
Error: rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
File: i2Qxm9V6EKYdSYU_G6miZt5alxM.mft (raw, json)
Hash identifier: xKLzuS9dIjzEWHwpFfH3fHSCu3SjpETsS+8d+Oe1Yjs=
Subject key identifier: 77:6B:98:83:1A:22:A2:76:44:45:F5:DE:8A:7B:3B:A6:02:7C:ED:9B
Authority key identifier: 8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
Certificate issuer: /CN=F3631F16AF/serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Certificate serial: D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
Manifest number: D6
Signing time: Thu 05 Nov 2026 05:32:40 +0000
Manifest this update: Thu 05 Nov 2026 05:32:39 +0000
Manifest next update: Sat 07 Nov 2026 05:32:39 +0000
Files and hashes: 1: i2Qxm9V6EKYdSYU_G6miZt5alxM.crl (hash: Ecp6TIuNjoj62T95f7nSHMBZNBp5vC16LUyBlLaCrlc=)
2: 579189BA496911F1939025C0CE1D38B0.roa (hash: 9nu+V4jDpXzggMIj8Gg2sQVf+Ps0AHWXClLk8CxZNuA=)
3: C508B1FE48CD11F1B044A702CF1D38B0.roa (hash: s3yIGbVsantz+OaFdDfVniwJT32Pslq46usbKBVTHVM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3631F16AF, serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Validity
Not Before: Nov 5 05:32:39 2026 GMT
Not After : Nov 7 05:32:39 2026 GMT
Subject: CN=6aec14f8-18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:20:65:36:04:6e:9b:fe:28:9e:f2:e3:7b:
40:5c:aa:85:d6:b9:78:0d:95:ea:30:ba:3a:b8:00:
b3:7f:98:2c:db:d7:ba:93:a2:22:08:64:04:e8:0d:
fa:06:c6:ef:49:fe:af:29:64:73:66:60:cb:bc:18:
13:cd:b3:8e:6a:49:88:f0:9c:94:6e:af:44:3f:01:
fe:86:da:4a:ae:63:71:42:d5:17:13:ea:1b:e4:b7:
1a:8d:0c:39:9f:28:bc:d6:e2:60:a7:b3:c0:45:79:
0d:e1:5c:a5:5e:d0:48:46:7d:76:18:b6:c7:36:c8:
4d:cb:fd:cf:c3:c4:b9:e7:85:53:74:c4:b4:5a:9f:
81:1d:57:20:12:94:c4:d1:81:e7:81:c1:2e:99:5a:
6c:93:a9:67:df:40:a2:ce:2c:cc:79:ea:ef:17:10:
d2:2b:24:0a:22:20:4b:e7:9a:87:f8:ea:05:8e:90:
3a:e3:8b:0b:ff:d1:30:98:c2:e0:2b:09:10:81:83:
93:b8:9a:b2:5e:50:f5:9d:58:2e:c6:e8:8e:65:a1:
79:99:d7:a6:cc:17:e4:b8:5f:47:15:33:6a:15:10:
41:86:3b:4e:3a:7d:42:b7:65:e6:31:e4:3e:fc:04:
e8:75:30:56:a4:92:eb:76:b0:b7:26:d1:f4:d8:78:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6B:98:83:1A:22:A2:76:44:45:F5:DE:8A:7B:3B:A6:02:7C:ED:9B
X509v3 Authority Key Identifier:
keyid:8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:51:ee:af:78:15:35:2d:ff:d9:19:c6:e3:a1:a3:54:38:50:
6e:0a:db:bd:63:7d:ed:14:82:03:3a:27:cc:4f:30:bd:ff:49:
50:7a:ca:2a:13:9b:b2:9d:59:4d:60:92:3d:8f:55:41:7d:27:
36:fd:35:fe:3f:0a:44:d6:63:e3:25:90:61:51:eb:f3:1e:db:
f1:c8:0b:75:1e:8a:31:6e:04:9e:cf:df:38:7a:24:d6:97:d7:
e3:20:0e:69:72:3a:39:25:3e:7b:36:49:4f:c1:ec:08:69:7c:
b8:43:39:68:89:ae:44:db:26:35:c3:8a:87:ec:f8:09:47:c9:
86:d2:26:7a:5b:fc:51:ce:33:fb:b6:27:1f:f0:76:6f:ff:f8:
22:32:ea:7c:43:05:2b:ff:7d:e1:30:21:a8:80:87:4f:eb:55:
94:c3:44:64:94:60:dc:f9:90:f2:55:0e:a5:48:d6:7e:0a:d4:
91:35:c8:9c:b6:58:07:49:72:1d:0b:10:67:44:26:4b:17:54:
8c:29:36:67:61:53:82:3c:10:0e:45:7c:51:96:2c:2d:7e:b0:
6b:21:6c:79:18:0c:1a:76:49:50:6c:c1:77:53:78:e3:f5:58:
a1:52:4b:46:a6:70:f2:33:fc:d3:60:d8:a8:0e:fa:47:df:e6:
7c:c1:df:96
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzFGMTZBRjExMC8GA1UEBRMoOEI2NDMxOUJENTdBMTBBNjFENDk4NTNGMUJBOUEy
NjZERTVBOTcxMzAeFw0yNjExMDUwNTMyMzlaFw0yNjExMDcwNTMyMzlaMBgxFjAU
BgNVBAMTDTZhZWMxNGY4LTE4YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYuyBlNgRum/4onvLje0BcqoXWuXgNleowujq4ALN/mCzb17qToiIIZATo
DfoGxu9J/q8pZHNmYMu8GBPNs45qSYjwnJRur0Q/Af6G2kquY3FC1RcT6hvktxqN
DDmfKLzW4mCns8BFeQ3hXKVe0EhGfXYYtsc2yE3L/c/DxLnnhVN0xLRan4EdVyAS
lMTRgeeBwS6ZWmyTqWffQKLOLMx56u8XENIrJAoiIEvnmof46gWOkDrjiwv/0TCY
wuArCRCBg5O4mrJeUPWdWC7G6I5loXmZ16bMF+S4X0cVM2oVEEGGO046fUK3ZeYx
5D78BOh1MFakkut2sLcm0fTYeOUrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUd2uY
gxoionZERfXeins7pgJ87ZswHwYDVR0jBBgwFoAUi2Qxm9V6EKYdSYU/G6miZt5a
lxMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMxRjE2LzRBM0MyNUY0MzQyOTExRjE4RDc0MzMxQkNGMUQzOEIwL2kyUXht
OVY2RUtZZFNZVV9HNm1pWnQ1YWx4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2kyUXhtOVY2RUtZZFNZVV9HNm1pWnQ1YWx4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzFGMTYvNEEzQzI1RjQzNDI5MTFGMThENzQzMzFCQ0Yx
RDM4QjAvaTJReG05VjZFS1lkU1lVX0c2bWladDVhbHhNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Ue6veBU1Lf/ZGcbjoaNUOFBuCtu9
Y33tFIIDOifMTzC9/0lQesoqE5uynVlNYJI9j1VBfSc2/TX+PwpE1mPjJZBhUevz
HtvxyAt1HooxbgSez984eiTWl9fjIA5pcjo5JT57NklPwewIaXy4Qzloia5E2yY1
w4qH7PgJR8mG0iZ6W/xRzjP7ticf8HZv//giMup8QwUr/33hMCGogIdP61WUw0Rk
lGDc+ZDyVQ6lSNZ+CtSRNcictlgHSXIdCxBnRCZLF1SMKTZnYVOCPBAORXxRliwt
frBrIWx5GAwadklQbMF3U3jj9VihUktGpnDyM/zTYNioDvpH3+Z8wd+W
-----END CERTIFICATE-----
Generated at Thu Nov 5 10:32:41 2026 by rpki-client