
Error: rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File: S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier: HzxNUxt+2RvC1YvgUxlodrqoUsMHvB4bgKRM5t1tXfo=
Subject key identifier: 4B:78:CE:AF:78:24:28:3C:14:2A:FC:EF:06:08:75:6A:6B:9C:6A:C2
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial: 03AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number: 03A3
Signing time: Tue 13 Oct 2026 04:09:56 +0000
Manifest this update: Tue 13 Oct 2026 04:09:55 +0000
Manifest next update: Thu 15 Oct 2026 04:09:55 +0000
Files and hashes: 1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: bTC7RPBkydeFpF4TA/MOLeJqxi7njs5ErwGxaBqwyKw=)
2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
3: 8A38C304166411EFB6DD9865017001B1.roa (hash: BNl8LzAAIi2V4u4Uq6J4OERouFI7xdVKsG2qa+DYXuM=)
4: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)
5: 67A273EE166411EFBD7C3965017001B1.roa (hash: XYlnou7kQfD138NpOpxfEa0ALGHIsAR97sWZnC83Ikk=)
6: 2342ECF6166411EF86A28464017001B1.roa (hash: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=)
7: 10F75FE0166511EF9BA89F6A017001B1.roa (hash: tQ6IcNtYg4Q1dSfQDi4FIUeQKLa90qMyIm8jTAnmXuE=)
8: C37E4A0E166311EFB9A5E45F017001B1.roa (hash: Qp36Juuigfj3IghvTSmzrtpde3+TFB8XRGmUObCG6Jw=)
9: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
10: ED324F4E166311EF80A74E60017001B1.roa (hash: yLMrRx31o9f3857chkGq2HGPGPmxnmeZmw24iYDHkdE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A7021AF, serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Validity
Not Before: Oct 13 04:09:55 2026 GMT
Not After : Oct 15 04:09:55 2026 GMT
Subject: CN=6acdaf13-7171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:42:b1:e7:91:24:97:d0:e1:45:5c:68:28:
ee:a4:8b:5e:d1:3e:cc:a0:15:a2:4a:c4:c4:f5:8d:
54:02:ab:7e:88:6b:f5:8e:0b:29:12:e4:01:21:fc:
9f:00:30:78:06:3a:23:ac:c8:80:b7:1c:cf:a1:be:
1b:6a:b3:8b:c1:32:b8:4c:1a:18:b8:bb:60:36:a4:
f3:00:2c:6f:aa:7a:01:81:32:56:b5:d0:e1:f8:76:
46:54:f3:a3:e0:b7:f3:4d:f2:88:02:0b:f9:41:1a:
7e:ef:c4:85:91:7a:72:ad:d3:05:a3:65:9f:44:6c:
33:0d:2b:92:e3:45:76:df:bc:c4:24:ad:5a:75:e9:
ce:57:b8:20:a4:47:07:ce:3d:de:6f:ea:72:9a:86:
4e:27:b1:54:71:3d:c9:16:46:07:2d:cb:42:3f:91:
88:53:1e:79:c9:d0:2e:1e:d4:1d:cd:4b:61:7f:f0:
22:5c:9a:0d:50:b2:16:0b:47:14:5e:cc:29:b8:86:
03:10:d5:7b:1d:87:f8:da:13:b8:20:0d:d6:87:37:
2c:87:6d:1e:e1:e9:da:2e:e0:ed:46:27:b9:48:5a:
96:21:cf:da:1a:8c:82:99:10:f0:2b:e5:77:40:60:
9c:a2:68:f0:ba:cb:d4:2a:41:2e:99:b8:38:37:dd:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:CE:AF:78:24:28:3C:14:2A:FC:EF:06:08:75:6A:6B:9C:6A:C2
X509v3 Authority Key Identifier:
keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:9c:f4:1e:38:dd:14:06:14:96:f8:74:15:bf:ee:31:71:
03:04:49:ae:9c:5c:48:fd:4a:68:10:f5:80:18:7c:d1:ae:31:
9c:5f:69:c9:ef:63:7c:3e:a9:b0:db:7d:f7:cc:bc:71:43:9c:
33:44:03:d7:59:c9:a2:7a:bc:30:af:71:7f:f2:a8:be:e9:c5:
ba:9b:46:69:b9:31:1c:de:ab:bd:86:ec:ab:d2:62:0c:16:c7:
e9:48:5f:55:d1:4a:11:ce:6b:39:19:b4:e1:25:c4:28:9e:a0:
2c:98:08:64:1f:15:38:fc:bc:6f:44:25:3e:92:50:ad:a8:e0:
77:c9:59:ab:14:26:c2:29:58:25:f7:88:d0:1c:c5:fb:cf:21:
99:4b:26:ad:0a:43:41:57:8f:36:c9:e3:c4:b5:98:3c:73:95:
c8:6b:a0:15:b4:12:fe:ae:79:88:05:63:66:c5:0b:b8:35:de:
25:9f:9b:39:41:a6:a3:0a:f4:ed:27:cd:a7:1e:27:7b:aa:a0:
8d:3a:d8:a5:4e:f3:ea:e3:b4:ae:f1:99:2e:ef:80:ca:5c:2b:
dc:51:c6:0c:d9:94:5b:54:2a:80:e6:91:f5:64:85:4e:6c:1b:
ef:0b:00:f0:4d:60:2d:a0:fc:d9:97:ad:ec:7c:13:09:3d:9a:
f6:a4:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:52:40 2026 by rpki-client