
Error: rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File: KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier: y1No7OnsGd+cnNkRz3maSxUfcvcbettpK0Lw2WUs1g8=
Subject key identifier: BA:22:3F:7E:B5:52:EB:FD:60:D8:FA:24:38:D7:C1:77:31:67:E2:91
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer: /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial: 0462
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number: 0459
Signing time: Wed 23 Sep 2026 03:45:39 +0000
Manifest this update: Wed 23 Sep 2026 03:45:39 +0000
Manifest next update: Fri 25 Sep 2026 03:45:39 +0000
Files and hashes: 1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: c9DQnwqa+Jx3KCdI6LCWv4teTziLDZ1L37hovm9LebM=)
2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Validity
Not Before: Sep 23 03:45:39 2026 GMT
Not After : Sep 25 03:45:39 2026 GMT
Subject: CN=6ab34b63-2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:51:03:07:1e:90:4f:dd:c7:b9:6f:03:f6:
d5:4a:f1:bb:45:94:f9:cd:f4:96:7e:c4:2e:57:be:
0f:16:25:69:9a:61:56:af:1e:53:84:3c:cb:d3:0c:
ac:19:a4:1f:47:d5:bb:47:5b:62:7f:0b:a3:27:8e:
09:3f:97:16:bc:e6:8b:5e:03:67:b2:42:94:38:63:
20:24:cf:63:27:87:69:97:30:19:a8:8b:da:d9:4c:
04:8f:70:c8:6a:d3:1d:f3:bf:0c:70:6c:59:c6:1d:
58:2a:2b:ad:4b:13:e5:65:eb:0f:51:38:2c:93:98:
a1:08:6f:af:6b:fe:00:96:ac:83:e5:5f:b4:c5:dd:
d0:13:b9:a6:4e:a9:ac:8b:89:d1:e0:7f:eb:d5:0d:
b1:6a:04:3b:e1:ae:7f:bc:5d:b5:fa:04:7d:43:d0:
f1:d2:34:ed:15:3a:37:a7:ba:44:5b:4a:b8:75:b1:
99:c8:7b:66:9a:4a:33:3e:17:09:b6:a7:ef:37:db:
d9:af:49:46:4f:f3:6e:6e:f7:07:45:df:e1:f3:c7:
05:bb:fb:c5:b0:58:02:e7:88:6b:82:bf:0f:8e:6f:
55:9d:02:bd:c6:20:c0:cd:38:37:8b:f5:7f:22:0e:
8f:eb:9b:aa:3a:bb:bf:6c:f9:65:ae:0c:a1:2e:0e:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:3F:7E:B5:52:EB:FD:60:D8:FA:24:38:D7:C1:77:31:67:E2:91
X509v3 Authority Key Identifier:
keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:f9:59:f6:cb:7f:7b:39:cc:55:49:26:3d:25:d6:6e:9c:
e5:8a:18:43:c4:ce:91:cd:8e:21:42:4a:c7:c1:4c:dc:71:53:
d4:97:ab:e0:f8:c7:d9:ac:83:a2:68:bd:6b:af:07:5a:36:44:
f4:27:8a:b3:4e:7c:51:72:b9:bc:b6:71:fc:d9:2f:48:c1:51:
73:67:9d:26:28:71:71:8c:c2:e1:e6:d9:7c:2d:a0:ce:d1:83:
90:24:1c:9f:42:d4:46:54:5a:bb:31:9a:d0:61:1a:de:41:4d:
65:b0:d9:34:de:85:b1:2e:c1:9c:d1:0f:2b:e3:1d:f6:51:2b:
32:87:33:02:39:31:a2:b4:00:02:a0:c6:7c:3b:b5:a5:f7:1b:
0e:ba:09:a4:13:1e:e0:66:e0:d1:fc:b4:c5:0e:2e:c8:d2:82:
e3:17:06:b5:f2:05:8b:30:d3:5d:ce:04:10:f8:57:f4:5b:0b:
07:84:f2:1d:fb:0a:0b:62:1f:40:d2:23:19:94:29:12:ba:ea:
14:4c:ca:d0:e3:07:0a:4c:59:2c:2b:f0:bd:e8:6b:65:10:b5:
9e:e2:62:f5:da:cc:44:9f:2e:25:84:47:30:1f:65:bf:a5:15:
33:9e:d9:fe:81:7c:63:57:68:b4:83:7d:26:fe:83:f0:97:99:
c3:c7:2a:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF
OTRDMURGNDA4NzAeFw0yNjA5MjMwMzQ1MzlaFw0yNjA5MjUwMzQ1MzlaMBgxFjAU
BgNVBAMTDTZhYjM0YjYzLTI5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC23FEDBx6QT93HuW8D9tVK8btFlPnN9JZ+xC5Xvg8WJWmaYVavHlOEPMvT
DKwZpB9H1btHW2J/C6Mnjgk/lxa85oteA2eyQpQ4YyAkz2Mnh2mXMBmoi9rZTASP
cMhq0x3zvwxwbFnGHVgqK61LE+Vl6w9ROCyTmKEIb69r/gCWrIPlX7TF3dATuaZO
qayLidHgf+vVDbFqBDvhrn+8XbX6BH1D0PHSNO0VOjenukRbSrh1sZnIe2aaSjM+
Fwm2p+8329mvSUZP825u9wdF3+HzxwW7+8WwWALniGuCvw+Ob1WdAr3GIMDNODeL
9X8iDo/rm6o6u79s+WWuDKEuDr+/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuiI/
frVS6/1g2PokONfBdzFn4pEwHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf
QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl
UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE
OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqnflZ9st/eznMVUkmPSXWbpzlihhD
xM6RzY4hQkrHwUzccVPUl6vg+MfZrIOiaL1rrwdaNkT0J4qzTnxRcrm8tnH82S9I
wVFzZ50mKHFxjMLh5tl8LaDO0YOQJByfQtRGVFq7MZrQYRreQU1lsNk03oWxLsGc
0Q8r4x32USsyhzMCOTGitAACoMZ8O7Wl9xsOugmkEx7gZuDR/LTFDi7I0oLjFwa1
8gWLMNNdzgQQ+Ff0WwsHhPId+woLYh9A0iMZlCkSuuoUTMrQ4wcKTFksK/C96Gtl
ELWe4mL12sxEny4lhEcwH2W/pRUzntn+gXxjV2i0g30m/oPwl5nDxyqJ
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:18 2026 by rpki-client