
Error: rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
File: YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft (raw, json)
Hash identifier: MCb3q2cDUxAnxR61Xe9pPOShhsToB/gM3WjXRDDb6rs=
Subject key identifier: 5E:59:41:C9:A1:A8:2B:1F:31:FB:4B:5C:EF:8B:C8:2A:78:C4:5B:91
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Certificate issuer: /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial: 07D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
Manifest number: 07CE
Signing time: Mon 28 Sep 2026 02:13:32 +0000
Manifest this update: Mon 28 Sep 2026 02:13:31 +0000
Manifest next update: Wed 30 Sep 2026 02:13:31 +0000
Files and hashes: 1: YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl (hash: 1N5YOg3hI2O7D23Pa00rZMA2irQLiun0Z1c5iQWVyN0=)
2: 912FBF2E8A7911F1B31828D8CE1D38B0.roa (hash: zYTBvHbOq51i/nbuKMgvUoNYk1P78hyVlO8xCIxqaFY=)
3: 388DFCA48A7A11F1B7B83CDCCE1D38B0.roa (hash: K8U3ZsQE3FMB5TCFVPQ9/MnlTHx0TNLdYQ+qwlTgtqM=)
4: D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa (hash: /o+O3ztThNiECWWwpWeQxfRZFgNL7pteuS2ywgWSCoQ=)
5: 163DFFC48A7911F18B7BFFD7CE1D38B0.roa (hash: +oqp9hoIEG1zN/2lBG7ea/q/Jlp77lY4zxCoE4WrmFg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Validity
Not Before: Sep 28 02:13:31 2026 GMT
Not After : Sep 30 02:13:31 2026 GMT
Subject: CN=6ab9cd4c-87ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:c0:7e:96:bc:a2:07:a0:10:2c:90:77:ed:
af:a8:70:1a:18:39:1e:fb:8f:86:bd:49:a5:0f:4b:
7a:00:07:ee:b0:16:fe:d2:13:11:37:a3:3c:ae:90:
a8:51:1d:6d:5b:aa:4d:88:8d:5e:3c:1f:55:39:f2:
d1:c0:2a:bb:76:29:9a:c4:61:27:32:4a:45:93:ac:
3a:c9:c7:c0:9a:c2:36:f9:11:db:18:3e:a3:cc:3e:
83:cc:d8:61:70:45:a0:ef:54:e5:4f:e4:af:a5:18:
ec:7d:56:2e:47:e0:ce:81:a9:b6:c5:c4:52:4f:1a:
2c:60:84:74:97:b5:29:17:0b:3f:fc:20:94:88:9d:
32:1b:9f:ea:48:cc:76:90:e3:6b:e5:04:d7:35:af:
f7:0e:5e:13:b5:ea:86:12:ca:1b:5d:83:97:d2:9b:
15:23:6c:47:dc:bc:da:10:a8:dc:3f:75:bd:76:8a:
39:a4:79:0c:eb:89:cd:bb:4c:3b:5e:3a:b3:1b:0e:
c7:84:c8:84:1a:db:c0:f0:af:47:2a:7a:c7:e0:d9:
86:3b:80:c7:29:dd:e5:59:fd:5b:64:2c:fa:3e:72:
4c:cd:55:47:27:59:3e:54:0a:bb:7f:17:2d:9c:2e:
bc:ce:7d:67:9e:e7:ab:9d:7b:be:68:d8:b4:fa:51:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:41:C9:A1:A8:2B:1F:31:FB:4B:5C:EF:8B:C8:2A:78:C4:5B:91
X509v3 Authority Key Identifier:
keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:4e:ba:01:34:f2:90:b3:5a:8a:9f:ef:1c:7a:0f:07:ff:23:
92:55:ea:78:0f:af:f5:43:20:7c:e3:c9:48:13:82:8a:b2:5d:
cb:91:ab:7d:10:2d:68:8d:55:18:a9:e2:da:aa:3b:4e:40:ba:
87:4a:ad:2b:9a:22:ed:9e:7e:df:d2:4e:a7:e2:d9:a8:18:a5:
e4:f3:11:62:7e:3f:43:eb:6e:39:74:1f:14:d4:40:07:b3:19:
82:52:f0:89:07:4c:ea:c0:0d:e9:27:24:bc:6c:22:eb:5a:79:
c3:58:73:97:f9:1d:17:5a:ab:49:73:9f:31:4a:77:00:09:b9:
fe:84:32:6a:ce:eb:15:e1:b3:2b:ec:a5:9d:8b:a9:58:61:49:
b9:36:7c:c1:da:ed:f6:bd:05:58:dd:a2:b9:96:34:00:13:f5:
93:e3:a4:f6:49:d5:14:59:9a:96:12:7f:b1:b6:3d:e7:1d:eb:
43:73:ae:05:d8:01:28:69:0e:fe:c4:65:03:34:c9:58:98:1d:
e8:84:40:29:11:46:1b:c4:8d:85:11:aa:32:7b:d0:65:bd:de:
7f:c3:99:7e:84:bf:c1:a5:f7:5c:79:cd:39:f0:c7:eb:60:4f:
6d:f0:f3:d5:d7:4c:ae:cc:57:6d:92:03:83:ff:9b:11:2d:37:
ef:27:d4:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkFGOUJBRjExMC8GA1UEBRMoNjI3NTMzRUNCQUI3RDg5QkQ5NTcwQjIwMDU0NjY2
MDUzNjY5QTc1OTAeFw0yNjA5MjgwMjEzMzFaFw0yNjA5MzAwMjEzMzFaMBgxFjAU
BgNVBAMTDTZhYjljZDRjLTg3ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCf2sB+lryiB6AQLJB37a+ocBoYOR77j4a9SaUPS3oAB+6wFv7SExE3ozyu
kKhRHW1bqk2IjV48H1U58tHAKrt2KZrEYScySkWTrDrJx8Cawjb5EdsYPqPMPoPM
2GFwRaDvVOVP5K+lGOx9Vi5H4M6BqbbFxFJPGixghHSXtSkXCz/8IJSInTIbn+pI
zHaQ42vlBNc1r/cOXhO16oYSyhtdg5fSmxUjbEfcvNoQqNw/db12ijmkeQzric27
TDteOrMbDseEyIQa28Dwr0cqesfg2YY7gMcp3eVZ/VtkLPo+ckzNVUcnWT5UCrt/
Fy2cLrzOfWee56ude75o2LT6UXbHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXllB
yaGoKx8x+0tc74vIKnjEW5EwHwYDVR0jBBgwFoAUYnUz7Lq32JvZVwsgBUZmBTZp
p1kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBRjlCLzVFMjZCNzlDQ0MyNzExRUJBNEVBMTYyN0Y4QUVBMjI4L1luVXo3
THEzMkp2WlZ3c2dCVVptQlRacHAxay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1luVXo3THEzMkp2WlZ3c2dCVVptQlRacHAxay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkFGOUIvNUUyNkI3OUNDQzI3MTFFQkE0RUExNjI3RjhB
RUEyMjgvWW5VejdMcTMySnZaVndzZ0JVWm1CVFpwcDFrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5TroBNPKQs1qKn+8ceg8H/yOSVep4
D6/1QyB848lIE4KKsl3Lkat9EC1ojVUYqeLaqjtOQLqHSq0rmiLtnn7f0k6n4tmo
GKXk8xFifj9D6245dB8U1EAHsxmCUvCJB0zqwA3pJyS8bCLrWnnDWHOX+R0XWqtJ
c58xSncACbn+hDJqzusV4bMr7KWdi6lYYUm5NnzB2u32vQVY3aK5ljQAE/WT46T2
SdUUWZqWEn+xtj3nHetDc64F2AEoaQ7+xGUDNMlYmB3ohEApEUYbxI2FEaoye9Bl
vd5/w5l+hL/Bpfdcec058MfrYE9t8PPV10yuzFdtkgOD/5sRLTfvJ9QF
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:17:30 2026 by rpki-client