
Error: rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
File: 77eqjvlsE6qtyEdvvd6fMnf81W0.mft (raw, json)
Hash identifier: 36vONikclc6zqx7yCwmxy3RTkijdwaxw3oCm8kSq/lU=
Subject key identifier: EB:28:FC:EA:D8:6B:55:58:80:DA:09:C6:39:40:03:3E:B8:96:1D:95
Authority key identifier: EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
Certificate issuer: /CN=F36251E0AF/serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Certificate serial: 03B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
Manifest number: 03B0
Signing time: Sun 20 Sep 2026 04:06:01 +0000
Manifest this update: Sun 20 Sep 2026 04:06:00 +0000
Manifest next update: Tue 22 Sep 2026 04:06:00 +0000
Files and hashes: 1: 77eqjvlsE6qtyEdvvd6fMnf81W0.crl (hash: F0VT9GoSWoOIgB2A/kQoyOluZuL8yNdxDe1eUivhDlM=)
2: E883F5DAFFAA11EEB452902D017001B1.roa (hash: DujQOR8lgqXuI7Ca5VeFBLLM9Nr1YJ2AU6XT7Vwygec=)
3: E5339BB6FE4B11EEBF03D6FE007001B1.roa (hash: clO1hTVCUiFR0kzwPDKqsSqfTZGuR9lBaBQYCVXfpFM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36251E0AF, serialNumber=EFB7AA8EF96C13AAADC8476FBDDE9F3277FCD56D
Validity
Not Before: Sep 20 04:06:00 2026 GMT
Not After : Sep 22 04:06:00 2026 GMT
Subject: CN=6aaf5ba9-c4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:b6:52:a3:e7:13:43:b6:62:74:c5:6d:8d:
ff:15:84:38:5c:4b:de:ba:be:e3:1b:69:59:7f:c0:
9e:ac:3e:9e:16:f1:8e:d5:01:62:ed:3d:77:74:d1:
80:bf:e5:2d:f8:f1:e4:e8:23:f1:33:17:72:6a:d2:
d3:93:60:03:01:18:c9:52:87:ee:0b:63:a7:ff:65:
4e:4e:65:59:61:25:4e:ce:0f:18:33:c0:55:a8:bb:
d7:32:61:bc:0c:83:84:cc:9f:d5:e1:ad:4e:28:40:
d8:78:5c:10:aa:96:72:02:d9:e2:7d:0e:7b:f0:8c:
1d:c9:8c:3a:e7:1a:ba:d1:e9:04:a6:39:7a:de:fa:
42:52:33:c5:d3:9d:b3:fe:27:cc:e7:61:b6:f5:30:
f7:5d:82:07:57:e4:fe:10:05:f6:0d:bf:4b:f0:fe:
16:0f:5a:95:e4:07:d8:a4:3c:c7:97:6a:ac:c3:9f:
43:55:77:b3:1f:eb:0c:98:e7:2c:57:44:43:06:44:
ea:f1:10:83:31:48:ba:cd:f5:05:32:8d:91:ee:67:
fd:77:9b:b6:65:5f:7e:7a:57:1d:0f:59:ea:2b:75:
5d:30:f4:25:d2:00:16:0a:9a:6d:af:31:e7:ce:17:
bb:f0:ff:17:03:a7:1a:0d:2f:6f:0a:96:41:db:ff:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:FC:EA:D8:6B:55:58:80:DA:09:C6:39:40:03:3E:B8:96:1D:95
X509v3 Authority Key Identifier:
keyid:EF:B7:AA:8E:F9:6C:13:AA:AD:C8:47:6F:BD:DE:9F:32:77:FC:D5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/77eqjvlsE6qtyEdvvd6fMnf81W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36251E0/397067ECE53111EEAC6D67C1775412E6/77eqjvlsE6qtyEdvvd6fMnf81W0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:77:b9:56:4c:44:73:f0:ff:5f:86:4c:cc:c8:f4:cf:8b:8a:
6c:16:10:53:2f:e0:ea:df:91:c3:60:97:e2:a1:b4:df:d0:c0:
68:af:95:cb:44:19:2c:9a:7b:a9:56:5b:82:d7:ff:8b:8d:7b:
7e:09:5e:51:ca:51:aa:14:b6:81:db:f1:11:10:b5:24:b4:77:
dc:67:32:51:79:7c:e6:88:b2:c7:fd:af:fd:f4:6b:6f:3a:c3:
a3:c8:dd:e5:c2:8e:04:a8:eb:ba:70:86:60:d2:17:27:57:c4:
12:6f:f6:cd:1a:c5:ce:ef:aa:d4:bf:90:92:b3:e1:f0:bf:a1:
36:6c:c3:3c:6d:33:bf:9e:c5:28:ed:62:ec:cb:73:42:7f:f7:
51:6a:cf:15:73:a2:0f:82:5a:71:0d:75:57:67:b9:35:b4:08:
93:1b:58:20:54:fc:e9:27:02:34:76:bf:35:f9:8b:d7:21:0f:
5f:b8:23:09:9c:72:f6:20:b3:80:7c:dc:6f:7f:f5:fb:7c:4a:
3e:b8:26:27:62:83:08:56:97:22:54:26:5b:61:60:27:5f:8f:
f8:85:34:24:62:68:b2:c1:99:6b:fa:a2:a8:91:d8:69:1a:ce:
47:b2:9e:b3:b8:60:5a:bd:10:36:27:42:b1:32:20:ea:b1:47:
17:a4:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:17 2026 by rpki-client