
Error: rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
File: ypQWvryVa0rVjBysHB1Gn2gzUFI.mft (raw, json)
Hash identifier: x6sISRRrtLNNhwi3mnNTEEZQ+2AuJQRDIk7fR+EkAnQ=
Subject key identifier: 86:9E:9D:E6:22:F2:82:F9:FF:00:88:26:98:ED:93:49:6A:4A:61:63
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Certificate issuer: /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial: 0A28
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
Manifest number: 0A26
Signing time: Wed 14 Oct 2026 01:36:54 +0000
Manifest this update: Wed 14 Oct 2026 01:36:53 +0000
Manifest next update: Fri 16 Oct 2026 01:36:53 +0000
Files and hashes: 1: ypQWvryVa0rVjBysHB1Gn2gzUFI.crl (hash: MsyqqVDJunNfVQ7qixsRjKSZmu9xr9WXUvs+BbLp73c=)
2: 1AF2F83CFBFE11E992573048F8AEA228.roa (hash: oouCj0bsgLv2TuhXp8fmEvLXf8LLF9rpmnAY9E+k4nY=)
3: F6BF2196FC8111E9AC6A242CF8AEA228.roa (hash: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 01:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2600 (0xa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36914A7AF, serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Validity
Not Before: Oct 14 01:36:53 2026 GMT
Not After : Oct 16 01:36:53 2026 GMT
Subject: CN=6acedcb6-5806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:61:a2:a1:0c:52:f9:8c:d6:58:e7:2c:1e:
a4:46:6a:6a:9d:75:7c:fe:a0:70:87:9c:dc:e8:e5:
88:ec:8f:b5:6d:40:ed:8e:ac:77:0d:78:13:b4:80:
ad:78:b2:68:b8:23:08:71:37:40:95:ed:03:ed:54:
4a:f0:88:93:7c:05:36:c7:20:07:18:fa:5b:ab:23:
32:a8:5c:e8:be:9f:c3:1c:8f:a5:d2:a7:c1:23:b1:
3b:a8:59:3d:4c:65:92:cf:c3:47:b5:5a:d7:0d:a4:
3d:ca:e7:f1:eb:5b:78:1d:0d:c4:0c:50:88:6f:e0:
2e:44:40:e0:32:dc:25:f5:45:65:59:95:ab:13:45:
a9:3f:33:aa:68:f3:35:b1:ad:c4:00:0b:3e:69:1b:
ce:25:7f:27:87:b3:dd:89:1e:02:4f:ae:53:62:9f:
79:f4:25:80:76:aa:d4:4b:0a:e8:6b:df:5f:c8:f1:
ea:f3:40:2d:cf:d5:8d:e4:11:6d:4d:52:84:73:7b:
7c:18:1a:88:c5:d9:35:fe:cd:10:4f:c2:d3:1c:03:
73:7c:18:c3:95:60:cb:57:61:25:be:6e:a6:cc:16:
10:d1:0a:d3:9e:90:7b:e8:cc:38:b6:cf:61:b1:84:
53:95:cf:0a:6a:5b:ff:98:73:ab:29:ed:fd:22:6f:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:9D:E6:22:F2:82:F9:FF:00:88:26:98:ED:93:49:6A:4A:61:63
X509v3 Authority Key Identifier:
keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:95:15:78:94:ed:6b:bb:89:cf:09:b7:ed:2e:b3:08:e5:
6a:91:a2:4d:a4:36:aa:d4:14:1c:ec:58:50:b0:b6:2b:af:9a:
8f:7f:66:65:e3:85:08:53:5d:bc:47:9d:d8:41:d3:60:49:01:
99:64:83:91:e4:61:44:4d:9c:83:46:f1:e6:8d:0f:68:69:2d:
48:db:26:f8:58:07:fd:9e:17:0d:be:0e:dc:d5:08:fb:89:2d:
24:87:3b:ed:c1:67:76:aa:73:3c:db:bc:ce:07:d3:6c:d2:dc:
51:02:f0:27:f4:f0:5c:a5:64:8e:29:26:bc:1d:e1:9b:fd:27:
cd:ee:89:9f:28:4f:0f:35:b8:01:b7:8f:12:27:f5:98:b4:0d:
d1:76:92:30:d6:0e:bd:6c:af:48:dc:e2:7e:fd:9a:be:f3:63:
4e:90:e9:a6:c5:06:3f:d3:f4:a2:fc:b8:3c:5f:4e:a2:10:af:
3e:b3:c7:79:40:ed:a3:54:d5:f2:e5:4c:63:da:43:c0:a8:cb:
56:22:e6:b5:d8:95:63:52:a0:01:30:82:0c:63:a0:8f:00:84:
27:82:ef:17:ba:be:63:81:6b:07:c2:ce:06:4a:27:d4:85:03:
91:e4:2d:93:7b:5c:cd:50:af:9e:25:1c:67:86:2e:b7:d6:3b:
e2:5f:dd:93
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE0QTdBRjExMC8GA1UEBRMoQ0E5NDE2QkVCQzk1NkI0QUQ1OEMxQ0FDMUMxRDQ2
OUY2ODMzNTA1MjAeFw0yNjEwMTQwMTM2NTNaFw0yNjEwMTYwMTM2NTNaMBgxFjAU
BgNVBAMTDTZhY2VkY2I2LTU4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwFWGioQxS+YzWWOcsHqRGamqddXz+oHCHnNzo5Yjsj7VtQO2OrHcNeBO0
gK14smi4IwhxN0CV7QPtVErwiJN8BTbHIAcY+lurIzKoXOi+n8Mcj6XSp8EjsTuo
WT1MZZLPw0e1WtcNpD3K5/HrW3gdDcQMUIhv4C5EQOAy3CX1RWVZlasTRak/M6po
8zWxrcQACz5pG84lfyeHs92JHgJPrlNin3n0JYB2qtRLCuhr31/I8erzQC3P1Y3k
EW1NUoRze3wYGojF2TX+zRBPwtMcA3N8GMOVYMtXYSW+bqbMFhDRCtOekHvozDi2
z2GxhFOVzwpqW/+Yc6sp7f0ib5gnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhp6d
5iLygvn/AIgmmO2TSWpKYWMwHwYDVR0jBBgwFoAUypQWvryVa0rVjBysHB1Gn2gz
UFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxNEE3L0M0Mjg2MTU0RkJGRDExRTlCNzcyQ0U0N0Y4QUVBMjI4L3lwUVd2
cnlWYTByVmpCeXNIQjFHbjJnelVGSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lwUVd2cnlWYTByVmpCeXNIQjFHbjJnelVGSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTE0QTcvQzQyODYxNTRGQkZEMTFFOUI3NzJDRTQ3RjhB
RUEyMjgveXBRV3ZyeVZhMHJWakJ5c0hCMUduMmd6VUZJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOn5UVeJTta7uJzwm37S6zCOVqkaJN
pDaq1BQc7FhQsLYrr5qPf2Zl44UIU128R53YQdNgSQGZZIOR5GFETZyDRvHmjQ9o
aS1I2yb4WAf9nhcNvg7c1Qj7iS0khzvtwWd2qnM827zOB9Ns0txRAvAn9PBcpWSO
KSa8HeGb/SfN7omfKE8PNbgBt48SJ/WYtA3RdpIw1g69bK9I3OJ+/Zq+82NOkOmm
xQY/0/Si/Lg8X06iEK8+s8d5QO2jVNXy5Uxj2kPAqMtWIua12JVjUqABMIIMY6CP
AIQngu8Xur5jgWsHws4GSifUhQOR5C2Te1zNUK+eJRxnhi631jviX92T
-----END CERTIFICATE-----
Generated at Wed Oct 14 23:14:59 2026 by rpki-client