
Error: rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
File: 5xsveyVyCEbT0m5QEo3N3SoWX54.mft (raw, json)
Hash identifier: KyKj4hgwrZif1IZ0qd+ieOn+Jz4+MDoQZaoYBWOJ7Ko=
Subject key identifier: 36:15:8A:38:D5:55:CD:AE:7F:3F:7E:04:B5:5D:53:40:91:37:88:0B
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Certificate issuer: /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial: 0137
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
Manifest number: 0135
Signing time: Sat 26 Sep 2026 05:16:46 +0000
Manifest this update: Sat 26 Sep 2026 05:16:45 +0000
Manifest next update: Mon 28 Sep 2026 05:16:45 +0000
Files and hashes: 1: 5xsveyVyCEbT0m5QEo3N3SoWX54.crl (hash: 1gCDVCbKLtxuJRrr4Rolw98M9SIhyMjCKtTtumfoEUw=)
2: ABBD988ACB6F11F0953A42E6DAE4EC9C.roa (hash: b45RZ2QFQBxIFsJ6jLClIbEaKZfOFnfn9gSsLgljeTk=)
3: AE7281A4CB7311F0A2BADC80DAE4EC9C.roa (hash: hY70D/eGofbELgRzLaQTYAUGWjRXYyTAqpTOnSRS100=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Validity
Not Before: Sep 26 05:16:45 2026 GMT
Not After : Sep 28 05:16:45 2026 GMT
Subject: CN=6ab7553d-b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:55:90:ef:72:01:c2:c4:cb:e0:37:33:c7:c9:
fd:c8:6b:a9:9f:2f:4c:69:b4:11:fc:a6:b0:97:d5:
02:51:d9:5d:ca:b9:b8:9b:20:9f:33:64:49:75:df:
c8:25:d8:99:35:e8:1d:62:76:61:50:63:6e:a2:a3:
33:2d:5f:70:7b:ed:57:69:be:43:25:71:b4:13:c1:
67:39:0b:c1:c9:89:3a:f3:72:c7:47:52:76:ba:1d:
37:e0:be:fc:78:c2:59:3c:59:21:22:5c:92:8b:b7:
b9:11:6b:75:e3:d8:8d:af:8b:d7:c6:1b:0f:f2:cd:
a7:40:91:50:bf:9a:7a:f5:76:f7:06:6b:18:a9:c9:
27:9e:ba:7f:ba:c5:42:41:1c:84:1e:4c:f2:f7:06:
a6:35:0f:9f:0f:15:d9:fa:14:d7:8e:cc:db:6e:ea:
45:0d:ba:63:9d:6d:29:73:62:87:31:41:74:74:d6:
28:a7:4d:37:e0:2c:53:41:7e:77:b1:08:59:76:76:
66:3a:3f:06:a3:0c:1d:2f:b5:9d:40:cf:7b:bd:ba:
f1:3b:39:c4:54:7f:d3:92:b5:c9:c1:a8:33:e5:66:
c0:22:34:6e:e6:e4:53:04:3d:fd:35:bd:f1:61:b5:
2f:e5:c5:a8:c5:05:76:2f:f5:d8:22:3b:75:0a:d8:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:8A:38:D5:55:CD:AE:7F:3F:7E:04:B5:5D:53:40:91:37:88:0B
X509v3 Authority Key Identifier:
keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:a1:71:5a:2d:ab:0a:98:cd:76:4c:29:89:2a:d6:e0:67:de:
35:17:44:8d:ec:22:90:6c:16:5b:25:d7:b8:1f:84:4f:73:a9:
28:50:0b:7f:d6:b0:ed:c7:7e:ec:c1:33:c8:2d:13:64:d6:31:
25:b2:54:ec:4e:d7:2f:5b:43:ae:65:84:03:1a:6b:a5:a6:39:
d1:34:d5:f1:9d:de:16:a5:a3:93:12:3e:88:2c:07:b8:dc:a9:
f4:98:8c:6f:db:5c:a2:a8:3d:d7:de:5f:26:20:55:fc:7c:20:
34:ad:2f:9f:7f:cf:63:cc:cd:c5:6b:b6:ea:09:2a:2c:36:7e:
ce:b9:58:ee:4e:8b:87:c7:77:d3:26:5c:df:d7:15:11:e6:f0:
1c:ae:0f:74:ee:b0:5b:52:9b:1a:57:12:da:05:05:4d:96:e8:
d0:68:c2:1b:61:e4:68:83:33:f1:08:df:37:15:3d:ac:cd:e5:
83:aa:69:84:a3:07:fa:ea:5a:61:1d:a3:d6:55:ac:0f:a9:2b:
01:0c:35:62:11:04:90:75:8b:c5:d8:2b:e2:fd:97:77:b1:1e:
b7:ac:2d:05:33:08:69:c8:51:05:f5:ae:75:58:3c:df:dc:ff:
2b:36:85:9d:d2:c4:a7:f8:c4:67:54:89:5a:f2:0d:7c:4b:0d:
44:74:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:48:50 2026 by rpki-client