
Error: rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File: 2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier: zYId6BbnJEdBI+kgyApS2BfqwqIGIXlvBxEC/nB0WBc=
Subject key identifier: E7:9A:13:A9:D0:5E:BF:EE:A5:24:15:85:81:0D:BB:0E:8C:E0:88:A6
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 02EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number: 02DB
Signing time: Thu 08 Oct 2026 04:36:48 +0000
Manifest this update: Thu 08 Oct 2026 04:36:47 +0000
Manifest next update: Sat 10 Oct 2026 04:36:47 +0000
Files and hashes: 1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: 5lWv7BK7fwMiGfueIzWsPN9UxhjjPtRMtQpIjqHHq5o=)
2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 04:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Validity
Not Before: Oct 8 04:36:47 2026 GMT
Not After : Oct 10 04:36:47 2026 GMT
Subject: CN=6ac71ddf-895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:fa:b7:10:fd:48:72:a5:25:88:40:81:60:
72:f6:73:b1:55:c0:77:56:ad:30:fc:d0:5a:49:79:
d5:da:f9:7f:a1:b9:9c:29:96:cf:9b:33:cf:c1:b5:
67:0f:f8:69:87:07:b3:39:35:53:91:27:7e:89:f9:
d2:7c:9a:e9:9e:c1:7e:fa:4b:68:24:53:61:f7:f3:
18:47:c8:d1:cb:bb:18:c2:4a:82:99:0d:1c:cc:ee:
b6:e5:5f:7b:98:e3:b7:51:58:83:f2:97:bb:20:28:
b0:58:79:1c:d5:f6:96:69:17:b1:04:a3:f1:ac:17:
9b:16:dc:e4:17:84:5f:1b:99:71:45:67:2b:4b:c7:
8b:07:af:94:85:40:0c:07:03:10:2a:64:34:e2:86:
52:15:f2:7c:71:39:e0:d2:08:5c:c1:c6:f1:0c:15:
7c:58:89:a7:e8:a0:50:45:e1:d7:22:4f:b7:da:24:
f8:10:bf:c6:1d:ff:a8:9b:fd:36:f8:29:47:8f:65:
7b:db:7f:e0:1f:9d:03:95:13:d4:78:34:f7:97:f6:
dd:d5:27:a9:c2:30:dc:29:1a:08:10:88:47:8e:0a:
5d:fd:2f:57:15:e4:7f:b9:31:9f:e6:78:ec:a0:36:
08:1b:21:c8:a9:74:31:16:8e:5d:5b:13:13:21:f0:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:13:A9:D0:5E:BF:EE:A5:24:15:85:81:0D:BB:0E:8C:E0:88:A6
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:97:ac:4f:9c:5b:33:66:78:ed:89:fc:74:92:c3:c5:df:
6d:07:00:6e:ed:7c:38:1c:ad:cb:0b:3b:f1:99:5b:27:bb:5e:
58:9b:c3:37:2d:c2:85:b6:a0:e4:82:0f:22:1a:74:00:64:6b:
ac:51:8d:f0:82:dc:97:16:36:d6:17:b9:b2:49:4a:5f:54:24:
a2:c2:5f:c8:76:d5:64:88:9c:6c:3b:d8:36:b5:1c:41:b9:bf:
e9:5d:a4:04:2a:28:15:ed:eb:bf:83:d5:95:7b:9f:a9:ec:3e:
29:94:78:4f:c2:c3:03:97:da:4b:d8:d5:6e:f7:62:5a:d6:c7:
c1:9b:16:a4:b8:ee:d5:f0:33:2a:91:46:7e:84:c7:02:c8:10:
1a:2e:0f:a3:58:e6:c2:d1:f5:eb:7b:15:8c:b8:22:6d:2e:af:
0b:ed:a4:ab:3c:58:4f:b7:c6:d9:10:5a:ea:ae:74:ae:34:92:
00:52:d0:90:6f:45:f6:b4:bd:48:74:04:6c:e7:96:f8:a0:d4:
47:20:58:f0:f6:c9:1c:a0:49:27:72:90:78:a6:c9:0b:0b:57:
b2:0c:f2:03:79:f3:84:a2:6c:e4:59:b0:03:cf:5d:33:86:f4:
a7:a1:4f:81:9f:f7:5d:75:02:eb:7e:44:d2:41:ff:e5:22:09:
7a:3a:88:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mjc5M0ZBRjExMC8GA1UEBRMoREFBODcyRkY5QTA0NDQ2QjcxOEE4RDlGNDc1NTRC
RkE1ODFCM0EwRTAeFw0yNjEwMDgwNDM2NDdaFw0yNjEwMTAwNDM2NDdaMBgxFjAU
BgNVBAMTDTZhYzcxZGRmLTg5NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC64fq3EP1IcqUliECBYHL2c7FVwHdWrTD80FpJedXa+X+huZwpls+bM8/B
tWcP+GmHB7M5NVORJ36J+dJ8mumewX76S2gkU2H38xhHyNHLuxjCSoKZDRzM7rbl
X3uY47dRWIPyl7sgKLBYeRzV9pZpF7EEo/GsF5sW3OQXhF8bmXFFZytLx4sHr5SF
QAwHAxAqZDTihlIV8nxxOeDSCFzBxvEMFXxYiafooFBF4dciT7faJPgQv8Yd/6ib
/Tb4KUePZXvbf+AfnQOVE9R4NPeX9t3VJ6nCMNwpGggQiEeOCl39L1cV5H+5MZ/m
eOygNggbIcipdDEWjl1bExMh8Lv7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU55oT
qdBev+6lJBWFgQ27DozgiKYwHwYDVR0jBBgwFoAU2qhy/5oERGtxio2fR1VL+lgb
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3OTNGLzA2NUQ0REJBQTY0MzExRUY4QjREM0U4Qjc2MkU5NTFBLzJxaHlf
NW9FUkd0eGlvMmZSMVZMLWxnYk9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJxaHlfNW9FUkd0eGlvMmZSMVZMLWxnYk9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYy
RTk1MUEvMnFoeV81b0VSR3R4aW8yZlIxVkwtbGdiT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfxJesT5xbM2Z47Yn8dJLDxd9tBwBu
7Xw4HK3LCzvxmVsnu15Ym8M3LcKFtqDkgg8iGnQAZGusUY3wgtyXFjbWF7mySUpf
VCSiwl/IdtVkiJxsO9g2tRxBub/pXaQEKigV7eu/g9WVe5+p7D4plHhPwsMDl9pL
2NVu92Ja1sfBmxakuO7V8DMqkUZ+hMcCyBAaLg+jWObC0fXrexWMuCJtLq8L7aSr
PFhPt8bZEFrqrnSuNJIAUtCQb0X2tL1IdARs55b4oNRHIFjw9skcoEkncpB4pskL
C1eyDPIDefOEomzkWbADz10zhvSnoU+Bn/dddQLrfkTSQf/lIgl6OojL
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:43:21 2026 by rpki-client