
Error: rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
File: 4CGdWkzYWCxPN-LQ3dcGt369n2w.mft (raw, json)
Hash identifier: HB66CO6zFw0FzTaZNn0hKT43mSSPpMWPB3lCyEbjnvY=
Subject key identifier: 2E:64:70:BB:78:74:69:EC:BA:02:6D:35:C4:D0:B4:06:7E:DF:CD:B7
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Certificate issuer: /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial: 06AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
Manifest number: 069B
Signing time: Tue 13 Oct 2026 02:42:08 +0000
Manifest this update: Tue 13 Oct 2026 02:42:07 +0000
Manifest next update: Thu 15 Oct 2026 02:42:07 +0000
Files and hashes: 1: 4CGdWkzYWCxPN-LQ3dcGt369n2w.crl (hash: BSgJsQ2b18MN0AH4v/bUyOQIaZdUdHSrfLDII+Qza8Q=)
2: 43499CAEE06111EEAD369C57775412E6.roa (hash: BqZi3Jf+58/WulzjWYWd6LnvU4vDKMabeieGFixEMoQ=)
3: B3406C3EE06311EE9DC9645B775412E6.roa (hash: ogaYGhijbZfnfBJbAW8m4J3DjXL9JovFwrfT8ageG8c=)
4: 62AAD5B8C4AD11F088EE28D5DAE4EC9C.roa (hash: V/PGdom7dT1wyeknHKrUkkzFdZubko4PFPhY+dUZjI8=)
5: 98D1105A2F8111F1B6797183DAE4EC9C.roa (hash: U+9nzpaWEUGpqPI6H1GyO4VQB+Kl6s6lnme7de8ebww=)
6: 930D3556C4AE11F088545DDBDAE4EC9C.roa (hash: pZvKmBeXmwbStC6508pXvq67gXEFBPlOqFduOBW2GH0=)
7: AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa (hash: 2tRGD2oLj/HLCtH3fXvt5xrNupgPKXIIViu9/t9+M/E=)
8: 107A839AD49C11EE8138FA6E775412E6.roa (hash: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Validity
Not Before: Oct 13 02:42:07 2026 GMT
Not After : Oct 15 02:42:07 2026 GMT
Subject: CN=6acd9a80-cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:93:94:1d:fd:24:be:09:4e:f2:54:f7:d1:
a6:08:ff:f3:1d:bf:54:81:03:68:93:8f:b6:e5:60:
7a:4b:21:b8:42:5a:87:19:96:14:14:6c:6f:3a:74:
64:2d:52:86:ae:08:3e:87:1c:bf:6a:e6:68:49:f8:
b4:ab:92:f3:38:fc:66:d6:72:af:33:eb:10:dd:4b:
34:fd:19:bd:60:11:7c:c8:83:fd:16:1d:f0:7a:05:
45:1c:c4:15:10:ef:f2:1a:85:b7:3e:3b:fc:67:8c:
4e:b0:53:c5:ca:34:e6:6f:31:61:7f:55:c6:26:21:
1d:c3:a8:0b:67:84:e2:a2:d0:fd:19:81:85:ee:91:
8e:3e:9b:6c:0a:1d:14:d9:2a:33:bf:33:ba:82:0e:
f0:bb:7c:71:3a:2e:a9:49:4e:98:32:36:cd:76:74:
bc:a6:96:07:9e:ce:fe:71:cc:54:7b:ab:63:e4:06:
53:80:3c:a2:7a:bf:02:77:83:c0:1a:83:a4:0d:6e:
24:dd:15:ab:3f:8d:37:90:ea:99:76:a7:cd:fe:83:
d6:8d:a5:42:58:fb:4a:18:d3:cf:d2:1b:81:b1:89:
99:fb:87:4d:a3:0d:d3:3c:59:f1:b7:7b:6a:7b:8b:
79:19:ed:3c:ff:c1:78:e7:2b:80:c9:ff:8d:4f:cb:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:64:70:BB:78:74:69:EC:BA:02:6D:35:C4:D0:B4:06:7E:DF:CD:B7
X509v3 Authority Key Identifier:
keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:c1:d6:18:66:ad:72:2f:95:43:30:74:7f:f6:c0:30:87:
70:89:84:93:50:67:9a:df:cb:6c:ba:b6:95:29:6a:d9:52:98:
7b:76:29:e3:06:ff:28:cf:e8:4d:fe:ff:f3:7a:34:85:14:4f:
9b:9f:e0:29:04:93:7b:da:ec:60:04:6c:8f:d8:c7:6e:62:74:
48:8b:9f:b2:d4:1a:2d:6e:79:06:07:a0:4b:b3:4b:d6:d8:65:
1f:e0:72:88:39:71:26:ea:58:46:7c:f1:5c:5e:f6:c6:90:5e:
e4:80:89:bd:9e:ea:da:8c:82:63:ad:2c:c1:5d:3b:c2:5c:bc:
b5:01:37:1e:00:25:7f:34:a0:ba:0d:b4:e7:a5:b7:de:f4:bd:
ac:42:e6:7f:f2:66:74:7a:5d:25:dd:fc:0a:ea:96:29:16:4c:
40:ff:f0:c7:6a:32:4d:ef:7c:b5:5a:e7:80:57:c4:58:c0:35:
d1:0f:28:45:b4:ef:12:31:38:52:2e:12:89:8c:1d:e0:ac:cc:
25:66:4e:46:c3:0e:74:ec:d2:f4:8f:f1:0d:f8:35:81:79:bf:
e9:2e:8e:78:12:1d:1e:be:e2:e2:08:92:db:12:8b:c7:30:89:
5f:55:5d:10:c3:1a:10:28:aa:64:3c:72:c2:a5:44:b5:d2:a2:
11:b3:49:10
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYzQzJBRjExMC8GA1UEBRMoRTAyMTlENUE0Q0Q4NTgyQzRGMzdFMkQwRERENzA2
Qjc3RUJEOUY2QzAeFw0yNjEwMTMwMjQyMDdaFw0yNjEwMTUwMjQyMDdaMBgxFjAU
BgNVBAMTDTZhY2Q5YTgwLWNkZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7wpOUHf0kvglO8lT30aYI//Mdv1SBA2iTj7blYHpLIbhCWocZlhQUbG86
dGQtUoauCD6HHL9q5mhJ+LSrkvM4/GbWcq8z6xDdSzT9Gb1gEXzIg/0WHfB6BUUc
xBUQ7/Iahbc+O/xnjE6wU8XKNOZvMWF/VcYmIR3DqAtnhOKi0P0ZgYXukY4+m2wK
HRTZKjO/M7qCDvC7fHE6LqlJTpgyNs12dLymlgeezv5xzFR7q2PkBlOAPKJ6vwJ3
g8Aag6QNbiTdFas/jTeQ6pl2p83+g9aNpUJY+0oY08/SG4GxiZn7h02jDdM8WfG3
e2p7i3kZ7Tz/wXjnK4DJ/41Py98vAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULmRw
u3h0aey6Am01xNC0Bn7fzbcwHwYDVR0jBBgwFoAU4CGdWkzYWCxPN+LQ3dcGt369
n2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYxMjIyNDY4LzRDR2RX
a3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRDR2RXa3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYzQzIvQjM5MEU5RThDNzgzMTFFQ0IxOTgyODk0RjEy
MjI0NjgvNENHZFdrellXQ3hQTi1MUTNkY0d0MzY5bjJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR1sHWGGatci+VQzB0f/bAMIdwiYST
UGea38tsuraVKWrZUph7dinjBv8oz+hN/v/zejSFFE+bn+ApBJN72uxgBGyP2Mdu
YnRIi5+y1BotbnkGB6BLs0vW2GUf4HKIOXEm6lhGfPFcXvbGkF7kgIm9nurajIJj
rSzBXTvCXLy1ATceACV/NKC6DbTnpbfe9L2sQuZ/8mZ0el0l3fwK6pYpFkxA//DH
ajJN73y1WueAV8RYwDXRDyhFtO8SMThSLhKJjB3grMwlZk5Gww507NL0j/EN+DWB
eb/pLo54Eh0evuLiCJLbEovHMIlfVV0QwxoQKKpkPHLCpUS10qIRs0kQ
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:09:52 2026 by rpki-client