
Error: rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
File: ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json)
Hash identifier: FthYG/4dTWyLNJhay/QS8EeJxRGIV9I657NLMsilkz8=
Subject key identifier: D8:D9:D6:92:E7:55:B3:CC:1D:29:A9:9A:01:3D:84:99:09:81:F5:8A
Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
Certificate issuer: /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Certificate serial: 049D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
Manifest number: 049B
Signing time: Thu 24 Sep 2026 03:37:36 +0000
Manifest this update: Thu 24 Sep 2026 03:37:35 +0000
Manifest next update: Sat 26 Sep 2026 03:37:35 +0000
Files and hashes: 1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: WEGpW4w4sJF3FjbkYj7kDQJNyIwlaG2UWBRNyYhuRgA=)
2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=)
3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Validity
Not Before: Sep 24 03:37:35 2026 GMT
Not After : Sep 26 03:37:35 2026 GMT
Subject: CN=6ab49b00-b1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:a1:7b:81:a6:db:20:5e:b0:8d:61:8a:7a:
7f:2c:c2:16:f9:90:3a:eb:3d:9c:f2:57:59:27:62:
11:95:2d:72:02:cd:ff:af:10:04:17:cd:61:71:e2:
1a:17:9d:be:01:e7:38:57:6d:d4:c7:91:82:1f:2c:
07:5e:87:ce:f1:93:19:52:b0:92:41:45:6c:7c:c0:
64:ba:de:df:f1:5c:f7:6d:62:fb:cd:03:96:e9:9c:
c5:b0:e4:1c:b1:9a:33:ec:f2:ea:24:36:ba:41:dd:
74:26:f2:cd:56:7d:d5:b9:21:8b:c9:03:b2:3d:e1:
f3:ad:da:d9:d9:13:29:c5:c1:15:96:1f:10:1b:c7:
92:cc:74:a8:95:38:80:45:4d:5b:30:11:94:80:3b:
fd:79:8e:58:7f:d1:0b:87:d9:74:fd:ca:e5:ba:ff:
f2:48:b6:2b:20:be:dc:a0:54:30:1a:fa:cd:6c:50:
26:d2:ef:ad:93:aa:ec:20:8e:27:38:8f:5d:78:ad:
90:ca:3c:10:da:de:24:c1:19:b7:41:f8:8a:a0:8e:
5b:6d:80:a7:9d:22:73:e1:10:12:df:52:12:d1:09:
d5:d2:08:6b:4c:05:52:2f:6e:a3:8c:9a:b3:91:92:
08:db:35:71:56:aa:eb:3a:4c:19:b3:80:6a:98:69:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:D6:92:E7:55:B3:CC:1D:29:A9:9A:01:3D:84:99:09:81:F5:8A
X509v3 Authority Key Identifier:
keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:e5:ff:86:b3:89:f4:ff:57:c9:26:a5:e8:6c:97:ae:1e:
7e:42:ec:0d:9a:51:a8:79:ce:aa:bd:4f:77:cb:4a:cb:11:ab:
2d:45:4a:98:f9:f2:fe:9d:60:ad:98:74:c7:06:35:52:97:92:
de:66:c2:4d:f3:ed:c2:22:b3:f4:2e:6e:8f:ad:eb:c6:07:cb:
49:d0:9a:05:7f:cd:0c:35:03:6c:88:b6:7f:cf:6f:0e:c8:fc:
ec:9a:5f:ea:c0:18:23:05:1d:c2:ba:34:49:2f:ff:f9:d6:09:
0c:ab:62:16:22:a4:8c:ec:44:ee:d2:10:ea:1c:96:85:26:0c:
42:d5:7d:22:86:4d:41:8d:47:8e:17:75:53:7d:18:dd:c2:7c:
15:d2:91:69:8f:fe:ff:14:b1:01:aa:b6:13:45:f5:a6:28:2a:
69:dd:2c:15:c0:e7:a0:33:97:68:71:ee:9c:c9:d0:3e:f2:31:
5a:da:6d:a7:aa:c7:cd:61:8b:ae:52:b2:48:91:eb:c8:6e:7b:
25:14:fb:34:8b:a9:11:7e:97:5f:e7:27:ae:c8:78:cd:a2:08:
a3:7a:37:f4:08:6b:d4:9a:cc:67:98:9b:78:c4:b8:c8:eb:c5:
9f:11:5f:f3:d2:1a:6e:40:6e:54:c7:83:04:56:ec:f8:42:a7:
0e:e8:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:45 2026 by rpki-client