
Error: rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
File: QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft (raw, json)
Hash identifier: s6KEVmplUO5WNri6/upFPy4QiT9BgBsyj7KuCQAhgSY=
Subject key identifier: F7:4F:42:E2:90:2E:47:DF:0F:0F:91:39:48:4A:90:2E:0A:CF:76:FA
Authority key identifier: 41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4
Certificate issuer: /CN=F369D6F1AF/serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
Certificate serial: 0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
Manifest number: 0C
Signing time: Sun 11 Oct 2026 05:59:36 +0000
Manifest this update: Sun 11 Oct 2026 05:59:36 +0000
Manifest next update: Tue 13 Oct 2026 05:59:36 +0000
Files and hashes: 1: QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl (hash: +5ztXF7R7cTYstEIyyJBaQl/lrajXT9H77wfPjUHYTY=)
2: E960B0D8BE4311F18F0CE1D0CE1D38B0.roa (hash: tirPu9eaqbqzpKKRZphPTtGNvhDMD9dDeBi//jNK7ao=)
3: E1F79E82BE4411F193FB76D7CE1D38B0.roa (hash: GmbfIlz4ZuVDdrs8RT0xxtjOrqdq3uod0WzhmVoFBlI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D6F1AF, serialNumber=412E7F9F6A17737452C678346D8190EEDE988AB4
Validity
Not Before: Oct 11 05:59:36 2026 GMT
Not After : Oct 13 05:59:36 2026 GMT
Subject: CN=6acb25c8-fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:e8:0e:eb:ed:a8:ee:c9:fe:50:aa:bd:ce:
3e:f9:45:e3:54:aa:f7:22:89:26:fc:ca:3a:f1:54:
2d:a4:a3:2c:17:86:70:f9:c2:d7:75:eb:8e:b8:3d:
5a:e5:ba:d4:37:16:9e:2e:0c:0a:17:a4:ea:c2:17:
41:ca:ba:e7:8a:7d:cb:2f:7c:42:a7:39:8f:46:3f:
5d:ac:60:77:2b:94:23:71:f3:b7:1d:2b:5e:22:f2:
f0:d3:17:b3:8c:a5:f7:66:87:07:b3:ab:29:8b:04:
a0:12:30:7e:c9:7e:84:83:7a:50:7a:73:00:6f:02:
f3:61:60:c6:3f:be:93:29:23:9a:2d:e5:aa:d5:b0:
0e:30:72:d1:86:c7:52:9d:bc:7a:fe:39:42:6b:1c:
f5:d9:fa:cf:21:20:43:89:ad:29:eb:ba:31:19:ae:
13:50:18:10:af:ae:e7:80:25:bb:4d:a0:c2:49:8c:
8d:10:9f:09:c2:1c:14:af:29:63:e5:a9:a7:59:71:
8c:4c:29:03:c9:7e:e5:fc:a8:cc:a8:0a:37:06:d7:
22:bd:81:b8:1e:02:61:5f:d2:b6:1d:00:1a:7b:f2:
be:f1:72:ae:76:9a:9a:ea:00:da:30:ee:27:dc:82:
d5:d0:74:22:6b:79:14:4b:2c:29:6e:e2:8b:bc:2e:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:42:E2:90:2E:47:DF:0F:0F:91:39:48:4A:90:2E:0A:CF:76:FA
X509v3 Authority Key Identifier:
keyid:41:2E:7F:9F:6A:17:73:74:52:C6:78:34:6D:81:90:EE:DE:98:8A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS5_n2oXc3RSxng0bYGQ7t6YirQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D6F1/8A5AD036BE3A11F1AD13CB15CF1D38B0/QS5_n2oXc3RSxng0bYGQ7t6YirQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:f2:ad:2e:a7:ae:a5:14:5f:2d:19:7f:83:a9:95:51:f7:ce:
0e:ef:9e:e8:2f:3a:54:18:54:2a:9f:68:ec:ca:3a:0f:56:19:
a0:af:19:7c:a8:83:8f:d3:8e:ce:12:59:45:de:64:00:fe:0d:
d5:64:57:75:ed:f5:a9:74:69:64:02:0d:d3:ca:42:84:04:86:
21:1b:17:12:b5:f7:d1:a7:af:57:a7:48:fb:1a:34:38:52:f0:
41:3c:8f:28:61:54:ba:22:db:10:1a:90:0f:83:8c:dc:06:64:
46:1e:e9:f4:b4:07:c1:f9:b2:e3:72:6c:f7:4b:78:6c:37:ed:
43:a0:e6:98:f2:79:e2:50:dd:2c:b0:0f:e7:e4:a4:29:7c:ce:
81:6c:47:1b:e5:72:7c:9a:7a:68:5a:82:33:06:87:38:9d:76:
58:5e:0f:af:f0:7b:bf:45:2c:db:ee:69:62:a2:8e:6e:9e:09:
d4:5b:c4:e9:24:74:1f:f3:c1:d8:76:c7:86:e0:80:1f:75:f1:
7a:f0:4b:64:ad:db:c7:e0:b8:d3:06:08:94:3a:07:bd:53:09:
38:c5:0c:9c:2f:44:e5:3d:66:73:68:48:a7:ef:02:76:78:7f:
2d:84:b2:bb:1a:09:47:40:d7:78:ef:ca:2b:42:12:fa:e1:66:
8e:8e:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:57:40 2026 by rpki-client