
Error: rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier: IhQD+eJ8hPwkTTYPbPg7ZYrMsjF2aXLb1kZ2HRGR4mM=
Subject key identifier: 3A:3E:C4:FE:98:C3:21:93:00:67:E0:E3:CB:88:F6:C9:0D:DB:54:77
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer: /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial: 0ACD
Authority info access: rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number: 0ACC
Signing time: Sun 25 Oct 2026 01:27:01 +0000
Manifest this update: Sun 25 Oct 2026 01:27:01 +0000
Manifest next update: Tue 27 Oct 2026 01:27:00 +0000
Files and hashes: 1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: /i0q4V9iYZzlucFoOsYiXh8bCwd6xK4SIbWZQBYP53U=)
2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 01:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2765 (0xacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA888AR, serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Validity
Not Before: Oct 25 01:27:01 2026 GMT
Not After : Oct 27 01:27:00 2026 GMT
Subject: CN=6add5ae5-6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:06:02:19:ed:4a:ef:88:2d:fa:f9:1a:eb:
0f:76:8c:f8:cf:9b:77:05:0f:91:53:49:18:c2:6a:
7e:8c:94:ba:6e:f5:5d:c8:83:1c:f4:77:fd:f4:74:
55:61:6a:2a:cf:de:e2:2c:9b:d6:c4:d7:60:d6:83:
2c:c0:f5:63:39:27:a0:d5:b6:09:c1:e1:f8:ab:5a:
e4:d6:e0:79:00:6d:48:3e:2f:5c:98:8c:fc:d1:bb:
a2:d1:9e:7d:57:cc:45:54:57:b3:c5:8a:82:2e:9f:
46:0b:94:76:50:74:b3:ec:f8:c0:7d:e2:d4:91:15:
60:ba:45:1b:33:50:18:7c:2f:d3:e1:54:38:fa:0a:
80:21:7c:ba:32:31:e5:38:d6:df:1d:5f:78:49:60:
19:2c:e2:5c:bd:d4:4a:db:f7:11:ee:37:41:f0:7f:
61:98:76:2f:64:c3:da:ef:95:8c:fe:86:4d:ec:8a:
1b:3b:23:85:33:fc:dc:4c:fe:b6:25:d5:52:6c:69:
85:4d:72:51:d0:fc:31:75:9b:ba:f4:96:bc:93:ab:
87:f7:e8:90:1c:9c:52:70:57:a8:d1:51:29:e4:f2:
34:54:98:44:05:e6:01:af:fc:e5:a1:e0:fb:17:01:
e6:ae:17:78:6c:62:67:a5:98:15:cb:ba:e4:d0:2b:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:C4:FE:98:C3:21:93:00:67:E0:E3:CB:88:F6:C9:0D:DB:54:77
X509v3 Authority Key Identifier:
keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a6:78:46:4b:a2:63:59:a0:8b:a3:2c:b2:b2:18:9b:85:b5:
2a:ff:65:34:2d:7e:23:34:e6:c6:35:2c:16:7b:e6:42:6f:78:
89:5a:71:d1:74:bf:0e:8e:2b:71:f6:3e:61:b2:e1:01:51:4a:
2d:b0:c3:a7:d1:0e:b6:07:b2:c7:d2:3c:5b:ee:e5:34:aa:7e:
b9:34:45:ee:11:f4:d4:14:76:73:00:5e:13:12:a4:64:19:1b:
84:9b:8b:9f:d1:0b:a3:32:27:3c:3d:cb:41:41:c2:a6:8f:38:
9a:42:b1:66:72:ab:0d:60:4e:26:09:0a:ac:f0:58:cf:5d:20:
e9:7a:0c:1c:92:7e:e8:1f:90:48:da:1d:6b:03:f1:c5:98:d2:
39:4a:d4:8b:9a:15:a1:86:d7:53:1d:c2:61:16:32:ab:52:0a:
81:47:2c:4b:a2:43:f3:4e:02:64:62:97:48:8d:ef:ee:1f:71:
d7:78:3c:d9:6c:2b:b6:78:e5:31:aa:84:fe:d8:d2:8e:6d:17:
71:78:ec:c6:90:9c:88:30:39:2a:d9:73:ab:66:87:c0:ae:42:
7a:04:be:15:b5:29:66:5b:14:42:df:53:cf:e1:4b:d9:b4:0e:
28:2d:d4:0e:97:a5:59:4c:6f:50:01:53:3d:f5:6b:9d:b2:ff:
3c:85:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:42:31 2026 by rpki-client