
Error: rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File: BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier: +WGw5c7WoIwpdJ695N3fyJvYPVLV6MipWX7N2mo5LGs=
Subject key identifier: 72:ED:F7:FE:44:BD:E3:5A:04:74:04:09:54:5E:AF:63:58:72:3F:F8
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer: /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial: 0524
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number: 0521
Signing time: Mon 21 Sep 2026 03:19:40 +0000
Manifest this update: Mon 21 Sep 2026 03:19:39 +0000
Manifest next update: Wed 23 Sep 2026 03:19:39 +0000
Files and hashes: 1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: jXHh9NIdOu2o7YFaAz1WSkoxVBKh9A0jwuUMpHYIZKU=)
2: E2E0E31406A011F1B28491C7DAE4EC9C.roa (hash: zfZ7SQHe7ntDVmEKHJbxTZVYNg5h50utum1HjMBco0w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 03:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAF, serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Validity
Not Before: Sep 21 03:19:39 2026 GMT
Not After : Sep 23 03:19:39 2026 GMT
Subject: CN=6ab0a24b-5863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:3b:10:48:59:6c:c2:b5:1b:c1:cd:36:72:
03:86:ff:12:1b:f1:22:76:37:32:5a:ba:88:d8:86:
3d:80:1c:8d:7e:34:06:14:78:50:0d:12:d5:d6:e7:
f1:60:f5:32:e8:c6:98:7a:df:24:41:bc:36:bf:41:
db:8e:81:0c:60:6e:ab:75:bb:a7:7b:48:01:75:d6:
89:d7:50:91:ac:bb:85:0f:ff:da:2c:18:68:ba:07:
cd:43:fa:ff:27:7f:9d:27:23:14:d9:9d:fb:7a:9f:
90:ca:78:a5:42:82:49:d7:7e:3a:88:bd:33:b7:42:
2c:d1:9b:8d:a7:bb:af:b9:da:05:a7:73:22:ef:b9:
d0:96:ad:d0:77:53:aa:55:f9:ee:14:09:53:2e:de:
96:78:86:8f:1a:17:9b:dc:41:ab:c0:a8:5a:9c:45:
6e:77:c4:3f:4a:f3:6a:cb:81:db:a7:9a:a6:ec:47:
8d:c1:79:5c:5f:47:f0:52:fa:b6:a9:21:11:80:50:
df:70:99:a8:f7:26:53:a5:f7:85:51:ea:83:a9:c3:
34:ba:a9:27:de:1a:b1:1a:ec:f3:d6:00:eb:6c:ef:
26:db:cb:77:fe:2a:c0:e1:5e:bc:f8:10:b1:b2:57:
fe:82:2f:77:e4:b8:3c:ab:a0:9d:2b:4b:f7:66:2f:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:F7:FE:44:BD:E3:5A:04:74:04:09:54:5E:AF:63:58:72:3F:F8
X509v3 Authority Key Identifier:
keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:96:ec:e5:d8:69:e0:45:c9:43:80:bf:be:42:07:17:2e:
3c:82:81:ad:9f:72:07:c3:e2:c0:15:f7:af:9d:e6:bc:8a:30:
08:c3:44:75:4d:7c:80:aa:c0:04:a0:98:2a:a9:01:5d:52:80:
ca:61:31:20:f6:1b:2c:18:b1:59:b7:f3:49:07:d5:05:2e:05:
b8:51:94:4e:9f:ec:52:bb:a1:08:2c:f5:9d:97:45:ea:c6:fb:
c1:f7:cc:01:c2:92:c1:8c:f6:d1:b2:84:5d:6f:54:11:ce:22:
ff:9a:25:76:57:6a:2b:f1:90:0a:94:73:6d:bd:00:3a:83:f6:
29:c9:a4:d0:f1:93:dd:c4:04:21:f2:52:a3:77:19:3b:89:ce:
78:9f:54:36:b7:80:53:e0:60:91:29:c4:d7:32:ba:14:20:aa:
71:b2:3a:d9:ab:86:c3:8a:7f:2c:46:17:37:c9:1e:20:1c:59:
f3:39:10:05:7e:57:f4:72:12:ab:7e:28:ed:56:79:01:36:22:
74:bc:c8:0a:fe:07:d8:ea:30:29:98:4b:be:7e:5d:cc:55:64:
4d:68:40:b6:76:bf:42:e4:df:9b:2c:41:5f:0d:8c:5e:da:d9:
5d:7d:02:53:ba:04:1c:a3:d4:ab:d1:91:58:f3:3a:4e:8d:01:
44:a8:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:34 2026 by rpki-client