
Error: rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
File: CnSFMuiB1snnnc8k0rhVt0IXuyc.mft (raw, json)
Hash identifier: vj7XANA3a/7wTJSY+apUX2koEJaSJcMdApFNR/2/RAw=
Subject key identifier: 90:77:74:AF:00:AB:04:9C:9E:C4:40:69:31:C9:35:4C:F4:BA:40:F0
Authority key identifier: 0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
Certificate issuer: /CN=F36B1D7CAF/serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Certificate serial: 042C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
Manifest number: 0427
Signing time: Mon 21 Sep 2026 03:50:19 +0000
Manifest this update: Mon 21 Sep 2026 03:50:18 +0000
Manifest next update: Wed 23 Sep 2026 03:50:18 +0000
Files and hashes: 1: CnSFMuiB1snnnc8k0rhVt0IXuyc.crl (hash: Lq2bIzM0xqGSdQebx+fIz+mOD1FnNSL8rnogqg2YjF0=)
2: 5169F5068C5D11EF8488F1B7762E951A.roa (hash: 3cIbtybco00gGUwMeF9svwUlqXkaL0afpvgvXFx0O/M=)
3: 9F32090A8B0811EFA689494F762E951A.roa (hash: 2AUAWCRuNhcHau5YalAF9O8N9cvhdsr8Y0YpuRghjHc=)
4: 1E081892E3AA11EF9553B073762E951A.roa (hash: LVZKWANNLcHHqjb6lqsGWMwIplye542XoApTsgYJWMU=)
5: DC0C04BE8B0A11EFB54E4F5D762E951A.roa (hash: 0gnOKw2+mTkWxgOLvtsIMggu6Ze48xgwwDEchAXSPdk=)
6: 901028E68B9211EF827732B9762E951A.roa (hash: gPIJu2/cPDtYI3hibOl12MUGNT8pAYS8BpbaLA7BUYY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 03:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1D7CAF, serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Validity
Not Before: Sep 21 03:50:18 2026 GMT
Not After : Sep 23 03:50:18 2026 GMT
Subject: CN=6ab0a97b-8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:2b:62:07:91:c5:10:a0:77:a7:fd:59:ab:
ad:01:0f:15:e4:84:40:41:e4:0b:57:89:88:23:44:
5e:fc:10:f9:95:a4:65:d3:43:73:db:1a:92:79:8d:
b6:26:9f:a0:cc:d1:37:6f:27:75:ef:6f:7d:e3:84:
ae:b3:f5:f1:0a:6d:15:be:d9:14:c8:93:a7:0e:4f:
86:c7:36:0f:6d:c5:24:2b:af:8f:24:e9:35:0d:22:
34:7d:8c:28:5b:b1:07:7b:a0:7a:19:22:44:dd:7d:
93:57:c7:47:b1:13:b3:da:68:f0:22:b6:1b:4d:84:
0b:3f:2c:8b:07:12:6e:b8:9e:3b:55:42:7e:21:cb:
1c:6f:89:d1:89:64:90:6e:89:9f:58:0b:7a:cb:70:
42:59:17:4d:05:ed:75:73:0b:39:93:90:7a:ef:8a:
a6:bb:90:5f:99:d4:a9:66:3a:20:5a:6e:c3:74:43:
ed:18:a8:cb:78:64:36:25:ec:e4:60:a3:e7:93:5e:
9c:9d:2b:df:55:0b:8f:14:3d:42:29:42:bb:61:9a:
45:70:b0:08:93:c6:3a:86:fe:d4:12:74:1b:a8:d9:
39:e9:d9:bb:60:a6:6e:7b:15:9b:24:b0:d0:85:ba:
4c:31:cf:b4:2a:1c:fa:07:e9:ba:6a:09:a2:c7:47:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:77:74:AF:00:AB:04:9C:9E:C4:40:69:31:C9:35:4C:F4:BA:40:F0
X509v3 Authority Key Identifier:
keyid:0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:3e:be:ff:6a:58:2d:89:ee:86:63:06:43:73:02:42:9b:
5f:11:1c:e4:8d:f5:2e:b0:5c:ac:04:60:29:89:68:e4:cb:e4:
1a:94:0f:6b:c3:07:59:d7:27:42:ee:9b:86:4a:b6:dc:65:4f:
8b:24:f4:c8:54:57:0e:0b:64:17:57:ed:9f:6b:ba:ce:07:e9:
09:a2:04:9f:4b:aa:c9:38:d0:9e:64:23:2f:02:ce:c1:23:3f:
0b:9d:95:98:bf:78:4d:c4:ae:78:cf:df:db:ca:e3:f0:b6:ba:
94:24:de:0e:52:27:96:87:70:25:ee:9a:b3:f8:e2:2d:51:f3:
6c:a5:c8:cb:01:81:88:0c:a7:32:f6:f2:f9:29:92:f7:42:02:
e7:7d:b6:8a:7b:24:99:cb:e6:f4:71:97:60:06:a6:1d:25:d8:
3b:8d:29:2a:ff:5b:22:dd:f4:de:3a:f0:2c:1a:d1:87:33:9a:
41:a0:d2:59:a2:4c:41:4f:7a:ff:2e:b9:f2:e7:74:ad:d3:05:
46:66:c4:2f:89:ac:65:8f:d4:71:ed:22:b3:27:47:69:7f:4d:
fb:1c:e8:32:04:42:42:61:9d:ff:06:2c:42:3e:47:fa:63:80:
40:09:bc:f3:26:34:e3:b1:8b:a8:7e:6e:31:62:f1:f7:64:af:
bc:ec:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:44:13 2026 by rpki-client