
Error: rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File: OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier: 54f+fKY3QYhH1nx74B5ttTZgFt0GOgFIAFaMAz3VlHg=
Subject key identifier: 17:17:58:03:F4:82:5A:A9:86:3F:95:F6:0D:F0:2F:70:0B:8E:B2:1F
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer: /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial: 01B6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number: 01B3
Signing time: Mon 21 Sep 2026 05:01:30 +0000
Manifest this update: Mon 21 Sep 2026 05:01:29 +0000
Manifest next update: Wed 23 Sep 2026 05:01:29 +0000
Files and hashes: 1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: L83nRIL5ovQojZRrOkf7pAg5MaRPzujmeiTB9uYqo+Q=)
2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Validity
Not Before: Sep 21 05:01:29 2026 GMT
Not After : Sep 23 05:01:29 2026 GMT
Subject: CN=6ab0ba2a-eb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:6a:28:0f:81:4a:70:e2:a2:f8:d5:bf:42:
c9:14:ec:e6:52:e3:d2:34:8a:34:b7:df:c6:ea:1e:
55:72:fa:d7:10:4f:13:93:ac:69:2f:6b:41:4d:ef:
0f:84:50:a4:fc:40:14:d4:fd:aa:1b:ee:5d:f4:de:
28:f1:2c:4a:af:97:a6:3b:54:ee:b4:a0:4b:7d:63:
ac:f8:87:05:cc:07:db:4a:98:e9:41:48:8b:41:30:
50:40:5a:51:09:9a:1a:79:3f:e9:69:75:99:7f:28:
ad:59:2c:11:91:c6:2d:b6:e9:5e:76:42:89:fb:4b:
ad:a4:0f:f7:43:ba:b9:1b:05:d3:a1:5c:6d:75:26:
62:d8:f0:ea:18:82:2c:15:8a:0d:0f:24:03:54:90:
f6:fa:94:11:f8:9b:e3:b8:39:9e:e7:79:43:cf:31:
3b:89:8a:5d:04:29:6f:1d:e7:ea:e5:d8:a3:4b:26:
bc:8e:f7:28:f7:60:1d:e3:85:6b:1b:13:67:4f:c7:
d2:25:31:d0:05:71:75:03:fb:ba:88:bd:a9:3f:2e:
29:4b:ea:31:a0:45:f7:11:e4:cc:8f:44:78:3f:f8:
b8:6c:06:cc:ef:36:ff:1e:2b:ef:ef:c4:ab:60:09:
fb:4c:6d:9a:a4:44:b5:61:d3:9a:9e:37:df:3f:9a:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:58:03:F4:82:5A:A9:86:3F:95:F6:0D:F0:2F:70:0B:8E:B2:1F
X509v3 Authority Key Identifier:
keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:3e:29:15:5d:7d:de:93:68:58:03:d2:0c:b4:e2:03:ab:
c2:6e:99:29:e6:4c:30:03:bd:8e:09:1b:18:e9:f9:f0:6e:97:
ad:b7:ca:a0:7d:9d:79:ab:71:d7:51:ab:68:47:f4:29:29:25:
4c:21:94:f1:32:99:75:e1:2b:9b:ff:f8:f7:87:55:01:d0:cd:
82:65:42:18:b3:1f:b6:48:fc:c9:77:05:4e:92:e8:64:e6:cc:
2e:4b:f5:90:ca:d9:e9:e1:6f:92:18:82:35:3f:6e:05:63:40:
86:da:9e:31:4f:fd:37:d9:38:49:48:14:f0:84:f0:23:51:34:
94:aa:13:a8:dd:b3:fd:cb:73:03:4e:02:57:66:af:7b:00:1e:
83:f8:dd:f8:cf:e7:4f:95:d9:ac:95:89:48:51:51:78:b0:79:
b7:56:08:6e:86:80:18:b6:a4:d7:ca:b8:ff:fb:61:87:dd:03:
6e:43:43:89:2c:f4:85:d6:65:f6:fd:50:2b:9b:23:3b:c5:8f:
42:1b:0f:9c:2f:af:96:35:69:14:c0:1c:3f:b3:36:05:1c:e6:
58:91:07:80:0b:5f:19:1f:97:af:c9:91:84:60:52:7e:f3:90:
35:5d:06:91:8e:25:10:78:e6:25:58:c7:84:72:3e:d3:17:39:
05:33:24:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkEyQjJBRjExMC8GA1UEBRMoM0FFNzY0NkNFNkFENTY5Rjc2MTZFNkE2RjZGRDNC
MTk4NkJFRDQxOTAeFw0yNjA5MjEwNTAxMjlaFw0yNjA5MjMwNTAxMjlaMBgxFjAU
BgNVBAMTDTZhYjBiYTJhLWViMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC64WooD4FKcOKi+NW/QskU7OZS49I0ijS338bqHlVy+tcQTxOTrGkva0FN
7w+EUKT8QBTU/aob7l303ijxLEqvl6Y7VO60oEt9Y6z4hwXMB9tKmOlBSItBMFBA
WlEJmhp5P+lpdZl/KK1ZLBGRxi226V52Qon7S62kD/dDurkbBdOhXG11JmLY8OoY
giwVig0PJANUkPb6lBH4m+O4OZ7neUPPMTuJil0EKW8d5+rl2KNLJryO9yj3YB3j
hWsbE2dPx9IlMdAFcXUD+7qIvak/LilL6jGgRfcR5MyPRHg/+LhsBszvNv8eK+/v
xKtgCftMbZqkRLVh05qeN98/mhETAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFxdY
A/SCWqmGP5X2DfAvcAuOsh8wHwYDVR0jBBgwFoAUOudkbOatVp92Fuam9v07GYa+
1BkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZBMkIyL0QzRjQ0MUFFNjZFNDExRjBBMERBNjY5MkRBRTRFQzlDL091ZGti
T2F0VnA5MkZ1YW05djA3R1lhLTFCay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL091ZGtiT2F0VnA5MkZ1YW05djA3R1lhLTFCay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkEyQjIvRDNGNDQxQUU2NkU0MTFGMEEwREE2NjkyREFF
NEVDOUMvT3Vka2JPYXRWcDkyRnVhbTl2MDdHWWEtMUJrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGIz4pFV193pNoWAPSDLTiA6vCbpkp
5kwwA72OCRsY6fnwbpett8qgfZ15q3HXUatoR/QpKSVMIZTxMpl14Sub//j3h1UB
0M2CZUIYsx+2SPzJdwVOkuhk5swuS/WQytnp4W+SGII1P24FY0CG2p4xT/032ThJ
SBTwhPAjUTSUqhOo3bP9y3MDTgJXZq97AB6D+N34z+dPldmslYlIUVF4sHm3Vghu
hoAYtqTXyrj/+2GH3QNuQ0OJLPSF1mX2/VArmyM7xY9CGw+cL6+WNWkUwBw/szYF
HOZYkQeAC18ZH5evyZGEYFJ+85A1XQaRjiUQeOYlWMeEcj7TFzkFMySd
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:31 2026 by rpki-client