
Error: rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
File: 8oCesrM_mm8nojXfSsFD0ZKvTiA.mft (raw, json)
Hash identifier: Zy9LgNIJtYWacvRmOgDYF90GnWmoVR0jH8hQdygpd80=
Subject key identifier: 73:CF:2E:98:ED:11:24:D7:FB:0F:B3:C9:01:28:BD:3B:68:9A:6C:ED
Authority key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Certificate issuer: /CN=F362D462AF/serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Certificate serial: 0148
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
Manifest number: 0143
Signing time: Mon 21 Sep 2026 05:14:49 +0000
Manifest this update: Mon 21 Sep 2026 05:14:48 +0000
Manifest next update: Wed 23 Sep 2026 05:14:48 +0000
Files and hashes: 1: 8oCesrM_mm8nojXfSsFD0ZKvTiA.crl (hash: 96AvBnznww7Z5pUNjspkqu3ofXy+KJtWlxzOEI3LCgY=)
2: B2C8AACAC52F11F0998AD295DAE4EC9C.roa (hash: M1WCEGgxvoFjPYMq+CtmmycDaqSwGszFTRcc1Y1aToY=)
3: 45DD78D8C52E11F08D363A8DDAE4EC9C.roa (hash: yfdoYAwEYWo4igb+kX7l8vEmL7IfitH9Vwqq7einS1w=)
4: DE3F4FCEC52F11F0BE75EE95DAE4EC9C.roa (hash: ZoPAKhD86vIDvu9auYJyv1OJTVxIksNymQURFZTgdYQ=)
5: 26BDEBE4C52F11F0A755A591DAE4EC9C.roa (hash: RjPpOx06Fz/3A2OGNli01TWWFc5ri4vhGZoXWXhU+F8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Validity
Not Before: Sep 21 05:14:48 2026 GMT
Not After : Sep 23 05:14:48 2026 GMT
Subject: CN=6ab0bd49-0f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:cd:28:0c:bd:e5:8e:d8:eb:98:33:0a:69:
94:66:09:c9:2a:b9:2c:f4:9e:03:2e:7f:37:91:51:
83:8d:42:00:8d:7c:c9:27:70:80:0a:f3:2e:7c:70:
20:0b:5c:2d:ae:d8:80:a7:cd:50:dc:68:00:23:64:
5b:30:ad:d5:d6:de:be:3e:c3:51:11:ba:1c:f6:a8:
01:dd:43:97:61:54:cc:60:d6:26:7c:0a:c6:f6:49:
7e:5d:60:e7:ab:fc:b8:79:00:c8:ed:ed:98:a3:13:
a9:4a:d4:b9:fd:40:87:c1:c1:81:79:c7:9f:46:79:
c3:48:9d:78:95:2c:3b:1c:9a:23:88:7d:f0:12:d1:
5f:12:e9:aa:97:d1:bb:d0:c1:33:70:32:15:56:77:
eb:16:79:5c:db:a8:d0:34:b2:90:91:c7:f2:d7:6c:
9c:5a:09:e2:92:b3:1a:ae:4a:13:b7:8b:02:e1:cc:
05:b3:dd:c1:69:8c:ed:97:8f:5e:d1:de:13:e8:15:
e3:fa:9a:f9:ca:10:4b:37:20:d6:74:d1:8b:6f:5e:
d3:c3:8a:cb:f5:1e:81:d1:1d:5d:88:7b:91:a2:17:
1a:e9:ab:b6:29:6a:b3:f1:7d:0b:cc:30:26:5b:c5:
c1:85:3c:6c:15:eb:a5:b3:04:7e:25:fb:6e:3a:fb:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:2E:98:ED:11:24:D7:FB:0F:B3:C9:01:28:BD:3B:68:9A:6C:ED
X509v3 Authority Key Identifier:
keyid:F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:10:de:1b:b3:87:2b:d3:89:e7:bf:38:35:12:e5:b7:88:
47:cc:d0:68:4a:1f:cd:a1:f1:19:e1:03:0d:59:6f:f1:ec:05:
49:53:fa:07:ea:e9:be:13:6b:25:fb:fc:e7:b8:e8:d1:62:46:
c9:fc:a8:72:88:ba:06:5c:e4:31:ff:de:b6:e4:3b:8b:9d:54:
ba:b8:5f:8e:aa:7d:ed:ba:32:a7:ff:fb:dd:bc:3c:1d:4e:db:
13:99:56:f0:e7:48:da:44:f8:05:00:62:da:a5:3b:73:77:12:
f6:8a:84:48:c8:8f:95:94:57:87:1b:d2:5f:b0:10:66:0a:83:
66:9c:0c:43:fd:cd:25:93:24:a2:20:60:89:54:e3:f3:c3:b7:
44:13:12:ff:a3:f6:c9:96:15:cb:82:54:a0:4f:7b:cf:5e:2f:
fc:42:79:75:a5:be:1e:10:14:5b:2f:ff:f0:57:44:d8:93:62:
76:46:04:ed:b9:9e:49:8f:5d:73:56:92:6d:1c:c1:8f:dc:b9:
5b:2b:b2:22:f7:00:92:b7:a1:a2:4d:94:af:e9:35:6a:55:2c:
6b:b0:7c:76:c5:d1:6a:80:df:97:8f:ec:56:36:77:f8:1e:82:
9b:89:8d:8c:6f:2d:d3:05:38:c2:96:8c:03:d1:57:65:72:f9:
a4:44:9e:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkQ0NjJBRjExMC8GA1UEBRMoRjI4MDlFQjJCMzNGOUE2RjI3QTIzNURGNEFDMTQz
RDE5MkFGNEUyMDAeFw0yNjA5MjEwNTE0NDhaFw0yNjA5MjMwNTE0NDhaMBgxFjAU
BgNVBAMTDTZhYjBiZDQ5LTBmOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvYs0oDL3ljtjrmDMKaZRmCckquSz0ngMufzeRUYONQgCNfMkncIAK8y58
cCALXC2u2ICnzVDcaAAjZFswrdXW3r4+w1ERuhz2qAHdQ5dhVMxg1iZ8Csb2SX5d
YOer/Lh5AMjt7ZijE6lK1Ln9QIfBwYF5x59GecNInXiVLDscmiOIffAS0V8S6aqX
0bvQwTNwMhVWd+sWeVzbqNA0spCRx/LXbJxaCeKSsxquShO3iwLhzAWz3cFpjO2X
j17R3hPoFeP6mvnKEEs3INZ00YtvXtPDisv1HoHRHV2Ie5GiFxrpq7YparPxfQvM
MCZbxcGFPGwV66WzBH4l+246+2a1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc88u
mO0RJNf7D7PJASi9O2iabO0wHwYDVR0jBBgwFoAU8oCesrM/mm8nojXfSsFD0ZKv
TiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJENDYyL0E1N0MyNTI4QzA2MDExRjA4RUU4NkFCOURBRTRFQzlDLzhvQ2Vz
ck1fbW04bm9qWGZTc0ZEMFpLdlRpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhvQ2Vzck1fbW04bm9qWGZTc0ZEMFpLdlRpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkQ0NjIvQTU3QzI1MjhDMDYwMTFGMDhFRTg2QUI5REFF
NEVDOUMvOG9DZXNyTV9tbThub2pYZlNzRkQwWkt2VGlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyTxDeG7OHK9OJ5784NRLlt4hHzNBo
Sh/NofEZ4QMNWW/x7AVJU/oH6um+E2sl+/znuOjRYkbJ/KhyiLoGXOQx/9625DuL
nVS6uF+Oqn3tujKn//vdvDwdTtsTmVbw50jaRPgFAGLapTtzdxL2ioRIyI+VlFeH
G9JfsBBmCoNmnAxD/c0lkySiIGCJVOPzw7dEExL/o/bJlhXLglSgT3vPXi/8Qnl1
pb4eEBRbL//wV0TYk2J2RgTtuZ5Jj11zVpJtHMGP3LlbK7Ii9wCSt6GiTZSv6TVq
VSxrsHx2xdFqgN+Xj+xWNnf4HoKbiY2Mby3TBTjClowD0VdlcvmkRJ4k
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:48 2026 by rpki-client