
Error: rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File: EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier: a4spGTbzQOZCaBAI0dfd6ZtteGXM/q3YXO9xozYRVpU=
Subject key identifier: C7:BB:02:28:D9:96:00:09:6A:C6:78:9B:6B:11:94:39:E8:79:A4:A9
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer: /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial: 0381
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number: 037F
Signing time: Thu 05 Nov 2026 04:13:50 +0000
Manifest this update: Thu 05 Nov 2026 04:13:49 +0000
Manifest next update: Sat 07 Nov 2026 04:13:49 +0000
Files and hashes: 1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: MSDNejWYGYiG5fpe5J74z5b4iXopUs9N+2+VGHiTtxg=)
2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Validity
Not Before: Nov 5 04:13:49 2026 GMT
Not After : Nov 7 04:13:49 2026 GMT
Subject: CN=6aec027e-c2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:5d:6c:73:f6:a7:d0:33:8a:ce:18:e7:fc:
e7:4d:7c:89:9d:7d:cb:db:96:99:8b:7f:2d:4a:aa:
9f:a7:3b:fa:76:78:f0:65:29:a5:b8:13:dd:00:d0:
a2:ca:93:42:95:53:dc:d0:d0:86:19:67:2a:dc:ba:
09:19:23:82:1d:3e:69:a4:5f:8c:35:29:c6:db:0d:
c7:b0:cd:b4:25:00:be:5c:9c:3c:0d:1d:59:ec:a2:
bb:3f:ff:c3:79:c3:a9:72:4e:dd:fc:f2:13:1c:63:
63:d5:e3:ab:3d:7a:c0:9f:81:ae:62:a6:93:48:95:
cf:90:c1:dd:99:b4:ff:5b:f1:55:51:76:03:fa:dd:
dc:69:d5:48:52:6c:45:7d:34:39:9a:0b:f6:3d:3e:
5f:93:1a:db:b7:bc:85:03:8d:ab:4b:0b:8d:16:e9:
f5:32:fa:37:74:e4:3b:e4:a0:f6:a8:5a:56:53:7d:
86:64:a9:84:25:62:d0:4f:0f:0d:67:57:8f:4b:40:
b9:57:60:58:27:b7:a1:eb:fe:ef:41:46:be:7a:d1:
ff:26:6b:38:32:6c:1c:c2:e5:47:19:75:a6:7a:8d:
c3:7f:d0:6f:56:cd:50:71:5a:7d:63:db:98:bc:47:
eb:82:0c:1a:64:09:4c:82:a2:f2:a1:1a:d2:68:ad:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:02:28:D9:96:00:09:6A:C6:78:9B:6B:11:94:39:E8:79:A4:A9
X509v3 Authority Key Identifier:
keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f1:95:80:65:89:a0:e2:61:51:7f:5b:56:84:13:38:14:c2:
72:a5:bf:23:0f:0b:88:bf:c5:30:14:b5:03:a1:fe:c2:8c:5e:
88:da:b1:f8:84:91:16:5d:fc:60:c6:16:e1:09:33:05:c2:23:
7f:35:4d:ec:ba:88:8f:a1:0e:10:8b:ec:15:64:de:02:62:ca:
13:c7:5d:eb:39:2d:b1:1c:94:14:4e:d1:e7:91:eb:76:dd:b8:
ed:2a:f6:5b:3d:d9:c4:e5:3f:87:17:a5:49:ee:ec:88:a3:b6:
af:37:32:e2:41:12:03:67:b7:22:8a:ba:05:cd:65:20:10:85:
b7:c6:24:1c:47:30:a2:4e:4f:54:3d:98:03:bc:f6:30:63:b8:
6f:1a:e6:fb:52:34:8b:31:c8:fd:cc:28:60:33:79:f9:c2:4a:
b3:09:b9:e0:e1:d1:a1:28:74:b4:15:98:03:10:39:15:04:28:
2a:7f:2c:61:c1:c4:d2:55:79:65:0f:6f:f5:a8:0d:c8:79:ad:
d8:d6:39:b0:ea:14:2b:3e:88:02:40:fb:4d:79:d3:f5:ce:5c:
0f:80:15:c0:8d:e9:ef:19:e7:54:5e:b2:e0:c2:b4:24:22:94:
22:6e:6b:f2:71:3b:cc:47:d1:db:56:d6:2d:e2:f6:68:eb:0c:
76:cb:93:4d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjJEMDlBRjExMC8GA1UEBRMoMTI4NUU5RjVBRTg5MEQwOUVCNkExRDlDMTUyNjk4
RDgyNTY5NDE3MzAeFw0yNjExMDUwNDEzNDlaFw0yNjExMDcwNDEzNDlaMBgxFjAU
BgNVBAMTDTZhZWMwMjdlLWMyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDraV1sc/an0DOKzhjn/OdNfImdfcvblpmLfy1Kqp+nO/p2ePBlKaW4E90A
0KLKk0KVU9zQ0IYZZyrcugkZI4IdPmmkX4w1KcbbDcewzbQlAL5cnDwNHVnsors/
/8N5w6lyTt388hMcY2PV46s9esCfga5ippNIlc+Qwd2ZtP9b8VVRdgP63dxp1UhS
bEV9NDmaC/Y9Pl+TGtu3vIUDjatLC40W6fUy+jd05DvkoPaoWlZTfYZkqYQlYtBP
Dw1nV49LQLlXYFgnt6Hr/u9BRr560f8mazgybBzC5UcZdaZ6jcN/0G9WzVBxWn1j
25i8R+uCDBpkCUyCovKhGtJorcBLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx7sC
KNmWAAlqxnibaxGUOeh5pKkwHwYDVR0jBBgwFoAUEoXp9a6JDQnrah2cFSaY2CVp
QXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIyRDA5LzA4NDFFRDk4MjdFNTExRUZBNUNGQTQxMzdEREMyNEMyL0VvWHA5
YTZKRFFucmFoMmNGU2FZMkNWcFFYTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VvWHA5YTZKRFFucmFoMmNGU2FZMkNWcFFYTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjJEMDkvMDg0MUVEOTgyN0U1MTFFRkE1Q0ZBNDEzN0RE
QzI0QzIvRW9YcDlhNkpEUW5yYWgyY0ZTYVkyQ1ZwUVhNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDL8ZWAZYmg4mFRf1tWhBM4FMJypb8j
DwuIv8UwFLUDof7CjF6I2rH4hJEWXfxgxhbhCTMFwiN/NU3suoiPoQ4Qi+wVZN4C
YsoTx13rOS2xHJQUTtHnket23bjtKvZbPdnE5T+HF6VJ7uyIo7avNzLiQRIDZ7ci
iroFzWUgEIW3xiQcRzCiTk9UPZgDvPYwY7hvGub7UjSLMcj9zChgM3n5wkqzCbng
4dGhKHS0FZgDEDkVBCgqfyxhwcTSVXllD2/1qA3Iea3Y1jmw6hQrPogCQPtNedP1
zlwPgBXAjenvGedUXrLgwrQkIpQibmvycTvMR9HbVtYt4vZo6wx2y5NN
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:23:21 2026 by rpki-client