
Error: rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier: UIEkd0tLIXtJtxeLIANZfQxBKh6K0EGP2Sk6l6Qdrro=
Subject key identifier: 5C:5F:5B:6A:71:79:B4:74:74:65:C6:D5:9C:70:AA:7C:65:EC:A3:AB
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer: /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial: 04AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number: 04A9
Signing time: Thu 08 Oct 2026 03:36:28 +0000
Manifest this update: Thu 08 Oct 2026 03:36:27 +0000
Manifest next update: Sat 10 Oct 2026 03:36:27 +0000
Files and hashes: 1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: TCoDgYYisA0rRYljMgEiGqPNTAzmzG7XY1pLysaajgU=)
2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 03:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Validity
Not Before: Oct 8 03:36:27 2026 GMT
Not After : Oct 10 03:36:27 2026 GMT
Subject: CN=6ac70fbc-1371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:92:54:b8:1e:c0:cb:bc:35:08:ab:30:ad:
b6:86:cc:3a:40:cc:a7:e7:56:4b:f3:ae:48:ee:39:
bd:bf:d1:f5:97:22:0e:1a:71:16:d1:ea:d6:3d:4d:
14:d3:3c:75:80:81:54:66:25:38:b0:6d:4c:08:92:
8c:ab:be:ac:82:28:f1:71:d6:ef:71:6a:e7:a9:5e:
9e:24:ce:55:6a:65:8c:fe:25:48:2e:95:26:7d:14:
b8:c4:ec:1a:4c:ef:4f:74:5a:30:66:30:47:cb:d0:
82:d7:44:a0:b9:fa:72:24:a8:dd:dd:3f:78:de:44:
62:66:ce:37:1e:70:d4:f1:a7:0e:20:88:67:23:54:
09:01:4d:40:a4:48:b2:81:60:47:6e:0c:58:25:0c:
3c:88:61:0e:f0:65:4b:ae:bb:bb:9c:e0:09:16:6a:
bd:8f:26:8e:26:a3:33:d6:7f:0c:af:28:8d:0f:e4:
f1:84:52:9a:73:d1:81:19:05:d0:72:ca:af:49:b2:
cb:75:93:00:60:3f:67:75:99:44:8d:5f:f3:8b:38:
46:bb:95:8e:e9:36:c7:53:ef:4c:17:8a:78:9e:2e:
f8:70:d9:24:ca:4a:4e:ef:d8:a0:ad:63:54:a8:7e:
c4:a9:0f:00:a4:e6:c9:cc:0f:38:27:8b:11:ea:68:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:5B:6A:71:79:B4:74:74:65:C6:D5:9C:70:AA:7C:65:EC:A3:AB
X509v3 Authority Key Identifier:
keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ad:59:3c:95:57:39:78:05:f8:1e:09:f6:ce:fb:c2:ba:35:
2c:e4:fd:af:38:2c:aa:02:de:05:d6:03:90:44:42:d4:d5:a3:
1d:9a:79:1b:ff:7c:d1:5a:34:40:63:cd:3c:c4:59:af:fe:ac:
84:de:62:eb:ef:61:39:e2:04:24:b4:06:0c:7d:f3:d9:0e:e6:
17:fe:74:59:29:47:28:8d:71:00:d7:e9:7c:ed:5b:46:14:48:
c9:ab:a8:a3:1c:07:e7:0b:4e:3c:7c:77:ad:3e:86:0d:6d:12:
6f:71:e2:16:a9:46:49:bd:2b:de:83:c2:49:c8:ba:02:b6:86:
d6:23:be:a9:76:0d:f6:0f:a0:5a:a5:a8:a9:1b:8b:73:bc:0a:
3f:93:2d:b7:82:09:64:49:ff:31:9c:33:e3:1d:d1:ba:d8:39:
ec:6a:f1:ab:e4:34:b3:60:82:b6:9e:8c:74:73:9b:24:a6:f0:
6d:f4:cd:c2:d9:7f:c7:fb:dd:af:53:99:a3:f3:8e:1a:06:ce:
d5:0c:81:b2:43:08:cd:1e:8b:a4:b8:d0:ad:bc:c9:88:73:4d:
55:b2:88:2a:25:e6:c4:d6:4c:17:84:5d:7c:7a:c2:b6:e1:57:
39:46:0f:a2:be:15:c8:59:1b:47:52:dc:82:92:aa:04:96:52:
00:2a:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:19:03 2026 by rpki-client