
Error: rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File: Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier: fFXrEP/9jdcYJV4v4iuehSbHpoDSl/9LF2XN/4B+1M4=
Subject key identifier: 95:E8:55:59:D7:5A:1C:FD:22:89:F2:3C:D5:61:32:61:8B:08:8E:2B
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: 0198
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number: 0190
Signing time: Thu 24 Sep 2026 05:08:29 +0000
Manifest this update: Thu 24 Sep 2026 05:08:28 +0000
Manifest next update: Sat 26 Sep 2026 05:08:28 +0000
Files and hashes: 1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: cmlm45eW2wCeWJICwTefsQucaMbjWiAt7k8i4CcN4dU=)
2: 611421F4963611F1931026A9CE1D38B0.roa (hash: tWLHDOBkRMEzQ3q95dvL/0lstFSuE+RsrJDK/J7YVe8=)
3: 75FD7FDC965611F1BD8175EACE1D38B0.roa (hash: A++E8QHj4hLBa8riAmj4iXBzww6dIixtvtgIi87wQME=)
4: 997B259C963611F185D10DABCE1D38B0.roa (hash: VUPSKE+i4O/810Cyv4p8XUMEeYicWchejkyI7vEvZBk=)
5: 02C2AD14963611F18EF006A9CE1D38B0.roa (hash: 7yVk5ub6iRzjmfjduXsEWGHprN8WJb/0ehVAu7gjU0c=)
6: CD46F55C965611F1A1D42EEECE1D38B0.roa (hash: ZwoPyYleTm8OIOtZdDUeO9ZjDDm126xieIwJh5NqR2U=)
7: A1D222A8755811F19E5F6DAFCE1D38B0.roa (hash: 8lf/svP1VF+sA26loOVd0lxvdI5wOxWStMGhERk0FVI=)
8: 7A8E9D30755211F1A6F15909CF1D38B0.roa (hash: q6y+hzQYmx0hO6P1zdgO/Rqo1yAI57rkaFbZAachqLo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Sep 24 05:08:28 2026 GMT
Not After : Sep 26 05:08:28 2026 GMT
Subject: CN=6ab4b04d-aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:c2:01:c1:4e:1e:16:ca:06:af:b4:54:65:
a6:23:a6:0f:69:72:12:e9:01:00:f3:32:60:1b:d2:
a5:36:b0:bc:fe:01:3a:42:9d:79:f2:3b:46:9e:61:
dd:9c:3d:27:42:59:bf:52:44:0e:6a:b9:9f:14:3d:
2d:29:2b:19:36:87:85:49:e2:8c:60:14:d7:b5:11:
9a:7d:1f:69:43:46:d7:57:40:76:25:67:75:20:f4:
ed:ec:5a:81:88:66:d8:7d:28:31:a5:69:99:1f:48:
d5:49:45:e1:7d:df:97:e9:ec:c2:ad:89:cf:69:c2:
5d:8b:b9:33:e3:18:5e:88:c9:b8:01:d8:5d:2d:8a:
89:c2:bd:41:17:7b:56:2e:96:a1:b9:4f:ff:fc:d1:
2c:c8:86:43:ed:37:f9:af:71:b2:3a:03:d9:47:61:
11:14:e3:a7:45:a2:18:18:99:de:20:7e:52:4a:b2:
38:7c:94:19:2e:92:83:6a:86:1c:3c:a3:a3:2a:37:
c8:e1:1b:fc:d4:f6:a5:be:b7:4f:4a:cd:fc:3b:1d:
5a:f6:76:c9:e2:7e:97:69:1f:63:14:f4:1d:b7:36:
81:73:e9:11:a2:03:54:80:f9:5d:ac:18:f8:5d:b3:
16:2a:d9:e3:a4:e8:ab:2d:1b:43:5d:db:7a:b3:39:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E8:55:59:D7:5A:1C:FD:22:89:F2:3C:D5:61:32:61:8B:08:8E:2B
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:d3:df:a4:88:ed:60:20:e1:9d:db:9a:19:06:2e:17:58:
20:24:a5:8f:73:5a:9e:73:ad:b2:ac:9c:ad:04:dc:16:03:52:
bc:fe:7a:9a:00:1c:34:b8:03:d3:3f:89:a6:78:59:d1:fd:e3:
f1:9f:3e:4c:af:75:d3:fb:9c:55:66:24:ef:98:0c:93:c4:90:
bd:c8:6b:a8:19:18:23:63:5f:90:b2:be:58:a4:e5:43:c2:b7:
32:a9:bc:06:a1:29:2d:bf:dd:9c:91:dd:c2:70:75:12:e9:42:
c7:d7:c2:4a:25:d8:07:83:65:05:c4:7e:9b:20:ea:cb:9b:14:
3c:81:48:9f:b8:5b:6f:7e:82:c0:c1:b8:d2:c8:ce:93:2d:44:
a5:b5:ba:9c:5e:ec:40:92:89:e5:61:dc:2e:a8:88:6d:7c:a1:
b9:b6:ba:c7:39:20:bb:31:6a:46:85:47:17:dc:cb:d7:5a:27:
a6:50:3e:9a:3b:73:c7:1f:b5:4d:30:df:98:f5:2f:07:a9:db:
bb:51:a6:bf:7e:71:0f:ce:04:17:5c:36:bb:66:d2:d9:33:e4:
ad:6f:50:bc:da:b5:c0:b2:9e:60:c9:3a:41:d3:30:75:af:d7:
e7:9c:57:5e:4f:d8:d6:22:57:c9:aa:44:37:8a:6e:26:96:f9:
7e:1e:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:05 2026 by rpki-client