
Error: rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File: 2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier: RLeY28/Ed3x1FakqN99kEwJQYQWLOK0gMKJKCDF7f3M=
Subject key identifier: C0:26:1B:DB:6D:4D:ED:14:7A:92:DF:3E:DC:9F:D1:48:89:FC:18:21
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer: /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial: 02B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number: 02B0
Signing time: Fri 25 Sep 2026 04:38:58 +0000
Manifest this update: Fri 25 Sep 2026 04:38:58 +0000
Manifest next update: Sun 27 Sep 2026 04:38:58 +0000
Files and hashes: 1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: GItL2q7CkCrMDcK2QXyvzXwqpW12Z2rMUuVzaacCWEc=)
2: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Validity
Not Before: Sep 25 04:38:58 2026 GMT
Not After : Sep 27 04:38:58 2026 GMT
Subject: CN=6ab5fae2-178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:89:01:98:d5:8d:73:9b:c4:52:d4:f4:17:
ab:52:f6:85:7d:80:46:16:9c:ae:6d:86:b7:16:70:
87:25:f6:b5:33:ba:50:02:24:54:2d:eb:e1:a8:bb:
27:87:f3:a7:49:cb:98:78:7c:25:bf:ff:1c:9e:e9:
ad:18:ad:36:ae:c0:36:29:25:2d:05:7b:48:26:87:
f3:3a:76:36:21:d2:49:2e:f7:4d:92:dc:9d:d0:1c:
75:13:85:07:9e:38:5c:37:1c:42:75:9f:39:13:1e:
b6:c7:a3:a8:14:cc:b4:48:91:96:a4:28:53:16:63:
fe:00:48:c7:f3:d0:19:c3:85:8b:c0:30:1c:79:56:
84:cf:c4:c5:a8:74:cb:2f:3e:0a:e8:50:27:64:8f:
4f:98:80:bc:9c:f4:c0:bd:0a:fc:4d:09:39:c7:be:
36:5e:44:c6:f3:01:f2:3d:f9:4a:fc:63:f9:b7:3c:
2d:5a:e9:e4:6f:ec:bf:ba:96:54:50:1d:16:0f:d5:
a5:90:8a:12:56:89:0a:47:c7:23:b9:1d:40:14:96:
e6:82:4e:37:a1:0f:05:a2:1e:b8:3b:5a:4b:80:3c:
49:d2:48:8a:67:c1:3b:e5:f2:cf:62:74:64:bf:af:
ee:ca:d8:66:7b:1b:44:14:7b:e3:0c:9a:71:e3:15:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:1B:DB:6D:4D:ED:14:7A:92:DF:3E:DC:9F:D1:48:89:FC:18:21
X509v3 Authority Key Identifier:
keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1c:2a:37:ce:bd:93:30:dd:ad:d2:f8:b7:c2:63:58:87:5e:
76:2a:7c:52:2f:8d:06:fc:f4:29:b7:98:93:2a:bd:64:24:07:
41:03:11:e9:c7:d9:18:02:d5:e8:ae:b9:21:f4:6b:89:8f:cc:
b5:e5:07:5a:1f:89:66:f0:5b:f4:45:b4:93:3a:b7:b2:cf:ca:
d5:8c:1d:cc:41:cb:2e:f2:4a:a3:b8:95:8d:b9:3b:e6:8a:8a:
94:51:89:69:06:0e:80:a5:e0:50:45:50:0b:bd:fb:e9:a8:fe:
9f:48:39:75:42:fa:a2:5e:66:9a:fb:2b:f0:f5:6c:f8:16:c7:
42:e9:2e:85:ba:85:f9:9c:17:2d:52:ec:54:2e:8c:33:49:c2:
c1:cf:bd:1b:1d:f6:e4:7e:1c:7b:30:d3:0e:d0:43:59:46:b6:
d3:65:98:d2:04:fa:a0:0f:a1:85:4e:31:55:65:59:63:4d:cc:
13:2c:f9:74:b6:66:97:0f:8d:0f:fc:b4:3e:57:5f:dc:d9:ee:
9e:26:de:2c:66:37:90:9c:01:89:b8:4a:0a:d4:c2:40:78:7e:
9b:5d:8b:fa:4a:39:08:f3:9a:51:f7:e2:1e:de:20:d1:f8:38:
49:fc:4d:b7:c1:70:dd:03:3a:21:81:de:fa:08:84:f3:4e:02:
9d:76:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:14:50 2026 by rpki-client