
Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File: wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier: +GmgcEU+dMKrTdj367JQ/vCVF5WZdFROVuNSYJHGoIk=
Subject key identifier: E6:88:81:CE:6C:15:5C:1B:69:63:B1:98:C8:39:07:02:67:C5:1A:C5
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer: /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial: 012F
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number: 012B
Signing time: Tue 22 Sep 2026 05:17:25 +0000
Manifest this update: Tue 22 Sep 2026 05:17:24 +0000
Manifest next update: Thu 24 Sep 2026 05:17:24 +0000
Files and hashes: 1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: doxSxMQFy0z4ILFUih10Hqe8Zg/KBhDgUx7inOlhkzg=)
2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Validity
Not Before: Sep 22 05:17:24 2026 GMT
Not After : Sep 24 05:17:24 2026 GMT
Subject: CN=6ab20f64-9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:f9:0a:81:1c:52:91:74:5d:f7:d7:c3:fe:
6a:5d:a3:42:ce:98:00:90:c5:a6:a0:73:e5:96:7f:
51:63:5f:34:75:3a:4e:92:49:6a:66:c4:d7:61:da:
6e:09:4d:48:44:32:03:5c:98:c1:9d:a7:b8:7c:2d:
17:f5:90:8f:50:c9:95:a6:d3:eb:df:ed:f9:4a:70:
f6:1e:bf:11:4c:29:fd:e7:2a:a0:bf:eb:d2:ef:4f:
15:ce:a1:c5:db:ae:ee:e9:1b:2b:1c:3f:7c:92:eb:
3e:4c:0d:8f:52:9a:8b:7c:ea:fa:c3:4d:48:c0:12:
48:9a:fc:f3:41:4f:5c:e3:09:86:31:5a:c9:41:c9:
d9:0e:27:26:ac:18:dd:cd:7a:42:42:86:b5:d6:1e:
19:21:20:3e:c3:16:c7:3a:7d:fe:44:27:6e:f3:4c:
47:9c:45:78:9e:90:98:ab:72:6c:be:8c:86:85:6c:
95:49:19:22:b9:61:e6:a0:2e:2f:a4:dc:eb:e4:73:
4a:74:8d:47:a5:29:2c:2e:2b:95:3d:02:b1:6c:75:
e3:f8:b5:3c:f0:ec:59:31:72:8e:59:76:8a:fa:38:
d5:26:22:bb:d4:a6:db:03:3c:98:ab:8a:cb:60:35:
f1:83:02:f3:bb:19:ac:ba:58:7e:1d:47:52:5e:8b:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:81:CE:6C:15:5C:1B:69:63:B1:98:C8:39:07:02:67:C5:1A:C5
X509v3 Authority Key Identifier:
keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:c8:59:bb:d7:38:9e:07:e5:eb:87:f4:c6:16:99:84:ee:
de:43:f2:3e:24:77:89:cf:43:e5:d9:ae:ef:89:29:4e:4d:6e:
60:34:8e:68:e9:66:a1:35:c3:55:25:f9:6d:9f:2e:b1:f3:3e:
6c:37:5a:b9:c9:2b:43:e4:ff:31:f4:bb:d9:84:ae:72:c0:f6:
f4:e5:d4:96:5d:a3:e0:fe:09:8f:17:70:f9:ab:d8:13:f5:89:
30:5e:e3:5a:7a:7f:19:75:f1:ac:e6:2a:69:a2:23:50:37:3c:
1b:79:35:50:27:a1:0a:9c:0d:58:de:8e:1d:da:a9:76:ef:a5:
d7:6d:9c:da:b8:39:47:08:05:63:fc:ad:22:f3:6a:75:6a:f8:
39:34:e5:74:84:bb:e3:6b:99:a8:39:29:f3:c1:7b:ca:4f:f1:
fd:c8:b7:bf:90:0c:f3:85:e4:3f:ed:69:d7:a6:fe:4d:40:03:
e8:cb:ba:5b:71:91:38:35:6e:03:ad:50:5c:27:67:a2:a7:79:
91:b4:62:64:18:f0:b7:95:dc:ac:12:a6:39:19:71:3d:de:cf:
aa:a1:e0:69:27:07:4a:76:a5:7c:c2:4d:48:f9:38:37:02:5b:
6c:d8:15:4e:9b:0f:df:d5:9b:28:9b:84:1a:57:01:1c:73:48:
63:bb:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:28 2026 by rpki-client