
Error: rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
File: RfLi_fMRPvxjNXV8r49bXsSszbM.mft (raw, json)
Hash identifier: AVyHa93iOIaqW19c6iyuwGmM+z/Ys/itJCdB9D1NkR8=
Subject key identifier: DB:DC:FB:D8:44:D8:94:96:E3:28:4D:5F:5B:70:8D:CB:81:37:AE:94
Authority key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
Certificate issuer: /CN=F36A6D8BAF/serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Certificate serial: 0159
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
Manifest number: 0154
Signing time: Sun 20 Sep 2026 05:11:59 +0000
Manifest this update: Sun 20 Sep 2026 05:11:58 +0000
Manifest next update: Tue 22 Sep 2026 05:11:58 +0000
Files and hashes: 1: RfLi_fMRPvxjNXV8r49bXsSszbM.crl (hash: fc9CZcLenR9ghT+XcR9VyxEpRGmB//afbQ+Gp294XGU=)
2: 380C0580278511F1B43266B7DAE4EC9C.roa (hash: bfdf+j4kevo+Pizg6P6e/82+1I3zu33b51tah9+KFWc=)
3: B23FF6B4278411F1A38689B3DAE4EC9C.roa (hash: LO47Ya7O99gQwMPITew91xxQM1GvNNiTnvhJCLpvLr0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Validity
Not Before: Sep 20 05:11:58 2026 GMT
Not After : Sep 22 05:11:58 2026 GMT
Subject: CN=6aaf6b1f-3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:f3:d5:44:fe:77:11:95:aa:f8:6c:98:32:
44:3e:d3:8f:a9:84:e2:8e:dd:8f:cb:e8:d3:43:7f:
5d:33:cf:7f:63:e1:8a:87:b2:3e:9c:b9:f4:97:4e:
13:2b:e4:42:3b:b4:97:33:41:7b:a1:94:ac:b6:53:
a9:04:eb:e3:f9:fb:b8:18:81:98:05:f7:d1:de:f1:
6e:25:7e:65:64:0c:76:10:01:25:10:d4:12:b4:a6:
8a:f9:55:15:0a:16:08:ad:e3:f5:ce:d5:7b:ac:21:
9b:66:9d:90:e3:66:9c:57:33:f5:a8:47:32:cb:4e:
6e:87:a5:2c:f7:95:93:49:95:49:bb:62:5f:e9:bc:
5a:ed:2b:3a:db:73:06:34:22:7f:ce:3c:50:e5:43:
1c:2b:3e:6c:42:08:9a:31:1c:4e:26:22:31:b6:46:
ae:63:f1:97:8c:16:96:10:c5:6e:18:5c:be:7d:8b:
15:40:fc:a8:4a:29:3c:53:3c:14:5f:4d:c3:6d:61:
1c:77:19:07:b3:c3:89:f7:57:6b:d4:fe:21:0c:d1:
cd:21:9e:3a:37:5f:ff:2a:11:89:ea:26:c3:f8:2b:
b3:35:95:b3:c7:6a:b1:45:1e:ff:66:7e:dc:38:ba:
c3:da:34:31:22:58:0e:7e:56:0d:a3:5b:a9:9f:3b:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:FB:D8:44:D8:94:96:E3:28:4D:5F:5B:70:8D:CB:81:37:AE:94
X509v3 Authority Key Identifier:
keyid:45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:f0:f5:4c:5a:48:0f:0d:6d:61:57:34:ec:e8:fc:b4:af:
6f:db:d5:13:6a:de:7e:6f:70:c5:ae:c9:46:21:f9:66:f4:55:
e7:3f:96:aa:ce:08:42:5c:33:20:0d:d3:93:1a:0d:da:71:ad:
91:46:68:61:c4:64:26:89:4e:74:82:ee:db:6f:de:48:2f:36:
0c:ca:1c:28:e4:53:48:f0:21:e2:9f:81:2a:35:93:c5:90:80:
69:6a:6e:ca:b1:1f:88:ae:f4:dd:6f:db:13:fa:90:b9:1b:9d:
38:bf:d1:b7:a1:64:5d:27:f2:5e:34:96:a0:46:ab:d9:f0:bc:
97:33:87:58:59:8b:43:d7:28:83:61:5a:2d:44:d2:58:a0:15:
7a:b5:f7:3c:88:57:ae:c8:56:dc:04:5f:92:e1:11:2d:9c:ba:
fd:cb:9c:a3:ce:74:58:89:cd:75:5c:89:c3:0c:c4:4c:da:e8:
08:93:e1:50:32:85:9f:e3:95:09:3f:92:bb:cd:b9:c9:61:45:
54:b7:45:db:31:ac:ff:26:02:4e:e8:c1:13:cd:c2:07:62:1f:
b3:92:8e:2f:c7:53:f6:ef:5f:aa:71:a8:a2:fa:b6:42:07:3e:
42:55:4f:ca:4b:15:62:d8:16:a2:70:e9:ee:57:c9:b9:44:3a:
59:6a:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:34 2026 by rpki-client