
Error: rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: rzGn/ipXMOPtykJmhBCvp2HTNbZ8u6UQ2wVkFBXn25Y=
Subject key identifier: C3:92:B9:11:3A:56:0D:22:B9:0D:C5:AB:0E:00:51:DF:90:BB:BD:32
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 1052
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 1050
Signing time: Tue 13 Oct 2026 00:52:54 +0000
Manifest this update: Tue 13 Oct 2026 00:52:53 +0000
Manifest next update: Thu 15 Oct 2026 00:52:53 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: pIFrNWMkjcM7b128Z5ntiErm7FHfEyKZfMWC6uGJaEY=)
2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4178 (0x1052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Oct 13 00:52:53 2026 GMT
Not After : Oct 15 00:52:53 2026 GMT
Subject: CN=6acd80e6-8ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:24:5e:51:b9:47:4a:b9:b7:97:5d:30:6c:
6b:48:78:95:b4:3a:cb:56:98:3d:57:2d:3b:76:d3:
0d:1b:fe:0f:50:e8:bc:f7:77:46:53:b0:d8:9a:44:
4f:47:e7:ed:1a:5b:14:e7:54:ec:92:9e:c2:3e:db:
16:6b:b6:1e:0f:8b:29:11:d1:22:8c:d4:cf:d5:73:
6b:08:3e:03:77:fa:f6:05:5d:43:43:70:77:50:99:
f4:ec:a2:6d:0f:d1:9c:28:d1:ee:0b:98:27:1e:02:
e9:e8:5c:30:a8:f2:26:3a:72:5c:30:0e:77:f9:0b:
08:89:eb:99:2a:e6:ba:cc:f3:eb:07:a2:b0:c3:5a:
4e:49:40:b6:a7:4d:40:32:17:49:78:9e:9c:bd:0d:
4e:e5:99:82:0e:64:2e:75:6f:ba:d1:de:52:e0:f6:
90:f0:85:03:67:8c:7b:0b:4d:8e:af:15:c4:1c:68:
79:f1:13:a9:89:0a:70:5d:08:d7:e7:af:d5:38:dc:
34:41:55:b4:cf:36:fe:68:98:3e:e0:3f:d3:60:84:
ac:23:0a:cf:a9:27:8e:d1:17:60:6c:15:2d:6e:b2:
9f:44:4d:ba:62:fc:9a:73:89:8d:cf:93:f9:22:65:
9d:0f:78:42:3c:c0:ad:c4:72:d6:90:7b:50:8e:c1:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:B9:11:3A:56:0D:22:B9:0D:C5:AB:0E:00:51:DF:90:BB:BD:32
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:27:bb:11:74:83:4a:63:da:02:8a:e5:33:3e:1b:0c:cc:87:
8c:ab:32:57:24:e4:b7:31:0a:5e:3c:34:1f:da:bd:ab:43:70:
4e:7f:2e:65:e4:99:de:17:25:2c:f0:ca:99:ab:aa:17:43:85:
97:ba:bf:ec:25:2a:21:9d:fe:75:54:02:f6:17:da:5d:90:7a:
7f:fa:3c:54:13:2f:14:fd:a3:ab:5e:81:44:6f:a2:f9:7a:08:
cf:8b:7f:c8:20:20:6a:c2:40:dd:8f:f9:4b:92:a7:32:37:b0:
d5:91:05:71:cc:09:7c:94:40:c5:6e:87:11:3b:08:94:dd:8a:
14:a8:0a:a1:3b:6a:12:8d:ef:61:17:8f:70:c3:26:3b:b0:ac:
2b:d2:6e:ea:68:7d:57:56:5d:81:35:0d:fe:d5:2c:6b:d6:82:
c5:30:89:6d:5f:29:55:3a:6d:99:99:94:af:04:06:6d:68:fb:
af:84:0e:4a:9b:aa:ea:2b:64:d1:dc:90:01:ea:2b:4c:c5:4c:
73:c2:e0:b6:56:55:91:48:9e:f2:ab:9b:63:c6:bd:98:78:cd:
bd:25:6b:fa:51:dc:98:4a:ac:75:02:da:d5:7a:78:5a:93:3a:
ab:c1:a6:50:88:f5:db:9c:e6:c8:b6:27:96:31:0c:2f:84:9b:
f2:97:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:06:19 2026 by rpki-client