
Error: rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
File: kGRTy4rcpLXHpuU7LsUREsTH_iw.mft (raw, json)
Hash identifier: J07th8eJH+zPa6S4/Y0uabyi7muKtExX2N/DWMHyzbc=
Subject key identifier: 0D:8E:F2:34:E4:BD:DF:65:71:39:E8:E4:30:A9:DB:07:51:AF:5F:3C
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Certificate issuer: /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial: 06F6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
Manifest number: 06EC
Signing time: Wed 23 Sep 2026 02:35:23 +0000
Manifest this update: Wed 23 Sep 2026 02:35:22 +0000
Manifest next update: Fri 25 Sep 2026 02:35:22 +0000
Files and hashes: 1: kGRTy4rcpLXHpuU7LsUREsTH_iw.crl (hash: FoQGFIOVZq9r1X/DBc0VmGJUc0RsEWA34Et7OfKqA5o=)
2: B40E3330F6B911F08662C98ADAE4EC9C.roa (hash: qIH7v3tewV7d2gF94EG5oa12N5PvjVd4AGukVgTh+H4=)
3: 8E2EE36AF6BB11F0B25C7596DAE4EC9C.roa (hash: JehNBRnKI6tF0LAk2UT74V0/bkjFQ/vJ7EmHfDOYPpE=)
4: 848FFDAEF6BA11F0866A2692DAE4EC9C.roa (hash: d9hiYsLzql+sur6XoXwbaHCb5CcbwNKoiWGzqCISMOU=)
5: 1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa (hash: 1XZwhvPB50gzM2XWj7n0L+r0jTbTyQwNMXT6DXbvlE8=)
6: E8FE15CEF6B911F08E0EF78CDAE4EC9C.roa (hash: qXptFQKXYrZyNgqoXJo0YFJwNcWrxR3AkAyWv8dlRHY=)
7: AF1D589C8A5211F1A99C74F0CE1D38B0.roa (hash: +YCyR0cl2AEX8HbJ8RxDRXYK0qmjPB8CbuozdNZzKek=)
8: 6C7DA1A4F6B911F0803CDE88DAE4EC9C.roa (hash: b0qIMRk/b9cvkRo2D02RcQLxf82o3W0jgTUE2T6aIxc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 02:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AF, serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Validity
Not Before: Sep 23 02:35:22 2026 GMT
Not After : Sep 25 02:35:22 2026 GMT
Subject: CN=6ab33aeb-442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:31:ff:75:fc:7e:1e:d5:4f:0e:94:fc:d0:
29:dd:b7:36:8c:cd:c8:89:48:08:76:0e:3c:b1:28:
bd:25:d4:73:fa:5a:3e:b5:52:69:a7:ee:ea:a8:3e:
96:43:0e:d1:5d:e9:b7:27:cd:38:97:9f:9b:e1:9f:
f7:4d:d2:f6:6d:59:29:72:79:e6:10:70:95:e6:01:
74:17:86:dc:c7:ed:de:78:e4:39:03:06:54:85:f8:
d7:6a:8e:c7:b8:16:39:52:18:53:59:37:98:1c:3f:
27:60:aa:2e:5f:b4:1a:f8:71:14:61:3a:bb:d9:38:
30:4d:fd:8a:fc:22:d0:61:b6:8d:f6:19:f0:b7:f8:
36:21:3f:ea:92:74:36:48:73:97:7b:b0:9b:44:c9:
47:b0:da:bd:a9:0b:b6:57:57:55:61:17:4c:04:ea:
f0:89:29:47:73:4a:28:33:08:a2:ed:b9:11:d4:e0:
61:99:1b:2c:0b:7b:3b:cf:25:0c:4c:bd:59:10:35:
13:5b:ea:ca:07:48:dd:24:34:d0:a2:84:2c:13:97:
f2:1b:d7:c8:77:b4:66:48:a5:39:35:98:ce:3d:35:
57:99:75:8e:b9:31:aa:43:db:fc:e2:7c:c9:50:94:
91:c1:b8:f5:44:13:aa:3e:7f:ae:ad:41:e6:34:98:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:F2:34:E4:BD:DF:65:71:39:E8:E4:30:A9:DB:07:51:AF:5F:3C
X509v3 Authority Key Identifier:
keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:46:3e:15:7c:38:79:c7:5f:9d:a7:9a:e9:34:18:c0:42:0a:
f9:91:b5:dc:5f:d1:c3:65:c3:28:14:8a:10:3e:56:50:02:4b:
6b:eb:af:ff:f1:a8:c1:95:b7:55:21:68:db:72:e0:97:3c:50:
dd:fd:47:b9:e4:12:31:fa:bd:4b:c7:df:fd:fc:2e:08:93:33:
48:c5:48:83:94:5c:dc:6e:6a:43:3e:50:93:c2:5c:63:10:ab:
bf:c7:6e:dd:24:ec:3a:4d:94:8a:74:46:31:93:64:99:44:eb:
be:5b:8d:f2:47:71:5d:63:f9:34:84:13:9f:f1:aa:00:6b:77:
50:a0:5e:79:7a:c4:bd:f0:91:e3:0d:c8:40:e2:52:a9:95:87:
e7:2a:cf:90:e6:3c:c6:b1:ba:89:6a:43:e8:80:5b:bb:af:7a:
2e:7e:30:ea:94:77:05:12:63:70:09:9b:62:94:20:1a:39:c4:
2f:87:0b:4c:a5:f1:95:ec:bc:0f:a4:e6:87:5b:b0:d0:b1:7a:
19:00:7a:e6:68:f5:2e:3d:b5:3b:2b:28:af:87:e5:f3:c9:30:
a3:1c:5d:7a:1d:c9:cf:8d:bb:54:e6:f5:b8:9a:4e:28:f8:07:
e2:3d:4c:fa:68:2a:ce:d1:f6:9c:af:35:66:8a:52:eb:8a:3f:
47:43:5c:67
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjlCRjJBRjExMC8GA1UEBRMoOTA2NDUzQ0I4QURDQTRCNUM3QTZFNTNCMkVDNTEx
MTJDNEM3RkUyQzAeFw0yNjA5MjMwMjM1MjJaFw0yNjA5MjUwMjM1MjJaMBgxFjAU
BgNVBAMTDTZhYjMzYWViLTQ0MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDARjH/dfx+HtVPDpT80CndtzaMzciJSAh2DjyxKL0l1HP6Wj61Ummn7uqo
PpZDDtFd6bcnzTiXn5vhn/dN0vZtWSlyeeYQcJXmAXQXhtzH7d545DkDBlSF+Ndq
jse4FjlSGFNZN5gcPydgqi5ftBr4cRRhOrvZODBN/Yr8ItBhto32GfC3+DYhP+qS
dDZIc5d7sJtEyUew2r2pC7ZXV1VhF0wE6vCJKUdzSigzCKLtuRHU4GGZGywLezvP
JQxMvVkQNRNb6soHSN0kNNCihCwTl/Ib18h3tGZIpTk1mM49NVeZdY65MapD2/zi
fMlQlJHBuPVEE6o+f66tQeY0mGxJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDY7y
NOS932VxOejkMKnbB1GvXzwwHwYDVR0jBBgwFoAUkGRTy4rcpLXHpuU7LsUREsTH
/iwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY5QkYyLzZERTdGNzFDNkZGNzExRUNBN0I4MzFDQTVBNDBENTc3L2tHUlR5
NHJjcExYSHB1VTdMc1VSRXNUSF9pdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tHUlR5NHJjcExYSHB1VTdMc1VSRXNUSF9pdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjlCRjIvNkRFN0Y3MUM2RkY3MTFFQ0E3QjgzMUNBNUE0
MEQ1Nzcva0dSVHk0cmNwTFhIcHVVN0xzVVJFc1RIX2l3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXRj4VfDh5x1+dp5rpNBjAQgr5kbXc
X9HDZcMoFIoQPlZQAktr66//8ajBlbdVIWjbcuCXPFDd/Ue55BIx+r1Lx9/9/C4I
kzNIxUiDlFzcbmpDPlCTwlxjEKu/x27dJOw6TZSKdEYxk2SZROu+W43yR3FdY/k0
hBOf8aoAa3dQoF55esS98JHjDchA4lKplYfnKs+Q5jzGsbqJakPogFu7r3oufjDq
lHcFEmNwCZtilCAaOcQvhwtMpfGV7LwPpOaHW7DQsXoZAHrmaPUuPbU7Kyivh+Xz
yTCjHF16HcnPjbtU5vW4mk4o+AfiPUz6aCrO0facrzVmilLrij9HQ1xn
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:08:48 2026 by rpki-client