
Error: rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File: X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier: g8Grz5V4tE7ldZG9q0rJGYYkGHTyOqw/aEmUKmBLZPM=
Subject key identifier: CF:FA:60:F6:B8:83:6A:0C:CA:4E:D5:32:D1:87:24:0C:F4:90:39:D1
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer: /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial: 0805
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number: 0801
Signing time: Thu 08 Oct 2026 02:05:38 +0000
Manifest this update: Thu 08 Oct 2026 02:05:37 +0000
Manifest next update: Sat 10 Oct 2026 02:05:37 +0000
Files and hashes: 1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: W57bBb9RXaUq6ObsPLvawOGal7DcqM3xZmCaPmMubJw=)
2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Validity
Not Before: Oct 8 02:05:37 2026 GMT
Not After : Oct 10 02:05:37 2026 GMT
Subject: CN=6ac6fa71-075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:40:63:93:08:30:00:61:e4:09:76:c2:7d:
99:1b:ef:c0:65:f7:26:e0:99:e3:d9:77:e9:fa:ec:
04:6f:00:66:13:08:86:63:3f:2c:7c:2c:3b:81:c8:
db:d1:44:e5:6d:59:db:03:94:7b:8e:6e:8f:45:b0:
e9:9a:09:c5:e3:e1:0b:02:14:de:5f:61:87:a0:cd:
3a:1f:77:59:09:e7:b2:36:d7:4d:7f:4a:be:a0:34:
bf:1c:33:2e:17:d5:01:f8:13:5c:ef:59:69:6d:c7:
34:26:f1:b9:e1:8f:4f:1e:83:4a:3f:fe:96:c2:34:
a4:62:69:13:56:7d:cc:47:3d:9d:0b:b7:f8:6b:b0:
56:66:ea:5b:98:14:c2:f0:08:bc:be:05:dd:33:7a:
bc:7b:82:36:95:ba:fe:b4:ff:d8:8a:45:04:01:79:
0f:91:9c:16:19:77:6e:ac:16:9c:56:3d:ac:ae:62:
9d:6e:e1:7f:58:f7:dc:d8:25:f6:9d:4b:2a:4d:c8:
22:61:40:bc:e3:90:71:73:2d:d5:34:47:11:70:92:
0e:52:43:b4:1f:de:3c:37:50:af:a7:f5:bf:d5:38:
55:5c:1e:cc:38:69:18:07:94:68:ab:b2:64:5c:b8:
1f:40:d5:50:89:32:bd:26:58:5c:4d:05:43:e0:e4:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:60:F6:B8:83:6A:0C:CA:4E:D5:32:D1:87:24:0C:F4:90:39:D1
X509v3 Authority Key Identifier:
keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:44:2f:5e:f3:20:e5:15:be:34:c1:6f:33:80:0d:95:25:
d8:ff:fc:63:75:77:10:17:e9:52:9f:e7:2d:76:54:cd:48:8a:
53:84:5b:78:04:29:2f:4f:c1:b1:dc:7f:cf:ca:a0:a4:d0:4f:
98:e1:93:6a:32:f8:fd:ec:45:d5:e9:ca:1b:06:31:e8:e4:e6:
9c:8c:b2:72:95:a2:0f:71:23:1d:21:58:82:d3:63:00:ea:50:
46:02:cd:4b:da:8e:d0:5f:4f:63:41:ac:28:76:6e:04:ce:96:
39:5c:63:34:09:08:fa:52:b3:80:23:c1:ea:2e:4c:cc:cf:bb:
e2:8f:af:4a:93:ae:5c:e0:09:83:0f:f5:0f:f4:82:3e:75:91:
55:c7:7e:4c:f1:63:cb:8f:04:ab:68:be:65:15:7c:ef:d0:35:
8c:a0:b0:ea:27:92:c2:73:28:3e:16:c4:ba:d5:81:a2:27:27:
c5:52:0d:57:a7:bd:b9:34:b9:cc:66:f0:73:ee:3a:9d:1c:90:
f6:1e:f6:5e:4a:79:57:32:ac:51:50:7f:04:66:42:7c:5c:fb:
c0:71:2e:6e:c0:23:11:19:1a:aa:fe:d6:55:4f:97:48:4d:87:
13:25:0f:fe:0e:e8:da:74:9e:77:c1:68:ca:f8:c4:24:de:70:
26:42:83:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTA3OTNBRjExMC8GA1UEBRMoNUZFMzMxNzJBNjA4MkM1NEFCQzkxMUYxOUY1NzlE
NDlGRDgwOTgxNDAeFw0yNjEwMDgwMjA1MzdaFw0yNjEwMTAwMjA1MzdaMBgxFjAU
BgNVBAMTDTZhYzZmYTcxLTA3NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB1kBjkwgwAGHkCXbCfZkb78Bl9ybgmePZd+n67ARvAGYTCIZjPyx8LDuB
yNvRROVtWdsDlHuObo9FsOmaCcXj4QsCFN5fYYegzTofd1kJ57I2101/Sr6gNL8c
My4X1QH4E1zvWWltxzQm8bnhj08eg0o//pbCNKRiaRNWfcxHPZ0Lt/hrsFZm6luY
FMLwCLy+Bd0zerx7gjaVuv60/9iKRQQBeQ+RnBYZd26sFpxWPayuYp1u4X9Y99zY
JfadSypNyCJhQLzjkHFzLdU0RxFwkg5SQ7Qf3jw3UK+n9b/VOFVcHsw4aRgHlGir
smRcuB9A1VCJMr0mWFxNBUPg5LQnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUz/pg
9riDagzKTtUy0YckDPSQOdEwHwYDVR0jBBgwFoAUX+MxcqYILFSryRHxn1edSf2A
mBQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkwNzkzL0EyNTJBQUM4QTQyNDExRUJBMTM1RDI2RUY4QUVBMjI4L1gtTXhj
cVlJTEZTcnlSSHhuMWVkU2YyQW1CUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gtTXhjcVlJTEZTcnlSSHhuMWVkU2YyQW1CUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTA3OTMvQTI1MkFBQzhBNDI0MTFFQkExMzVEMjZFRjhB
RUEyMjgvWC1NeGNxWUlMRlNyeVJIeG4xZWRTZjJBbUJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoNUQvXvMg5RW+NMFvM4ANlSXY//xj
dXcQF+lSn+ctdlTNSIpThFt4BCkvT8Gx3H/PyqCk0E+Y4ZNqMvj97EXV6cobBjHo
5OacjLJylaIPcSMdIViC02MA6lBGAs1L2o7QX09jQawodm4EzpY5XGM0CQj6UrOA
I8HqLkzMz7vij69Kk65c4AmDD/UP9II+dZFVx35M8WPLjwSraL5lFXzv0DWMoLDq
J5LCcyg+FsS61YGiJyfFUg1Xp725NLnMZvBz7jqdHJD2HvZeSnlXMqxRUH8EZkJ8
XPvAcS5uwCMRGRqq/tZVT5dITYcTJQ/+DujadJ53wWjK+MQk3nAmQoNf
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:39:02 2026 by rpki-client