
Error: rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
File: 19cqZIe9d2qLv61POGE8OxU1CYM.mft (raw, json)
Hash identifier: Spb/Yb1iW0EaEJZhWA0k1FxC6zaYcUhzGCmWl8rPksw=
Subject key identifier: E1:62:B3:64:C5:A8:35:0E:C3:F5:DD:5F:A0:35:26:1E:0A:62:35:B9
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Certificate issuer: /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial: 101A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
Manifest number: 1015
Signing time: Thu 24 Sep 2026 00:55:04 +0000
Manifest this update: Thu 24 Sep 2026 00:55:03 +0000
Manifest next update: Sat 26 Sep 2026 00:55:03 +0000
Files and hashes: 1: 19cqZIe9d2qLv61POGE8OxU1CYM.crl (hash: Gg1dUnqESMt6GA8QmgscvP0CqDCZySyBF0UNl4epjBc=)
2: 42BB6C92B57511EF951BBFBD762E951A.roa (hash: 1bWInketCzu/Dqakbj5R6DwsUfKJazNvf+AWykl+zAc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4122 (0x101a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AF, serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Validity
Not Before: Sep 24 00:55:03 2026 GMT
Not After : Sep 26 00:55:03 2026 GMT
Subject: CN=6ab474e8-4ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:b0:8e:8d:97:72:cf:08:00:13:96:98:67:
01:a9:65:43:8d:fe:01:5d:62:39:8b:d3:d1:85:9f:
00:1b:5b:72:e6:50:e0:8d:ab:dc:15:c7:d9:bb:6a:
e7:ce:a4:9e:b0:04:41:3d:ef:e3:63:f8:d4:eb:4b:
53:dd:26:d3:c8:be:51:56:ca:50:e0:04:e3:76:fe:
db:08:d4:2d:8b:b9:33:e5:95:c1:14:44:70:34:60:
a9:e7:9b:44:fc:0c:ab:0f:56:f5:ef:99:cc:87:8e:
26:0f:c7:ed:64:22:2d:23:af:07:f7:e8:09:78:31:
9a:4a:89:8b:fc:a4:ed:e4:06:d7:eb:f3:a7:2b:2c:
f3:1f:6b:eb:0c:2c:66:59:9b:d5:82:98:fd:c0:a0:
cf:8c:a3:f3:4a:91:da:ad:b6:fa:30:80:32:65:ff:
ef:bf:09:41:e3:58:8e:97:68:e8:e7:be:44:56:09:
dc:00:f9:b3:a5:1c:c2:d8:81:d8:9e:12:e0:43:67:
45:a3:ab:e2:95:62:8a:3d:6f:08:79:1e:e4:68:1e:
4c:13:fe:04:b0:dc:b2:cf:35:e1:95:6a:43:97:82:
0e:59:53:72:9b:5d:99:7c:b4:11:27:19:db:91:94:
92:4a:c5:5a:98:67:f2:2d:8d:36:3c:f9:a6:ce:06:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:B3:64:C5:A8:35:0E:C3:F5:DD:5F:A0:35:26:1E:0A:62:35:B9
X509v3 Authority Key Identifier:
keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d0:30:bc:0d:df:d2:dd:3d:0b:fc:c2:a3:cc:b4:93:ce:82:
e1:64:62:58:93:bb:14:ba:0e:fb:88:62:80:a4:2d:f9:87:32:
bd:96:f9:bd:dc:24:e6:54:8c:3f:e4:f0:b4:55:3d:09:9e:61:
21:34:68:90:c9:9f:6b:5d:a7:65:63:be:be:71:99:a5:41:b8:
fb:b3:16:b8:be:45:ea:82:7e:d3:67:6e:c0:30:7e:cc:7d:7a:
ca:69:bf:a6:e5:e4:52:e4:63:e2:8a:95:49:2e:c5:1d:5f:fd:
e2:37:bb:99:2a:4d:67:b2:93:d4:eb:4a:c5:85:55:0f:ff:ba:
44:fc:8f:20:14:f6:7e:8d:90:68:52:f1:39:fc:b1:08:50:fc:
1e:00:2e:a8:48:a5:9a:eb:7e:9d:a5:79:c1:3b:5d:d0:d4:c7:
71:ef:c1:21:7f:2f:b5:78:b8:da:d8:79:b8:79:90:43:2a:49:
99:0d:aa:cd:08:b6:c8:89:9d:4c:a0:ce:2e:da:fb:1c:18:36:
1d:23:cd:c5:5e:7b:3c:c4:45:10:25:1c:75:27:f6:cf:3c:f4:
3d:07:4d:62:d2:a1:77:98:32:9c:f3:e3:d9:a9:58:60:b8:b1:
3c:75:a0:32:90:2a:e1:d5:2c:4e:c4:3b:c9:a9:02:15:dd:61:
ad:fa:f7:d2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEBowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYyQzNBRjExMC8GA1UEBRMoRDdENzJBNjQ4N0JENzc2QThCQkZBRDRGMzg2MTND
M0IxNTM1MDk4MzAeFw0yNjA5MjQwMDU1MDNaFw0yNjA5MjYwMDU1MDNaMBgxFjAU
BgNVBAMTDTZhYjQ3NGU4LTRmZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdmbCOjZdyzwgAE5aYZwGpZUON/gFdYjmL09GFnwAbW3LmUOCNq9wVx9m7
aufOpJ6wBEE97+Nj+NTrS1PdJtPIvlFWylDgBON2/tsI1C2LuTPllcEURHA0YKnn
m0T8DKsPVvXvmcyHjiYPx+1kIi0jrwf36Al4MZpKiYv8pO3kBtfr86crLPMfa+sM
LGZZm9WCmP3AoM+Mo/NKkdqttvowgDJl/++/CUHjWI6XaOjnvkRWCdwA+bOlHMLY
gdieEuBDZ0Wjq+KVYoo9bwh5HuRoHkwT/gSw3LLPNeGVakOXgg5ZU3KbXZl8tBEn
GduRlJJKxVqYZ/ItjTY8+abOBnyhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4WKz
ZMWoNQ7D9d1foDUmHgpiNbkwHwYDVR0jBBgwFoAU19cqZIe9d2qLv61POGE8OxU1
CYMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MkMzLzQ5REVDNzc0NTU2OTExRTVBOTA0ODI4MUY4QUVBMjI4LzE5Y3Fa
SWU5ZDJxTHY2MVBPR0U4T3hVMUNZTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzE5Y3FaSWU5ZDJxTHY2MVBPR0U4T3hVMUNZTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjYyQzMvNDlERUM3NzQ1NTY5MTFFNUE5MDQ4MjgxRjhB
RUEyMjgvMTljcVpJZTlkMnFMdjYxUE9HRThPeFUxQ1lNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC0DC8Dd/S3T0L/MKjzLSTzoLhZGJY
k7sUug77iGKApC35hzK9lvm93CTmVIw/5PC0VT0JnmEhNGiQyZ9rXadlY76+cZml
Qbj7sxa4vkXqgn7TZ27AMH7MfXrKab+m5eRS5GPiipVJLsUdX/3iN7uZKk1nspPU
60rFhVUP/7pE/I8gFPZ+jZBoUvE5/LEIUPweAC6oSKWa636dpXnBO13Q1Mdx78Eh
fy+1eLja2Hm4eZBDKkmZDarNCLbIiZ1MoM4u2vscGDYdI83FXns8xEUQJRx1J/bP
PPQ9B01i0qF3mDKc8+PZqVhguLE8daAykCrh1SxOxDvJqQIV3WGt+vfS
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:57:45 2026 by rpki-client