
Error: rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
File: -dz45IZ0npp0P-Rz662BTRzsX6k.mft (raw, json)
Hash identifier: rsakMmWExLyZg+PPLgvRsL/ILInWvi1aNEKvjHhwcwU=
Subject key identifier: 0F:CC:1B:94:97:B1:7F:01:37:FE:BD:42:A4:14:F4:E5:47:28:14:35
Authority key identifier: F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
Certificate issuer: /CN=F36FCD8DAF/serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Certificate serial: 0656
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
Manifest number: 0654
Signing time: Wed 23 Sep 2026 02:45:30 +0000
Manifest this update: Wed 23 Sep 2026 02:45:29 +0000
Manifest next update: Fri 25 Sep 2026 02:45:29 +0000
Files and hashes: 1: -dz45IZ0npp0P-Rz662BTRzsX6k.crl (hash: SJ4x44/tHUfBrrbhg1TPS64zLmhc4u/tP0JD4PxvBEM=)
2: F34CABAC899011F1990DBFCCCE1D38B0.roa (hash: QLCFdcp0U6K+uipbYurxt9ALPdLqdppOnWWlizx/0bY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCD8DAF, serialNumber=F9DCF8E486749E9A743FE473EBAD814D1CEC5FA9
Validity
Not Before: Sep 23 02:45:29 2026 GMT
Not After : Sep 25 02:45:29 2026 GMT
Subject: CN=6ab33d4a-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:7f:af:d5:a0:54:b2:48:78:01:64:5a:55:
60:50:91:89:b0:35:3e:b1:29:4c:b3:7a:57:c1:15:
59:b5:46:63:03:bd:89:7a:4f:03:f1:7a:28:2a:2a:
47:ac:b5:1d:4d:2a:e0:c2:d2:40:93:97:0a:c5:f6:
4c:2e:53:11:6f:49:04:6e:92:be:fc:0f:91:58:88:
ca:e4:38:c7:1a:ce:55:7c:e2:a7:08:76:eb:d3:0b:
c3:50:62:e4:1d:28:53:e0:6d:6d:24:01:35:e6:ae:
c5:25:1d:e8:b1:71:7d:06:43:f4:7a:46:fa:ff:38:
ea:8f:6e:58:33:64:e5:e8:97:6a:97:d2:12:bf:0a:
95:fe:00:d6:f3:b3:d6:c1:a0:be:87:0c:37:1c:1b:
cd:51:33:1c:0f:3d:ea:09:f9:0e:b1:e7:b2:e4:b6:
5c:02:5a:73:14:18:f3:e5:3d:9b:0c:46:c9:d7:11:
3d:d4:c6:50:a7:3c:ec:7a:4b:85:06:a2:33:38:ed:
3b:b1:c2:55:43:c3:a8:b7:88:67:24:de:c7:6d:ea:
9c:3d:73:a2:62:f5:41:7e:3b:d3:07:cd:6a:4c:ae:
7a:c5:18:a5:e1:17:f2:b9:79:16:6e:fc:f0:40:51:
24:18:e3:b8:fc:26:cf:34:dc:09:ea:c9:1f:c9:84:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:1B:94:97:B1:7F:01:37:FE:BD:42:A4:14:F4:E5:47:28:14:35
X509v3 Authority Key Identifier:
keyid:F9:DC:F8:E4:86:74:9E:9A:74:3F:E4:73:EB:AD:81:4D:1C:EC:5F:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-dz45IZ0npp0P-Rz662BTRzsX6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCD8D/2EB9F7C4E0E111EC939DEDD6F1222468/-dz45IZ0npp0P-Rz662BTRzsX6k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:d0:1a:90:ee:45:3e:e5:38:d7:27:8a:74:3a:72:47:4f:
58:9b:f9:f4:23:43:8f:a8:c1:a7:73:07:9f:c4:9b:60:3b:ea:
86:2f:67:d3:45:2a:ec:36:bb:2d:30:49:8d:f3:d8:0a:43:85:
05:87:a5:db:97:b9:84:e2:4d:d4:58:8e:10:4d:3b:a0:33:63:
48:c1:00:0f:fd:fd:cd:4c:9d:8c:ce:a9:34:4f:6c:b2:3e:c8:
5b:4d:76:78:6b:aa:86:d2:bb:f6:32:b2:06:21:73:14:8c:78:
7b:dd:6f:81:99:0e:c7:fc:be:ed:e8:32:89:41:5a:43:88:f7:
49:7f:61:b4:61:eb:e2:be:e3:89:05:13:d5:8d:eb:60:5b:22:
1a:13:ea:71:c4:95:df:79:b1:bc:05:5d:96:f6:1c:b1:03:d6:
bd:25:e7:28:32:65:df:1b:df:1d:d8:48:98:cb:a4:6a:36:fb:
fa:57:6a:6e:99:f8:95:28:6c:81:c6:b3:0a:fa:ec:7a:d4:6e:
1b:08:6d:62:42:68:50:93:01:69:e7:20:af:51:c8:8e:3c:68:
e6:ec:50:a2:09:53:f6:ed:5e:1b:66:d3:45:9e:15:31:f5:fa:
53:97:b5:15:50:bd:d5:e6:18:57:7b:8e:94:c8:61:79:ef:9b:
f7:36:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:46:39 2026 by rpki-client