
Error: rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
File: kOmId5HPLZYFAfiu3iSiM0q6VAM.mft (raw, json)
Hash identifier: fVJWGM9e7hXY2icK2YEEZ5MKl7j1mo4ouLtWeJCy1y4=
Subject key identifier: FC:5E:6A:D1:42:39:3B:EC:0C:C0:60:5F:F6:DC:06:FF:1F:5F:92:E1
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0BB5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
Manifest number: 0BA8
Signing time: Thu 15 Oct 2026 01:15:56 +0000
Manifest this update: Thu 15 Oct 2026 01:15:55 +0000
Manifest next update: Sat 17 Oct 2026 01:15:55 +0000
Files and hashes: 1: kOmId5HPLZYFAfiu3iSiM0q6VAM.crl (hash: 58dFWsTY7TY/fNkSKg79BJYjgVvTf7RFuo6gDC0m0Zc=)
2: F3EC743C187C11F1A4A99A8EDAE4EC9C.roa (hash: 4VygvVhLx7+KOSC9EeJup6TPuBSZ6sqghpeBeI1rIHk=)
3: 2A74C5F4187D11F1A465C48EDAE4EC9C.roa (hash: fnDGmywkfDEXEdGHYgR/8XMMZSz71Qb9+HbIEmEaRmc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 Oct 2026 01:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Oct 15 01:15:55 2026 GMT
Not After : Oct 17 01:15:55 2026 GMT
Subject: CN=6ad0294b-49ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:5a:4e:3f:d0:40:0d:16:83:33:cf:5b:4d:
b0:ba:c4:9a:e2:b5:95:2b:09:19:d5:36:2c:ea:47:
d6:6c:70:39:0f:cf:31:d4:80:91:a4:9d:e4:b5:46:
91:fc:f4:15:68:d1:c7:db:fc:ab:f5:73:63:21:df:
49:30:61:64:1e:67:7c:fc:f1:1d:13:f5:c0:bc:86:
76:67:eb:88:f0:fd:8f:a4:b0:db:a8:3a:75:4a:1c:
38:b0:5e:78:db:3d:fc:85:35:09:63:7e:74:ef:5b:
fc:85:92:a7:92:91:c2:cb:c1:0a:49:9c:e0:f9:f6:
19:e3:f4:97:38:7e:d8:bf:7e:d1:35:9f:3b:d1:01:
d2:67:43:8a:2c:76:ef:69:5f:c2:5c:a9:e1:94:c8:
87:83:17:77:be:e3:02:9d:84:2d:f1:36:98:b6:c8:
95:36:b7:bf:5c:6e:7b:ca:cc:8c:32:c6:73:54:5f:
c0:c2:4f:33:45:a9:0c:04:51:53:05:9e:dd:ff:c2:
a3:9f:ff:3f:37:f6:e0:08:0f:c8:ae:f5:6a:5e:98:
eb:0e:d7:45:54:23:a6:46:7a:59:da:c0:a5:06:87:
0a:e9:5e:5f:f5:a2:20:4b:d6:2a:d4:82:4d:01:d1:
4e:ab:62:6f:7d:15:19:ef:57:09:19:43:4d:48:2b:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:6A:D1:42:39:3B:EC:0C:C0:60:5F:F6:DC:06:FF:1F:5F:92:E1
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:68:b1:5e:24:d8:b8:be:00:36:0e:19:c1:db:c7:98:8f:
2a:ab:c6:d3:8c:27:ae:4e:d2:f1:8b:09:8c:f2:31:d9:2e:7a:
5d:eb:34:9a:c2:1a:e8:8f:6d:88:99:19:ef:33:05:94:5e:dd:
da:9c:56:ff:34:9a:d1:67:14:4f:7c:a3:f1:4c:ed:12:a0:6f:
e2:79:49:fe:c7:6a:9a:fb:6b:74:da:bd:e6:50:0f:1f:24:4c:
7b:ed:fd:62:ba:15:7a:0c:19:4b:f6:8f:5f:08:0e:dc:c5:6b:
0f:7b:78:27:ec:a9:41:2b:15:d5:81:76:6e:2e:26:a0:64:89:
35:45:af:1a:a5:76:54:a3:dd:67:5e:f3:f8:23:24:15:06:ce:
5e:e4:cc:5b:c2:71:91:3a:1c:08:c9:64:2b:e6:46:9b:97:1d:
a7:ca:3e:a2:89:6c:ca:ca:7a:bc:83:0c:6f:14:cf:46:37:7c:
a5:42:14:e8:81:d5:59:1b:8b:dd:f7:39:b0:ee:5f:5d:2c:8e:
d0:f6:37:ce:b1:dd:65:48:63:06:96:26:75:b1:79:07:ba:d3:
ea:da:dc:ba:45:68:67:c1:71:2f:c0:d5:87:46:99:72:00:72:
4c:f7:28:ca:8c:42:d2:be:58:14:84:93:5e:4c:77:50:2f:f2:
87:d3:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:16:42 2026 by rpki-client