0a:44:59:1f:cd:04:85:af:6f:5c:d4:bf:4e:
93:e7:7e:71:7f:f4:b9:e3:ad:11:fc:7f:df:32:f5:78:9b:6c:
42:92:f7:6d:ef:8b:08:85:1e:f8:81:4a:a5:33:4a:09:be:68:
72:a7:fc:07:83:7b:05:03:fb:6c:6f:1a:10:f6:e0:69:bd:85:
45:df:8e:b5:fd:89:32:18:29:bd:5a:b2:df:e6:94:28:1a:e0:
d7:1f:40:28:97:36:14:11:80:4c:76:76:a4:93:d3:2e:03:3a:
cd:e5:6a:fc:57:93:f7:42:b2:40:33:f9:76:4a:1f:a0:19:d6:
cf:14:60:50:85:78:72:1e:2b:21:3e:0b:d2:d1:20:f2:62:4a:
af:9d:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:43:16 2026 by rpki-client