
Error: rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
File: v_ENc6qBONzjZ0KnZvllI4WeSHw.mft (raw, json)
Hash identifier: p+NFRYzgqEPNnHHCVovUM+OZxCbMpNXyJfW+0UumcvE=
Subject key identifier: 0F:9D:D7:62:46:E7:03:27:08:6A:45:AC:DC:20:7A:C4:7D:55:46:D3
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Certificate issuer: /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial: 0A5F
Authority info access: rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
Manifest number: 0A55
Signing time: Wed 23 Sep 2026 01:35:57 +0000
Manifest this update: Wed 23 Sep 2026 01:35:56 +0000
Manifest next update: Fri 25 Sep 2026 01:35:56 +0000
Files and hashes: 1: v_ENc6qBONzjZ0KnZvllI4WeSHw.crl (hash: 8YuI3GceVPpiwGE8iuywXqgvzoHjzw0fN3JLH+guUC8=)
2: 8798FAA821AF11F197D80AB0DAE4EC9C.roa (hash: yINpq7jr9xplZf3UorF40WMgy5Q4M9fmu1bCUIs0aD0=)
3: B571390E21AF11F1A70F3CB0DAE4EC9C.roa (hash: jQBOlKXzRvL7aZ4LvcPCaJ8v5ZYQA2/tFLBZwlHecQA=)
4: 4A1F521C21AF11F1AFF9D3ADDAE4EC9C.roa (hash: EgoFvPh8BZLqAUs5ARxtz1AMfn7yN93szVvusnSBYKY=)
5: 6D16A902345111EA83C8F660F8AEA228.roa (hash: CEsf8aJnIGJmX6uZlMZKivmaxNidagXwOjPfOH6lI4A=)
6: 0D29923C21AF11F189E0F7ABDAE4EC9C.roa (hash: 8ZikLGmt4ec0ORFNQUxDPWAGIabOlnW5dc7hSnlXZeU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAR, serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Validity
Not Before: Sep 23 01:35:56 2026 GMT
Not After : Sep 25 01:35:56 2026 GMT
Subject: CN=6ab32cfd-71ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:f5:c1:c5:66:d3:e0:74:f4:42:33:1f:f9:
7f:19:31:20:18:5d:ec:c2:31:f0:38:68:96:73:70:
ad:1b:47:f5:8d:86:17:c1:ba:0d:22:a3:45:fe:2f:
5d:9d:32:91:2b:d5:e2:db:04:53:1b:1c:e8:ad:04:
09:15:12:e0:87:da:cf:1e:0c:83:92:9a:27:91:e3:
42:f7:5f:79:a2:ba:dd:61:5c:46:89:e3:d4:e0:d0:
83:65:28:3f:34:b4:e7:11:84:27:cf:51:5d:08:45:
cd:22:b5:6f:11:86:ca:1c:06:66:c6:3c:3b:59:93:
01:bf:ee:af:1b:14:73:91:00:5d:9e:9f:cb:b1:6d:
4b:05:b6:f0:07:ed:c3:ca:47:cb:5b:2f:86:88:b5:
bc:72:ea:99:64:5a:6d:70:c0:28:f2:fe:0e:f6:9a:
2f:af:ac:c4:5d:f0:bd:ec:6f:c7:30:83:37:8d:41:
cf:31:b9:02:2e:fa:79:a7:a1:aa:ab:27:62:66:da:
43:ac:c8:10:63:64:d4:49:3c:c5:6f:a4:fc:1c:a7:
ad:d8:19:64:1f:a6:8e:8a:8b:c5:5f:85:fc:e8:e2:
b1:a1:5f:94:84:4d:35:d3:92:a8:58:54:aa:fd:bd:
3d:16:bc:6c:33:4b:71:1d:7c:d0:1c:36:69:29:cd:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:D7:62:46:E7:03:27:08:6A:45:AC:DC:20:7A:C4:7D:55:46:D3
X509v3 Authority Key Identifier:
keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:03:ff:87:65:2f:e7:83:df:98:6e:84:b3:ff:67:54:73:
54:8e:c5:e4:41:63:dd:b9:1c:24:ce:1c:3e:8c:68:07:92:1f:
d2:83:52:0c:85:1e:51:b7:9c:25:f7:f1:88:63:d8:16:7f:a1:
86:e8:d9:e0:b1:53:0d:d0:a8:c4:9a:09:8f:32:e0:4d:79:3c:
e9:4c:91:1d:82:65:3b:d3:e8:1e:2b:6a:f9:fb:76:24:8b:3e:
54:ae:c7:4e:e3:33:0a:80:b8:71:48:ab:e5:93:ff:71:a6:00:
cb:ce:d8:8a:7e:41:81:bd:6d:54:73:c0:d8:b7:c8:df:47:b4:
8c:bb:c8:ff:01:7e:cc:18:89:28:1c:a1:07:49:fe:ee:c7:fd:
f6:18:30:80:82:73:4b:81:9a:63:ed:e2:6d:54:d9:9c:9c:72:
5f:0e:e3:f9:ec:a0:05:93:d6:bc:81:c0:de:e5:b9:53:18:86:
95:bb:2c:88:b3:c8:d4:c3:e4:ff:20:49:8a:b8:f6:bf:90:13:
1e:b3:30:89:54:4b:e3:d2:5e:6f:51:ca:2b:7e:48:c7:dc:01:
f6:f9:7d:d1:d8:e2:81:47:4a:66:9b:ba:af:c9:99:4e:d8:59:
32:ac:61:f6:4a:e6:3a:a4:73:f2:2e:e5:34:39:61:3b:ea:f6:
72:31:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:44:53 2026 by rpki-client