
Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
File: 60qJySS6F_Dpu5lYNPUjWoYZtHE.mft (raw, json)
Hash identifier: vLfajTG4PGa0/jmKvudEHzTjjZDVYmC5wiO+UWi+Kdg=
Subject key identifier: 1D:7E:8C:CD:ED:FA:72:6D:9B:F4:DF:4F:1E:9A:12:90:69:7F:88:16
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Certificate issuer: /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial: 01C5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
Manifest number: 01B9
Signing time: Mon 21 Sep 2026 05:02:33 +0000
Manifest this update: Mon 21 Sep 2026 05:02:32 +0000
Manifest next update: Wed 23 Sep 2026 05:02:32 +0000
Files and hashes: 1: 60qJySS6F_Dpu5lYNPUjWoYZtHE.crl (hash: VOwgfvS7PBVynCPTdtP0elOmlQkOMKR9uz9bOJBGv+E=)
2: CDDD6EBC9FA511F18196C91DCF1D38B0.roa (hash: xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=)
3: 20630D049FA611F1995C501ECF1D38B0.roa (hash: JhYhKmI5GODnNurventhICsk25X3A9B8WorGrCRrC2c=)
4: FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (hash: g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=)
5: B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (hash: oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=)
6: 129948809FA811F1A7EF49ACCE1D38B0.roa (hash: N4nEZtBTkM1SOciV0TfCwkWUPzDRHw09DLkdtyiUNio=)
7: 689BCBC49FA611F18785A4A3CE1D38B0.roa (hash: GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=)
8: BAF999E69FA611F1A500E1A3CE1D38B0.roa (hash: aV9FiklXCd8gQFnELSpe+SYak8Dl2un61ShGI8iNFrs=)
9: 443868DC9FA611F19908A5A1CE1D38B0.roa (hash: C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=)
10: B2FE915A9FA711F1806425ACCE1D38B0.roa (hash: sSgssLn1kZB+wHJmWWTYjTwP+BvQpVgLL7TDV51d7qo=)
11: 950608329FA611F184EBCDA3CE1D38B0.roa (hash: NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Validity
Not Before: Sep 21 05:02:32 2026 GMT
Not After : Sep 23 05:02:32 2026 GMT
Subject: CN=6ab0ba69-9dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:bb:81:8c:ed:7f:e8:96:01:c9:77:a5:91:
43:68:13:4f:30:2b:8a:2b:76:f5:4e:4d:2b:ed:14:
f6:7e:47:df:28:7d:f5:cc:c4:88:3c:98:11:f9:74:
59:65:02:f7:a7:0a:38:50:85:82:8a:40:7f:a0:de:
eb:41:a9:70:3f:15:65:36:4b:d5:82:e2:68:f4:62:
37:c0:f3:81:98:00:14:81:bc:c2:7c:b7:f5:d4:10:
99:a7:e0:de:9e:17:7f:01:73:87:b6:ed:b8:8f:34:
50:01:a7:73:6e:fc:bf:8f:34:d5:5e:60:36:75:1f:
92:0f:4e:58:f1:ae:f7:7f:de:1f:86:54:65:1b:aa:
03:ca:22:07:19:70:01:fa:69:20:80:f7:0e:b0:1e:
bc:aa:c6:6e:56:f6:6d:80:e8:a2:5d:79:10:d1:c6:
2e:b5:02:95:7f:7c:61:62:f1:6d:64:8f:02:2e:e1:
b2:b7:cc:b4:c5:c2:e1:31:d0:c8:75:8d:09:82:ad:
68:b4:c2:9f:dd:d9:ff:be:d3:84:c2:ad:80:99:57:
94:7a:54:4a:9d:e6:d6:94:23:bb:dc:68:e8:db:22:
3a:77:42:ac:e9:57:31:54:f8:b0:e1:92:04:f0:bd:
1b:a7:12:b8:f1:6a:22:19:9a:6d:b4:2d:d7:2e:43:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:8C:CD:ED:FA:72:6D:9B:F4:DF:4F:1E:9A:12:90:69:7F:88:16
X509v3 Authority Key Identifier:
keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:79:f4:d8:bf:cb:d4:fe:ee:ae:f8:ce:38:23:be:f8:4b:83:
8e:a9:1c:b7:e5:ce:a0:9a:b7:71:fd:3c:01:92:aa:e3:c7:2f:
04:5f:4e:71:58:7d:fd:80:cb:61:e1:14:3d:d1:0e:98:e6:df:
44:a7:c1:83:06:31:11:c5:c5:79:8b:61:ec:e4:1d:df:1b:36:
e9:cd:79:09:99:cc:3c:f5:8a:30:b4:34:4f:83:4e:61:1c:14:
7f:15:da:79:5d:26:ef:da:0d:f9:c2:d4:b2:c6:95:19:cb:ca:
54:54:97:d6:ac:c1:40:58:0a:47:aa:f3:18:ea:56:fe:6b:6d:
5b:d4:ac:05:5a:73:ee:4b:ce:f0:12:61:ef:46:c9:50:67:be:
5b:d8:fd:19:fb:3e:0c:08:66:85:66:5d:a2:e3:1d:be:ec:a6:
0f:90:45:f6:72:14:4d:cf:31:96:47:d0:d2:d8:fc:c6:02:5c:
7c:06:8e:8c:96:be:b2:9b:d9:35:34:b9:4a:31:81:c6:5c:13:
2c:3b:24:21:97:55:d5:6c:b5:2e:28:61:47:37:44:a8:ac:78:
cb:ab:39:1b:1b:65:8f:7b:13:0e:cc:e8:ff:4b:ca:71:e5:5f:
76:5a:af:9a:61:f3:bd:ab:ea:de:4d:e8:31:8f:b4:74:db:75:
cf:3b:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:41:20 2026 by rpki-client