
Error: rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
File: 3tjUZmQoMBoc4GZckKo0Jgr_74k.mft (raw, json)
Hash identifier: 3CiIk1oDQZ/osh5icnfArQ5UuegjaOvMpBh6l9Epxp0=
Subject key identifier: 9C:B8:76:CB:2E:4E:71:41:3E:A9:5D:FE:BA:FC:26:B8:D0:EC:8A:F2
Authority key identifier: DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
Certificate issuer: /CN=F36A8A05AF/serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Certificate serial: 02F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
Manifest number: 02F3
Signing time: Tue 13 Oct 2026 04:33:18 +0000
Manifest this update: Tue 13 Oct 2026 04:33:18 +0000
Manifest next update: Thu 15 Oct 2026 04:33:18 +0000
Files and hashes: 1: 3tjUZmQoMBoc4GZckKo0Jgr_74k.crl (hash: KysiodqW3d3tp0Z03fgWZFT87b1rO+z2xP37mzzg9Bg=)
2: 9058BEEA816411EF8E2AA088762E951A.roa (hash: RCn22Xwu4T2MS/ROjl1vK38sisW96USMCz48c97gNCE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8A05AF, serialNumber=DED8D4666428301A1CE0665C90AA34260AFFEF89
Validity
Not Before: Oct 13 04:33:18 2026 GMT
Not After : Oct 15 04:33:18 2026 GMT
Subject: CN=6acdb48e-d135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:df:f4:80:77:e4:e3:7d:0e:49:80:a2:86:
f8:fb:37:cb:e0:f4:7e:da:3c:76:19:19:2d:1b:8c:
6f:eb:ce:aa:fb:16:26:35:ae:af:85:42:ee:bd:77:
b5:78:45:c8:e5:c5:73:3d:2b:b1:fd:19:a7:bd:3e:
0c:2a:5d:e1:bf:f6:18:69:aa:53:a2:bc:b7:f3:29:
24:1f:95:aa:30:a6:7c:5a:ea:92:e9:ae:58:b8:d0:
aa:78:a2:d1:39:2b:79:a8:6c:52:c9:01:7a:48:9b:
80:0b:e4:54:b6:33:47:5d:51:0b:ea:21:29:ba:e2:
69:da:2d:f5:16:8a:3b:c8:11:5b:7f:6a:fa:33:05:
5e:35:c2:37:3f:2a:6c:80:96:06:cd:de:b9:02:ab:
3a:ad:f8:45:9b:a7:6b:5b:77:fa:09:c2:3f:af:bf:
2d:da:35:cf:7d:7a:1b:a2:29:b3:9a:ef:78:f2:c5:
5c:91:4c:d8:b6:7b:2d:6d:da:1e:59:d4:4f:03:11:
b1:4c:cf:7e:ed:3e:a4:8b:ed:f7:2d:ee:9b:be:ec:
e7:a0:91:bc:ef:57:56:15:11:ea:48:7a:9d:95:f4:
a9:3a:c6:37:29:5e:ea:c5:17:6b:b8:c1:ef:b7:3a:
c5:ed:59:6b:1b:40:01:ee:07:cf:02:4b:92:27:fb:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:76:CB:2E:4E:71:41:3E:A9:5D:FE:BA:FC:26:B8:D0:EC:8A:F2
X509v3 Authority Key Identifier:
keyid:DE:D8:D4:66:64:28:30:1A:1C:E0:66:5C:90:AA:34:26:0A:FF:EF:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tjUZmQoMBoc4GZckKo0Jgr_74k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8A05/ED868168816111EF972F4779762E951A/3tjUZmQoMBoc4GZckKo0Jgr_74k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:59:ef:ec:5a:52:62:98:25:66:fd:3d:39:74:a9:d8:51:
e2:30:4c:f4:a5:4d:0c:82:1a:29:df:8c:51:cf:0b:1a:2f:f4:
b2:bf:94:61:01:5d:de:2d:85:58:b8:ba:76:af:39:60:fe:ed:
d7:f2:8f:43:b6:c2:35:c2:88:23:99:eb:ce:25:3e:ce:93:bb:
c9:b0:f6:f5:9b:35:f3:f3:3c:af:9e:cc:4d:f7:a4:07:16:36:
4c:a4:e2:63:90:d3:17:77:a7:8d:83:1e:65:09:0e:6d:50:1c:
46:f5:aa:37:7e:20:d4:cb:08:74:07:9b:4f:41:dd:26:2f:d5:
15:ca:f6:77:11:cc:b2:d0:fc:a0:13:de:05:21:44:1f:e1:b4:
27:1c:6c:bb:15:53:d2:c6:01:6b:a8:55:cc:a5:6b:94:91:cb:
ce:35:dd:36:fe:09:a4:75:0d:b3:c9:eb:d5:a3:79:a2:1a:fb:
0a:72:57:d6:bc:d8:05:52:cd:22:98:84:73:af:ad:7c:e7:f0:
fd:63:ef:55:17:e0:30:55:e3:3e:ea:8e:7f:1b:be:24:fd:5e:
67:1b:99:e5:d1:19:b6:6c:72:fc:7c:2f:7a:73:57:35:b2:f8:
29:a7:79:45:07:f8:c8:01:c0:a6:d1:10:8c:c8:8d:39:f1:8c:
bd:06:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:15:26 2026 by rpki-client