
Error: rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File: zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier: f/URhkCLaf7putTbPfAULHoEIODMwhIdZLSrMJnX8fc=
Subject key identifier: E2:86:34:98:24:97:2B:84:70:B0:64:EA:DE:FD:DE:B7:E1:E1:0B:2F
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 03DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number: 03D4
Signing time: Tue 22 Sep 2026 04:00:45 +0000
Manifest this update: Tue 22 Sep 2026 04:00:44 +0000
Manifest next update: Thu 24 Sep 2026 04:00:44 +0000
Files and hashes: 1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: lZfqRCa4AJxFgjWYC5alVv5FCyAj/MKrNLVI+mzUDR0=)
2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: Sep 22 04:00:44 2026 GMT
Not After : Sep 24 04:00:44 2026 GMT
Subject: CN=6ab1fd6c-bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:11:97:db:35:4b:bb:5f:aa:72:c6:3b:e8:
69:52:d9:3e:79:b6:6e:ba:a3:cf:48:5d:e7:11:53:
1f:2b:a3:0d:f9:4d:11:d5:06:b9:19:cf:8a:fb:4f:
7d:03:d0:b9:ca:44:fa:cb:73:31:36:84:6e:ec:48:
ce:a8:ac:48:eb:b7:fa:1a:90:33:62:24:00:22:86:
23:20:26:cb:ca:5f:63:b0:4c:87:fa:9f:f1:20:d5:
ff:1b:3a:a9:2f:a0:66:14:03:00:78:cc:e6:82:bd:
86:56:a5:a2:66:8f:73:77:2d:f9:ea:50:cd:df:39:
fa:07:4f:1c:c9:4e:4c:fd:32:fd:82:7d:7e:d9:82:
80:51:87:c7:2a:9d:53:f5:88:3a:89:e5:e5:01:9a:
35:be:5d:d8:23:ef:14:41:e3:2a:89:f5:4c:8f:63:
36:f0:39:b9:bf:f9:0b:f2:f0:cf:b9:b1:78:67:16:
11:51:07:6f:a2:04:d5:a4:f3:21:c1:7c:3c:4b:54:
83:e4:a2:8e:21:cd:af:23:c4:47:9a:ed:c7:f5:01:
e3:92:97:fb:9d:68:cc:98:d7:f5:4a:32:52:a5:ce:
61:fd:6e:d0:d3:96:c5:b5:72:43:79:17:19:aa:bd:
54:bd:45:7a:83:9c:dc:44:a6:dd:59:e9:53:e7:08:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:34:98:24:97:2B:84:70:B0:64:EA:DE:FD:DE:B7:E1:E1:0B:2F
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:3b:07:b9:5a:a8:07:82:e2:89:1f:95:90:2f:30:f7:db:
a6:5c:69:bf:ad:04:72:5e:62:4f:25:b3:87:6a:66:83:e7:0c:
05:14:dd:d2:47:41:7a:f8:72:ab:cd:b2:a0:e1:e5:8c:ea:71:
f5:24:4a:55:ba:f3:0b:3e:50:6d:be:49:65:81:d5:3f:9f:ff:
0f:1c:b0:ca:37:88:56:d2:a6:4a:e4:86:49:67:45:f3:cd:22:
30:c6:9c:96:b1:0b:1d:19:63:8f:7b:a0:e2:5e:03:47:07:0e:
ef:06:44:62:bd:1a:ba:3b:88:3b:bd:7e:92:47:e4:60:2e:72:
70:f8:1b:a1:c1:2a:e8:1b:65:9f:54:1a:1b:41:04:a0:d2:b3:
8f:61:30:47:ee:bc:40:45:67:1a:1a:44:41:18:81:54:5c:41:
bd:b5:44:5e:7a:74:39:46:87:c3:bf:38:d7:e6:47:24:34:4e:
4c:85:da:4a:77:51:fa:d0:9d:05:e7:56:3e:61:64:a3:24:b0:
76:47:5e:12:f9:40:a0:9d:0c:d5:70:62:4d:34:68:92:17:42:
f0:5b:67:63:9f:6f:96:74:99:61:6f:dd:a1:c4:c0:76:c5:60:
1e:e4:90:fe:af:5a:e7:47:a9:ef:29:5f:0f:1a:99:7d:45:f9:
df:ef:d5:dd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNjA5MjIwNDAwNDRaFw0yNjA5MjQwNDAwNDRaMBgxFjAU
BgNVBAMTDTZhYjFmZDZjLWJhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtPxGX2zVLu1+qcsY76GlS2T55tm66o89IXecRUx8row35TRHVBrkZz4r7
T30D0LnKRPrLczE2hG7sSM6orEjrt/oakDNiJAAihiMgJsvKX2OwTIf6n/Eg1f8b
OqkvoGYUAwB4zOaCvYZWpaJmj3N3LfnqUM3fOfoHTxzJTkz9Mv2CfX7ZgoBRh8cq
nVP1iDqJ5eUBmjW+Xdgj7xRB4yqJ9UyPYzbwObm/+Qvy8M+5sXhnFhFRB2+iBNWk
8yHBfDxLVIPkoo4hza8jxEea7cf1AeOSl/udaMyY1/VKMlKlzmH9btDTlsW1ckN5
FxmqvVS9RXqDnNxEpt1Z6VPnCITBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4oY0
mCSXK4RwsGTq3v3et+HhCy8wHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO6DsHuVqoB4LiiR+VkC8w99umXGm/
rQRyXmJPJbOHamaD5wwFFN3SR0F6+HKrzbKg4eWM6nH1JEpVuvMLPlBtvkllgdU/
n/8PHLDKN4hW0qZK5IZJZ0XzzSIwxpyWsQsdGWOPe6DiXgNHBw7vBkRivRq6O4g7
vX6SR+RgLnJw+BuhwSroG2WfVBobQQSg0rOPYTBH7rxARWcaGkRBGIFUXEG9tURe
enQ5RofDvzjX5kckNE5MhdpKd1H60J0F51Y+YWSjJLB2R14S+UCgnQzVcGJNNGiS
F0LwW2djn2+WdJlhb92hxMB2xWAe5JD+r1rnR6nvKV8PGpl9Rfnf79Xd
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:46 2026 by rpki-client