
Error: rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
File: xYb26TczxMU16L1GqjLQQkgHmvs.mft (raw, json)
Hash identifier: 1rz3MBi7JYF+jd06VJfh8k3FeLSPsMRwgMzrCPLto/E=
Subject key identifier: 57:63:B9:80:08:EB:84:15:25:BD:6E:4B:B4:C0:D2:7C:FB:A3:BA:90
Authority key identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
Certificate issuer: /CN=F36FE07FAF/serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Certificate serial: 01A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
Manifest number: 019F
Signing time: Thu 24 Sep 2026 05:04:28 +0000
Manifest this update: Thu 24 Sep 2026 05:04:27 +0000
Manifest next update: Sat 26 Sep 2026 05:04:27 +0000
Files and hashes: 1: xYb26TczxMU16L1GqjLQQkgHmvs.crl (hash: xdUamJR9GMgLvvJFTBwd5L7VKKegN7ZSMfZd8S7avuQ=)
2: 9E3CAFAC776E11F0A592D2CDDAE4EC9C.roa (hash: Jc6KQs8Me0jhZ9OqwSsYuwFuhZ8DtWTSRWigp2Gfn4Q=)
3: B8172A60776E11F0A4ED07CEDAE4EC9C.roa (hash: 466vNS7TytKtCpeQ9MYAdiBIOqEB2l2FatTpRe5swnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE07FAF, serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Validity
Not Before: Sep 24 05:04:27 2026 GMT
Not After : Sep 26 05:04:27 2026 GMT
Subject: CN=6ab4af5c-3656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:71:ab:65:e9:f7:c1:d4:6f:8c:b2:43:90:
f2:2b:f8:a8:43:42:bc:ac:bd:19:ce:06:e3:a0:b7:
7a:8f:af:84:e9:c2:0c:bd:f1:17:0d:55:1d:23:cd:
1f:8d:47:45:6c:3d:2a:2b:a4:23:bc:7a:3c:ef:a2:
98:e8:80:b0:7d:5b:fd:1b:b2:5b:b5:10:8f:59:1f:
95:d3:2b:bd:79:0b:94:90:35:3a:21:8a:3b:fb:6b:
7e:66:91:64:ae:1d:3f:17:1e:f0:2a:07:37:f1:dc:
bd:92:e1:b2:c0:42:0f:a8:4e:2d:78:59:e5:ef:4d:
79:a0:7e:63:a1:92:33:36:a4:2b:87:79:64:37:f1:
26:5a:5f:92:b4:f0:06:06:19:fe:f0:4a:df:b3:9a:
ea:fa:60:9d:22:a2:e5:ae:ef:17:a0:a8:eb:ba:c1:
1b:10:6a:95:2c:7b:25:b8:cf:39:9a:71:df:41:47:
5d:15:81:de:25:c0:99:0d:47:2f:22:b9:d3:cf:43:
c5:1d:7a:c4:c6:f5:44:b0:76:2f:3e:2d:58:48:2a:
58:42:02:03:ed:9a:f9:31:80:46:5b:b4:71:f2:8c:
cf:e3:76:94:10:ed:b2:4d:4e:58:49:17:e1:b2:31:
7d:6a:9b:3e:12:26:1e:5c:84:0f:38:12:05:b5:bf:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:B9:80:08:EB:84:15:25:BD:6E:4B:B4:C0:D2:7C:FB:A3:BA:90
X509v3 Authority Key Identifier:
keyid:C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:88:7b:b5:77:60:62:25:42:27:a6:92:fb:b4:cf:64:fb:bc:
03:de:c1:3b:42:50:a2:5f:52:a2:89:ac:8c:32:fb:b2:d2:8b:
54:f0:df:4e:08:37:d1:3c:2d:d7:7c:37:18:83:cd:ea:1b:27:
e9:3c:95:a7:45:c5:67:66:61:73:fe:0d:c6:51:eb:c3:fd:2e:
2d:bb:2f:e7:6c:2e:90:37:68:da:ff:a7:74:0a:02:98:91:d0:
f0:b1:66:08:e7:c8:3a:43:1c:45:1e:4b:53:20:43:1a:bb:fa:
58:a2:a1:67:26:c6:fa:b4:0e:46:45:6e:52:3d:c8:67:5b:08:
7a:2b:c0:a1:24:a4:63:bc:32:4b:75:d7:c0:d7:d1:17:92:ff:
e9:26:31:43:ec:9d:be:b5:bf:88:da:2b:36:2d:ac:83:a5:0f:
fd:49:b1:aa:d2:3f:35:91:93:8a:c8:74:4f:a0:24:49:62:55:
9c:9e:4e:00:05:79:29:8c:4e:ad:e6:42:20:28:64:f9:ba:4f:
b2:08:fa:07:6e:c3:37:20:fb:d4:bb:ec:67:74:df:22:a4:ed:
de:34:b5:56:fc:33:cf:a7:19:33:61:80:49:2a:f9:f6:e3:6c:
92:1e:8c:a3:c7:8a:14:e5:51:75:72:1f:6e:73:4f:74:84:b0:
a6:45:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:36:16 2026 by rpki-client