
Error: rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
File: p3dqG-VaqYxXBf13nITdAQb-xYI.mft (raw, json)
Hash identifier: JTz9KOC0otUplOeri9ZuHCiDyUs4f7rtqnYWMHlGhdI=
Subject key identifier: 72:CC:CF:27:BE:13:EE:8C:FD:A3:5C:87:FF:9E:67:56:15:FD:F8:F8
Authority key identifier: A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
Certificate issuer: /CN=F36A1387AF/serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Certificate serial: 035F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
Manifest number: 0359
Signing time: Sun 11 Oct 2026 04:16:32 +0000
Manifest this update: Sun 11 Oct 2026 04:16:31 +0000
Manifest next update: Tue 13 Oct 2026 04:16:31 +0000
Files and hashes: 1: p3dqG-VaqYxXBf13nITdAQb-xYI.crl (hash: pb0I88N5x3pUue5sJFR6DQfjdjizYun03THJuN03E7Q=)
2: 36BF5EDE364B11EFA8FDBE92762E951A.roa (hash: 1AccGXf0yBwYdD+2hlK0nS5uXanO+WfhPLEA3XftMww=)
3: C191D4E8276611F184C60C89DAE4EC9C.roa (hash: J7SzOeOkxkBYSb/+dDFTPApl1RYzIVpPAgJtDYPneX8=)
4: 759FE886276611F1AE61E588DAE4EC9C.roa (hash: 2rumQMHsgGx3ykIi8xEgx4NeyhLSv49ebW1PiSlTkDI=)
5: 32250A2011A711F1A9FD248BDAE4EC9C.roa (hash: y4wM2ILtLtdNcUDwpGv7OoxbdddVN1pR20cZyIkpuQc=)
6: 062ACA4C276711F19A5B6589DAE4EC9C.roa (hash: 5P1G99+XCokiFg1thL2VFdUqsgMy1RdNQcsG4XQ7TBk=)
7: 32899EC0276611F1A1AA7785DAE4EC9C.roa (hash: whA6l07HdxCOCGyCXXIQazy2QuFHnMHeyiidkxJj8+Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1387AF, serialNumber=A7776A1BE55AA98C5705FD779C84DD0106FEC582
Validity
Not Before: Oct 11 04:16:31 2026 GMT
Not After : Oct 13 04:16:31 2026 GMT
Subject: CN=6acb0da0-cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:15:83:44:61:5f:5f:a2:dd:da:5e:2a:7b:
d8:b8:f6:11:2d:c7:e3:e9:58:fb:2f:c5:11:1a:93:
fe:a1:4b:86:0c:37:6d:00:40:8e:97:cc:e7:f6:c2:
0a:ca:2a:32:ce:6c:93:9d:1a:be:2c:eb:63:32:c2:
6b:32:bc:38:60:08:1e:8a:3c:ca:d3:ff:be:97:a1:
2a:ec:2e:94:48:7b:4e:b9:c6:2f:a3:34:53:b3:d9:
a1:b1:95:9d:68:82:79:b7:47:49:bb:64:f1:f8:ee:
a7:3a:89:db:ca:b2:bb:67:1d:b7:1d:f5:ab:23:9c:
05:94:ea:03:86:d5:37:d7:15:7f:42:df:98:1e:8c:
3d:0a:f0:be:9c:42:b3:f6:0f:56:18:73:96:9d:f9:
f6:c5:90:79:31:25:7a:ab:1b:29:1c:07:aa:39:4c:
8c:14:69:5d:80:ae:12:b1:b2:d5:f0:c2:ec:e0:b4:
c9:60:89:21:f4:a1:3a:64:dd:d0:62:de:2f:c3:4d:
2d:9a:3c:c9:07:94:41:6c:13:c0:1f:66:c8:3c:ca:
d5:75:62:3b:a8:9e:18:d5:50:fe:93:82:07:25:6a:
fe:70:d6:07:bf:ca:27:02:2d:ce:96:e5:bd:0a:14:
99:6d:ff:ab:0f:d3:f3:90:01:77:d9:c4:d2:ce:43:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:CF:27:BE:13:EE:8C:FD:A3:5C:87:FF:9E:67:56:15:FD:F8:F8
X509v3 Authority Key Identifier:
keyid:A7:77:6A:1B:E5:5A:A9:8C:57:05:FD:77:9C:84:DD:01:06:FE:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/p3dqG-VaqYxXBf13nITdAQb-xYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1387/9872DBD6364811EFAFF89080762E951A/p3dqG-VaqYxXBf13nITdAQb-xYI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:93:d4:91:12:05:75:a7:a1:29:79:a5:4f:88:04:ad:52:
08:81:c1:43:e3:9f:f6:93:ac:50:69:1d:80:9a:e2:e5:1c:63:
69:db:4a:d7:bb:3c:6e:b0:db:90:f0:5b:ea:78:de:20:c7:a9:
f8:8f:33:93:f1:2d:19:35:ad:5e:3d:0c:60:97:0b:91:c5:4a:
cc:4b:d0:bd:56:8b:7f:96:35:53:31:32:44:e1:54:de:2e:c0:
ab:74:86:c9:e2:5e:76:05:4e:b1:45:fd:4b:6f:d6:53:25:00:
2c:e9:59:ce:66:a3:bc:23:a2:21:76:af:ef:73:f0:29:40:e2:
ad:77:97:a7:4f:4d:66:00:a8:1f:3f:03:59:2b:04:89:4d:30:
76:b9:1a:72:97:c9:9c:93:93:9f:a3:84:cd:eb:90:5f:f9:0f:
7c:77:bb:25:d1:1e:cf:53:26:47:4b:4e:d3:90:6f:c5:60:6a:
f5:68:2b:4a:9f:5e:0f:d7:12:70:71:97:e4:82:3d:26:45:06:
89:db:73:1a:03:83:08:79:63:ea:f5:27:dd:0e:93:b6:d2:07:
e9:01:42:23:7d:ae:2b:2d:9c:ac:e8:1c:75:c6:e8:e3:3e:a3:
ea:01:91:24:b6:d2:ae:3d:22:7a:ce:44:23:d3:61:9c:77:2f:
d0:3f:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:02 2026 by rpki-client