
Error: rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File: Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier: ApOtWIIVTy6XfUFO2SleAcEtxPLr66JqQmkamSqmOkI=
Subject key identifier: 57:8A:AF:79:F5:43:D1:01:35:25:39:26:61:31:E8:11:3D:99:7C:AA
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer: /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial: 0A7A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number: 0A71
Signing time: Sat 03 Oct 2026 01:33:03 +0000
Manifest this update: Sat 03 Oct 2026 01:33:02 +0000
Manifest next update: Mon 05 Oct 2026 01:33:02 +0000
Files and hashes: 1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: kG6rXwRFjF5sa8Qt9UMWEDufOHkVd3lAD/m3NqCVJsk=)
2: 22D54F2A873211F1A1DD25DBCE1D38B0.roa (hash: 6YJKt+6KEiWJEqvrJ2OOcpZGMxLBjGJJceHlPGGeI9A=)
3: CA99C59C873211F1921B7CDDCE1D38B0.roa (hash: J8mkXybFE9u2dG4g/6rMiX/R0vnwSK7ht7HLC5KmFUo=)
4: F7E20784873311F1B7E9E2E3CE1D38B0.roa (hash: z+CNLO3NbOZrGtfxZOkyGy0Et3xGLuxNkIJsF5sFrbs=)
5: 5F85225A873311F19C71D2DFCE1D38B0.roa (hash: FLClJViDm2ygpv43e3sB4wxskOHtddicfBdPxrJHMUo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2682 (0xa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Validity
Not Before: Oct 3 01:33:02 2026 GMT
Not After : Oct 5 01:33:02 2026 GMT
Subject: CN=6ac05b4f-e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:88:d6:0c:26:5e:67:c8:af:cc:e1:10:b8:
60:ad:df:fc:6d:c4:f4:69:ba:0d:e8:98:80:48:23:
da:48:c7:e8:43:37:68:13:96:95:55:8e:4c:b6:f5:
f8:90:9d:88:e9:9b:c7:88:9d:1a:1b:54:66:60:b9:
91:ad:5a:da:0b:20:64:c8:5a:04:4d:5a:04:1a:af:
c9:06:63:b2:27:a6:9a:d4:5b:39:b4:ed:d0:c2:a1:
2e:a8:cf:d5:c2:5a:fc:74:ad:3e:a6:ed:fd:4e:e4:
fa:41:fd:b3:45:12:f4:45:46:50:4f:46:64:28:3d:
06:55:35:a3:d4:51:e3:fe:ba:ff:a6:68:a4:50:c3:
c5:3c:23:6e:53:0c:6c:17:fe:82:fe:59:c0:fd:4c:
77:4e:34:cb:93:69:12:e9:71:79:1d:91:a1:f7:da:
dc:69:b4:f6:fc:1e:ce:4e:ae:87:bc:ae:04:f9:67:
34:e9:83:23:60:ce:c0:fe:51:c0:92:c6:d4:ef:c0:
4b:d1:3a:12:f8:23:d1:ab:60:e1:bd:fb:28:f6:bf:
3f:ba:0e:81:30:29:3c:83:1d:33:44:83:04:7e:d8:
85:79:38:7a:37:a4:1d:2a:f3:6b:b3:a6:2f:33:93:
2f:7b:32:62:6a:7a:00:1a:de:d2:ec:95:8c:92:72:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:AF:79:F5:43:D1:01:35:25:39:26:61:31:E8:11:3D:99:7C:AA
X509v3 Authority Key Identifier:
keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:84:a7:00:73:a8:74:3c:32:c3:f7:f6:1b:25:1b:ad:0e:a0:
68:20:81:ed:52:bc:e6:6e:c0:50:16:65:f9:4a:ec:79:a9:07:
f9:28:7b:a2:40:82:fd:f1:d2:4d:09:fb:42:74:92:26:91:22:
99:39:cb:e4:3c:4c:0b:c0:65:92:8f:a0:fd:d8:80:9e:c2:65:
04:23:af:95:fe:20:87:b2:5f:bf:57:09:15:8d:ec:aa:c7:ef:
d7:2b:23:74:af:4b:3f:83:a2:21:4a:88:9f:8e:79:27:e2:da:
22:0c:62:33:28:71:c1:c0:40:e6:6b:49:88:eb:f2:ac:27:d6:
cc:8c:66:6f:e0:29:d1:32:02:aa:96:2c:5d:43:56:86:fb:84:
1d:cc:50:fe:70:34:16:ed:3d:87:72:b0:e1:da:16:29:ca:33:
d3:c5:d4:29:fc:c1:e9:91:e5:cc:eb:df:9f:85:ce:04:ca:84:
a2:f4:9b:83:35:f5:e1:28:6a:b9:bd:39:7d:83:77:c5:97:1e:
a5:9c:5a:51:cd:55:92:bb:bd:eb:1b:60:8f:07:5d:c4:38:0d:
b6:6f:85:38:14:db:bb:22:5d:d0:e7:2d:a5:24:12:23:8a:e1:
73:bc:bc:15:55:ad:af:d5:5b:f5:0f:11:ec:3a:6f:dd:d9:f4:
cf:59:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:05:06 2026 by rpki-client