
Error: rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File: kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier: nhnlmHCHUTTVnoLh+oHDmtsUTrZqanbIBRwRQMj5h6s=
Subject key identifier: B3:74:60:CE:02:3C:E6:EB:2D:7F:8A:0E:4D:3A:3B:92:86:F5:34:D3
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 0923
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number: 090C
Signing time: Sun 11 Oct 2026 01:54:24 +0000
Manifest this update: Sun 11 Oct 2026 01:54:23 +0000
Manifest next update: Tue 13 Oct 2026 01:54:23 +0000
Files and hashes: 1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: rvzib43t19eBDIOtoBkXWt4JF6Eh6wT9/zgCoi4Xs/E=)
2: D318CC8C60AD11F1834B33D2CE1D38B0.roa (hash: vytVxGQ5+3+xcP2yd2fLQ/SusudZIXkMM5vt1VWGOmM=)
3: 897EC16E60AB11F1A8C053C5CE1D38B0.roa (hash: cOUky0Q6559nAr4pPlLRgn5KmQ7ELu+a9eo4lRfn4Mg=)
4: 6748080C60AC11F1928CA7C9CE1D38B0.roa (hash: aiq8sw3U5IVlccJ2GnivuZdBAxpg4+7vp5rz3mmOjQc=)
5: 1394835A60AE11F1B76EE6D5CE1D38B0.roa (hash: qfAk6epq64XJP4NhzfTGD3cJAx9bl2U959tuTFQxuXE=)
6: FABD169A60AC11F1BE76D3CDCE1D38B0.roa (hash: k55PhIufq/MeyxvA1lamTZ3k66D8nz3zhmTmmjbZpLk=)
7: 5EA59BFA60AD11F1AF689ED1CE1D38B0.roa (hash: cdEai7Ee3CZvUvc9U/SJDi4Blq+Yz12d2wfaw2JZgC0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Oct 11 01:54:23 2026 GMT
Not After : Oct 13 01:54:23 2026 GMT
Subject: CN=6acaec50-39c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:e1:e2:9c:b4:2c:61:d1:11:b6:fe:40:1e:
2c:0f:4e:f2:49:a6:1b:77:6e:fb:49:b1:fe:cc:34:
69:63:a7:3d:75:ee:88:e6:69:f3:d4:46:a0:30:74:
fb:44:47:91:19:a2:0a:f4:32:9b:4a:b7:29:ce:ac:
31:3b:9f:36:9f:66:aa:63:d8:6c:64:1c:5e:03:b0:
a0:40:82:1f:74:ea:5d:15:e0:b8:ff:c5:4b:9d:c2:
a0:bd:51:66:1f:7e:e5:6b:de:c9:3c:c8:70:fa:9e:
d1:ad:1e:5d:3a:fe:b1:ab:b8:c2:6d:39:8a:c0:a1:
6f:92:21:04:7d:00:df:f2:d1:81:a6:39:09:eb:0b:
7a:29:c3:0b:0d:29:50:3e:18:6f:cb:6e:41:61:8d:
74:7c:84:5f:13:cb:bf:7d:a2:a4:fb:2d:91:25:d6:
99:04:5e:4d:03:56:94:9c:2a:0d:6f:87:a3:62:fb:
55:8c:92:8b:10:00:78:79:2b:3f:7d:4b:ed:b4:45:
61:33:7d:e5:41:a6:32:73:5b:32:50:66:df:5b:c2:
c2:ca:de:1b:1c:1b:f1:be:b1:2f:e3:a0:78:35:49:
31:39:93:24:40:6a:a8:1c:54:0d:fb:21:65:39:4d:
3d:1e:4a:db:d8:f4:e9:51:ad:e0:09:f7:4c:62:f7:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:60:CE:02:3C:E6:EB:2D:7F:8A:0E:4D:3A:3B:92:86:F5:34:D3
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:ff:90:0f:88:e5:07:23:a3:57:fa:77:7f:b2:9c:4a:25:
05:62:f0:1a:64:9c:21:e1:c1:4b:89:fc:40:93:69:31:c6:1f:
a9:d8:4f:1c:46:66:50:f8:f7:19:f5:86:5f:92:e0:56:a6:71:
97:fa:65:94:8c:be:12:5d:a6:f9:46:05:ff:ab:57:94:d5:7b:
54:46:fd:5d:96:8d:75:70:5b:c6:69:9f:27:69:da:cf:dc:76:
1e:a1:19:f6:12:7e:69:d2:21:7f:e6:09:d6:46:82:16:54:d9:
67:dd:65:b4:c2:27:ca:b8:57:bf:e8:64:43:dc:45:2f:e3:1e:
3f:13:d9:4b:10:62:d0:9f:73:b7:72:e2:b7:1b:a5:b0:d7:ab:
5b:56:61:c1:f0:ac:c7:5b:09:1e:82:0a:34:c3:37:f9:90:d6:
d8:24:97:4b:af:83:80:c7:bf:5e:e3:5d:c0:a2:83:c2:9a:94:
ff:3e:1b:22:49:4d:92:93:b9:d3:87:f4:72:28:77:f6:9f:84:
2c:c8:a7:56:19:d8:b1:8d:91:d6:c1:21:6e:6b:59:5c:52:70:
a1:d3:32:3e:be:2d:4b:be:11:a5:43:a8:4f:c6:20:4a:6e:51:
1d:ab:49:ab:29:67:00:2c:4d:69:9b:31:d1:77:65:f9:a4:84:
76:ee:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:54:19 2026 by rpki-client