
Error: rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
File: mN_xVrpdOxH6ps0Beov2VCUd68c.mft (raw, json)
Hash identifier: QLIgzpyRTnt7P9TPPwsgK2wQj1L5dH949YziqrHU1GQ=
Subject key identifier: 78:D0:68:6F:44:01:11:7D:75:0E:FA:34:57:43:B6:92:89:82:B7:5D
Authority key identifier: 98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
Certificate issuer: /CN=F36A1982AF/serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Certificate serial: 01E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
Manifest number: 01DF
Signing time: Mon 21 Sep 2026 04:54:55 +0000
Manifest this update: Mon 21 Sep 2026 04:54:55 +0000
Manifest next update: Wed 23 Sep 2026 04:54:55 +0000
Files and hashes: 1: mN_xVrpdOxH6ps0Beov2VCUd68c.crl (hash: nZMgEm62f/Avt10vTzZspYdC3tEipGzKusfqlcjwcEw=)
2: D2FA44589C6011F1B8DD4813CF1D38B0.roa (hash: hXG29WZ9gIw6Ovjrleo65ug3xqHYZi4HJYO7R16FihU=)
3: 7832FB8A45D311F0AC0634DDDAE4EC9C.roa (hash: cfPkV/3/J2Pr+p9FB17NDz/hy3nd+JaytMl2veZxtBo=)
4: D87AD8E69C7111F19CDB70F7CE1D38B0.roa (hash: WoxmRBNYxtlklGhzUk4A1A/VNqHlUjBfPcsPhHsejnY=)
5: 553164D49C9711F1815829D7CE1D38B0.roa (hash: wVWSeXVlQ34ZCg2wQQL7tOgF8T/M9yaqQVdvI4IZzIU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1982AF, serialNumber=98DFF156BA5D3B11FAA6CD017A8BF654251DEBC7
Validity
Not Before: Sep 21 04:54:55 2026 GMT
Not After : Sep 23 04:54:55 2026 GMT
Subject: CN=6ab0b89f-b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:28:cb:41:3f:d9:e2:12:dc:6f:04:a0:14:
5b:bb:80:37:d0:4a:6b:31:c3:2c:e3:c2:bb:79:2c:
8d:4b:15:af:2e:79:61:5d:fc:b4:27:b5:bf:d7:7d:
1e:d4:9f:75:20:14:b8:c1:84:e3:6c:3c:5d:8f:15:
e0:89:cd:71:74:36:fe:01:85:b5:dd:49:d4:a8:63:
5d:b5:30:c6:af:50:5d:eb:65:f3:97:63:94:b5:fb:
18:f0:df:da:9a:fb:84:92:9a:d9:7c:c0:06:1f:e9:
84:15:55:e8:b2:e0:23:86:4f:92:4d:3a:e6:46:1b:
01:dd:90:30:15:1c:48:62:8b:8f:41:13:11:67:0a:
d9:ca:a0:47:4c:b4:a9:e3:21:e3:6f:09:74:db:c2:
17:24:ec:b8:84:b9:01:2d:8e:24:15:f7:d6:fa:7b:
4f:26:52:da:88:83:db:aa:8f:c3:79:13:fa:66:aa:
fe:11:70:4a:94:8d:39:36:c4:95:36:97:5d:ab:c5:
a5:4a:7e:ba:35:dd:e7:26:f0:44:97:7b:01:12:4d:
5e:dc:7f:d4:9e:7e:c4:94:81:1e:d1:90:b8:70:5e:
c4:11:90:4b:88:e5:db:e5:67:fa:08:6b:c0:6b:a2:
b2:53:5d:7a:af:cd:35:d5:46:55:25:0f:fc:7b:d7:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:68:6F:44:01:11:7D:75:0E:FA:34:57:43:B6:92:89:82:B7:5D
X509v3 Authority Key Identifier:
keyid:98:DF:F1:56:BA:5D:3B:11:FA:A6:CD:01:7A:8B:F6:54:25:1D:EB:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mN_xVrpdOxH6ps0Beov2VCUd68c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1982/2F0CD68E45D211F0B09667D4DAE4EC9C/mN_xVrpdOxH6ps0Beov2VCUd68c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:aa:6e:b8:5a:33:81:4e:d7:73:12:22:7e:ed:ef:a3:33:78:
a3:5d:22:ff:08:7a:cf:de:10:3a:51:ee:5f:e9:3b:3e:c9:b5:
9f:38:36:58:74:fa:33:de:42:bc:9c:00:e4:12:35:3a:51:74:
ce:0c:31:8e:d6:96:75:2b:a8:7c:8c:2b:a6:35:e8:2a:75:52:
73:89:8c:c9:15:8e:44:ee:be:a3:d7:45:6c:8e:86:e6:c2:b3:
dd:2c:2d:77:4e:6d:b4:59:bd:60:8a:88:fc:02:63:ac:7c:e7:
8d:ad:5f:1d:49:da:6e:28:e3:a0:c6:87:43:4b:96:2d:84:ae:
e8:c2:5c:71:51:08:5d:8c:b1:1c:58:02:e0:39:a1:89:41:14:
a7:1f:ef:66:16:63:f8:56:93:66:4a:eb:7f:1b:6d:f4:29:5c:
df:00:2d:75:9e:5f:89:ea:3e:cc:5f:65:9b:4a:2f:60:43:92:
d8:6c:2e:f4:5e:30:33:fd:99:f1:16:71:6c:80:84:22:3c:29:
54:19:88:30:6d:f1:10:e4:21:8e:13:0f:6a:ce:f4:d0:92:26:
1f:fe:ba:0e:6f:02:25:d3:3e:fe:8e:b2:d4:66:de:cd:10:1b:
de:71:70:2a:8a:41:4f:e3:99:d2:cd:08:f8:e0:93:3c:3f:a0:
6a:a1:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:42:08 2026 by rpki-client