
Error: rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
File: OdAwrgr6xpErCxM_96NC94TQ6ow.mft (raw, json)
Hash identifier: 5VMlrk2L29qWWkVoEZW4k7iaG5WKBPIGj9qRYDqWevE=
Subject key identifier: 15:38:A3:91:C8:5E:CB:1F:17:6F:50:73:6F:5F:B4:C9:7A:E6:13:C5
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Certificate issuer: /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial: 0A24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
Manifest number: 0A1E
Signing time: Sun 27 Sep 2026 01:37:49 +0000
Manifest this update: Sun 27 Sep 2026 01:37:48 +0000
Manifest next update: Tue 29 Sep 2026 01:37:48 +0000
Files and hashes: 1: OdAwrgr6xpErCxM_96NC94TQ6ow.crl (hash: P8OagMiMqEuD1Yer8KUZS2QZSdyELvFqqe1/YdoC494=)
2: FE48D08AFC9D11E9BD0D4B40F8AEA228.roa (hash: bklBiFJiibIM4Ahr4MuYEGegKTjEFLUjUyhhSPhmCAA=)
3: EC1AC2E4FCA011E99F078842F8AEA228.roa (hash: vMaEHZSbtMwTml47SDgjbkHSKoCPHIjAJPxF4JG+NtM=)
4: B0109E46FC9F11E9A7249141F8AEA228.roa (hash: mWLr9gpGgYGc2eTR3HzordVAt5z5qlqSSvhvwmTMGaQ=)
5: 38D7B3B4FC9F11E9A4E33B41F8AEA228.roa (hash: nNsbmr9/5pRB8Y6AFAqdxecPNFhdqNuMc+kOEEeB4Yk=)
6: BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa (hash: G9n58toWNUqMDu66699/GW70sTU/7pnUIRdVDqWMeDQ=)
7: A4EBAA16FC9E11E9A1B9C140F8AEA228.roa (hash: 80PrfbUNINLOm8aOdH0UPxFoBlumMScmqP938jPlttA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AF, serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Validity
Not Before: Sep 27 01:37:48 2026 GMT
Not After : Sep 29 01:37:48 2026 GMT
Subject: CN=6ab8736d-51f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:e6:e1:07:e6:3c:9c:3d:50:cb:86:5a:16:
26:90:32:f4:81:6f:30:57:b0:80:19:cf:1d:cd:03:
06:d3:41:f4:0a:c5:a1:e5:fe:cf:1a:6f:b8:e0:84:
0a:ed:1c:3d:03:08:d1:b9:be:ac:d1:3a:20:d4:d7:
19:94:3d:03:52:af:4d:20:4e:34:e6:f2:5f:95:2f:
3c:39:35:c6:73:0a:e8:e9:28:b7:f3:bd:a4:76:cb:
b2:4e:ff:7a:d4:f0:87:7a:98:85:f2:86:05:a8:1b:
84:b2:21:6c:7d:ff:db:17:9c:b3:d8:e4:10:88:a5:
1e:84:57:ba:ba:8b:3d:84:2c:6b:d9:ec:a0:df:4b:
00:f9:45:72:70:5b:2c:0f:c2:ff:02:9b:76:5e:a9:
4c:6a:e6:c8:f9:e4:fd:b9:25:ca:bd:a0:53:85:eb:
ba:8d:e2:26:e2:43:54:3f:81:3b:de:74:99:fe:b2:
1b:7d:d3:a5:d0:8d:d1:a0:98:4e:da:cf:12:43:99:
39:49:e2:a8:e2:e3:1c:87:3b:18:59:4d:87:8c:3a:
b4:62:7d:39:d9:19:d9:e2:75:0b:58:ad:b0:d9:3b:
9d:87:49:dc:6d:e7:e2:1a:4e:ad:ba:20:a6:8d:8d:
96:b3:a3:bc:d3:5d:97:d3:5a:35:a1:76:8c:c7:55:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:A3:91:C8:5E:CB:1F:17:6F:50:73:6F:5F:B4:C9:7A:E6:13:C5
X509v3 Authority Key Identifier:
keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:04:11:8e:19:33:fd:3e:ee:82:90:d4:cf:b0:4f:13:25:
22:a2:3a:71:8d:eb:4b:ed:bd:f3:79:de:a9:66:2a:72:3c:e4:
77:a1:be:db:b6:37:9d:32:88:56:83:39:8a:9f:95:5a:70:49:
23:d4:b6:1c:27:9d:9e:a5:f3:e4:83:81:5e:8b:f1:8c:ae:c6:
32:1e:63:58:e5:6f:96:a9:7f:40:b8:f9:59:d6:e5:af:5c:ac:
a0:cd:6d:2e:62:ab:04:2e:57:0e:09:74:9e:6d:1c:5f:3d:47:
cc:25:13:b1:a7:f5:7b:91:ef:73:9b:be:be:59:78:8b:8a:02:
06:30:34:60:cd:fa:f2:83:9e:1f:1a:5d:62:d7:ee:05:4f:da:
7b:9a:8f:a7:f5:9a:6e:97:c6:1e:0a:c6:b8:2c:b1:c3:24:5f:
0c:5a:3e:e1:8d:3a:41:74:9d:3e:e7:a0:71:00:6e:cf:43:ac:
a1:90:bc:5a:c0:6b:b3:bd:6b:63:76:d6:ca:81:8b:78:1d:2c:
db:83:91:e4:28:92:90:ad:f7:1d:22:2f:80:86:92:8b:de:fa:
73:d7:f3:97:b0:01:8a:84:8d:7b:a7:b8:8a:ca:8f:20:1c:14:
72:35:10:d6:c7:18:a6:3c:2e:3f:5e:cb:6b:0d:28:6f:59:b1:
98:b6:fa:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjAxNjNBRjExMC8GA1UEBRMoMzlEMDMwQUUwQUZBQzY5MTJCMEIxMzNGRjdBMzQy
Rjc4NEQwRUE4QzAeFw0yNjA5MjcwMTM3NDhaFw0yNjA5MjkwMTM3NDhaMBgxFjAU
BgNVBAMTDTZhYjg3MzZkLTUxZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRDebhB+Y8nD1Qy4ZaFiaQMvSBbzBXsIAZzx3NAwbTQfQKxaHl/s8ab7jg
hArtHD0DCNG5vqzROiDU1xmUPQNSr00gTjTm8l+VLzw5NcZzCujpKLfzvaR2y7JO
/3rU8Id6mIXyhgWoG4SyIWx9/9sXnLPY5BCIpR6EV7q6iz2ELGvZ7KDfSwD5RXJw
WywPwv8Cm3ZeqUxq5sj55P25Jcq9oFOF67qN4ibiQ1Q/gTvedJn+sht906XQjdGg
mE7azxJDmTlJ4qji4xyHOxhZTYeMOrRifTnZGdnidQtYrbDZO52HSdxt5+IaTq26
IKaNjZazo7zTXZfTWjWhdozHVYWhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFTij
kcheyx8Xb1Bzb1+0yXrmE8UwHwYDVR0jBBgwFoAUOdAwrgr6xpErCxM/96NC94TQ
6owwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwMTYzLzg4NURDNjQ0RkM5QTExRTk4MTc5QjIzREY4QUVBMjI4L09kQXdy
Z3I2eHBFckN4TV85Nk5DOTRUUTZvdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09kQXdyZ3I2eHBFckN4TV85Nk5DOTRUUTZvdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANdAQRjhkz/T7ugpDUz7BPEyUiojpx
jetL7b3zed6pZipyPOR3ob7btjedMohWgzmKn5VacEkj1LYcJ52epfPkg4Fei/GM
rsYyHmNY5W+WqX9AuPlZ1uWvXKygzW0uYqsELlcOCXSebRxfPUfMJROxp/V7ke9z
m76+WXiLigIGMDRgzfryg54fGl1i1+4FT9p7mo+n9Zpul8YeCsa4LLHDJF8MWj7h
jTpBdJ0+56BxAG7PQ6yhkLxawGuzvWtjdtbKgYt4HSzbg5HkKJKQrfcdIi+AhpKL
3vpz1/OXsAGKhI17p7iKyo8gHBRyNRDWxximPC4/XstrDShvWbGYtvrZ
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:22:34 2026 by rpki-client