
Error: rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: AfN1y3GTKGKdt6tLlLEbo2SfKInrrqLVFaki1096t9w=
Subject key identifier: 7C:97:58:22:68:56:56:A4:43:F1:2B:A6:E3:C3:72:D8:96:19:79:E2
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0F00
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0EE0
Signing time: Tue 22 Sep 2026 01:04:13 +0000
Manifest this update: Tue 22 Sep 2026 01:04:12 +0000
Manifest next update: Thu 24 Sep 2026 01:04:12 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: fppomBykf9BWy9/JorLXdagv41jjAccy1ksBjkzYRq4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Sep 22 01:04:12 2026 GMT
Not After : Sep 24 01:04:12 2026 GMT
Subject: CN=6ab1d40d-a529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:aa:8f:f1:ff:89:3b:b7:95:84:24:79:d2:
ab:6a:72:79:bd:8e:f4:36:08:3b:86:e0:77:25:0f:
07:3b:c0:53:9f:39:a6:53:6f:1e:0d:91:32:e6:f0:
fa:1a:92:4a:bf:70:01:e1:a5:bd:7d:d2:b6:f0:2f:
eb:70:d5:63:26:24:f5:e6:0c:48:df:08:11:4a:21:
f6:53:8c:13:d8:1f:be:39:29:a3:ec:4b:f8:ae:98:
19:c5:00:82:30:ea:46:f6:5c:fa:08:17:ee:0b:4e:
e5:c1:eb:75:3c:35:c3:51:51:c3:0d:49:4e:53:d2:
d2:de:4d:e5:41:e0:c4:0c:c4:9d:86:a1:06:54:38:
67:bb:e4:20:da:bc:69:17:26:2d:63:e9:82:65:6d:
13:76:ba:68:61:7e:19:e1:84:3c:5d:c8:de:44:d1:
b4:b2:f2:1c:28:64:30:74:b1:33:a2:e4:a3:50:cb:
90:86:f3:e9:33:d7:55:51:4c:cf:e6:7c:a3:ee:72:
c7:a9:13:00:f5:ac:a5:8d:73:86:9d:ed:3d:29:6d:
a6:8a:7c:b4:0b:7e:cb:a1:e7:d2:5a:85:7e:a0:03:
86:a5:8f:4b:d9:74:dc:3c:f8:93:bf:50:54:5e:69:
13:fe:74:69:38:ab:ce:ca:d0:32:8b:7c:c0:49:f2:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:58:22:68:56:56:A4:43:F1:2B:A6:E3:C3:72:D8:96:19:79:E2
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:89:42:ab:d3:e2:23:8d:75:3c:07:5a:47:5c:1f:4a:9b:
4b:2f:3c:e7:3f:22:02:15:45:fe:64:ec:f7:c5:b5:50:2f:9a:
c0:8e:2d:34:09:2f:2e:ea:51:f6:76:57:92:ee:46:29:37:03:
d9:f0:7a:73:0f:59:c0:ce:c9:07:d5:08:c6:d7:e3:bd:f5:fc:
24:96:d5:98:6d:d2:36:25:85:bd:04:4a:de:56:26:b2:05:a8:
60:82:79:30:c3:60:86:c6:6a:45:49:e7:c4:a0:cc:72:b9:c4:
13:f0:82:1b:9e:31:b7:f4:86:76:63:14:48:f4:23:29:c7:d9:
35:8d:46:5b:a5:ec:02:d3:df:af:a5:e6:52:2d:cd:dd:52:e1:
38:ee:dd:64:f1:a7:d8:19:73:fb:63:d5:71:b7:d3:a8:87:f5:
e6:6b:75:6e:5b:50:01:9c:73:fb:bc:a7:46:1a:a6:19:72:f4:
7d:49:eb:dc:22:b9:26:b7:af:18:59:56:9c:ed:86:8a:fa:db:
ce:f7:89:74:84:2c:8e:dd:99:f5:19:a8:2e:6c:ed:3b:a6:d6:
90:ff:4f:ad:52:a8:08:50:10:0f:c9:17:86:62:b0:a5:30:21:
b2:a8:47:9c:94:e6:ae:87:25:3f:de:23:08:fb:85:bd:5c:14:
2d:54:c2:81
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgwMzdBRjExMC8GA1UEBRMoMzE0RkZDRTU0MjkxNEUxOTNDN0MxQTJBMDNDNzM1
NzQ2MkVBMTgxNjAeFw0yNjA5MjIwMTA0MTJaFw0yNjA5MjQwMTA0MTJaMBgxFjAU
BgNVBAMTDTZhYjFkNDBkLWE1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJNqqP8f+JO7eVhCR50qtqcnm9jvQ2CDuG4HclDwc7wFOfOaZTbx4NkTLm
8Poakkq/cAHhpb190rbwL+tw1WMmJPXmDEjfCBFKIfZTjBPYH745KaPsS/iumBnF
AIIw6kb2XPoIF+4LTuXB63U8NcNRUcMNSU5T0tLeTeVB4MQMxJ2GoQZUOGe75CDa
vGkXJi1j6YJlbRN2umhhfhnhhDxdyN5E0bSy8hwoZDB0sTOi5KNQy5CG8+kz11VR
TM/mfKPucsepEwD1rKWNc4ad7T0pbaaKfLQLfsuh59JahX6gA4alj0vZdNw8+JO/
UFReaRP+dGk4q87K0DKLfMBJ8uidAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfJdY
ImhWVqRD8Sum48Ny2JYZeeIwHwYDVR0jBBgwFoAUMU/85UKRThk8fBoqA8c1dGLq
GBYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MDM3LzJBQjM5MEUyNkRDNzExRTY4MjY1MzYyREY4QUVBMjI4L01VXzg1
VUtSVGhrOGZCb3FBOGMxZEdMcUdCWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01VXzg1VUtSVGhrOGZCb3FBOGMxZEdMcUdCWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjgwMzcvMkFCMzkwRTI2REM3MTFFNjgyNjUzNjJERjhB
RUEyMjgvTVVfODVVS1JUaGs4ZkJvcUE4YzFkR0xxR0JZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGmYlCq9PiI411PAdaR1wfSptLLzzn
PyICFUX+ZOz3xbVQL5rAji00CS8u6lH2dleS7kYpNwPZ8HpzD1nAzskH1QjG1+O9
9fwkltWYbdI2JYW9BEreViayBahggnkww2CGxmpFSefEoMxyucQT8IIbnjG39IZ2
YxRI9CMpx9k1jUZbpewC09+vpeZSLc3dUuE47t1k8afYGXP7Y9Vxt9Ooh/Xma3Vu
W1ABnHP7vKdGGqYZcvR9SevcIrkmt68YWVac7YaK+tvO94l0hCyO3Zn1GagubO07
ptaQ/0+tUqgIUBAPyReGYrClMCGyqEeclOauhyU/3iMI+4W9XBQtVMKB
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:40:33 2026 by rpki-client