
Error: rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
File: U1CfTDp0tZI7cnx9NJqBzzFftis.mft (raw, json)
Hash identifier: q6ARR3PwHe26iO96urwXsfS+qrYw0fii+fZut9VRQ1w=
Subject key identifier: 12:8D:4F:E0:AA:1C:2B:8D:73:EA:BD:5E:F7:5B:E2:1A:71:7F:A8:76
Authority key identifier: 53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
Certificate issuer: /CN=F36B7F24AF/serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Certificate serial: 31
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
Manifest number: 2F
Signing time: Mon 21 Sep 2026 05:48:56 +0000
Manifest this update: Mon 21 Sep 2026 05:48:56 +0000
Manifest next update: Wed 23 Sep 2026 05:48:56 +0000
Files and hashes: 1: U1CfTDp0tZI7cnx9NJqBzzFftis.crl (hash: T0ah1ati4/vdd93Cj3RZ3QrOQQ2qPwEdbKshiutoqTI=)
2: 12A1149A940C11F18B624505CF1D38B0.roa (hash: 8mLLCndnzMbQ2nyrvyzBRBW70YFateeTW3IJydAjH4k=)
3: FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa (hash: H9dfCQysmouTEaUEeYveL3U37VaeWoFn81c3+Rr0znk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7F24AF, serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Validity
Not Before: Sep 21 05:48:56 2026 GMT
Not After : Sep 23 05:48:56 2026 GMT
Subject: CN=6ab0c548-0cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:f4:ab:71:df:e2:e5:bf:0f:35:d6:d9:27:
67:8d:fd:12:72:b0:cd:a5:40:07:00:9d:a1:59:d2:
f9:cb:9c:5f:68:15:68:76:e8:01:cf:9e:fd:bd:0a:
7a:e1:86:41:ce:d1:02:b3:7e:47:8b:01:60:81:c0:
de:17:b3:89:df:78:e4:30:16:b2:50:6d:8a:b1:e5:
4d:b5:59:7c:bb:d0:06:db:d9:d2:de:fd:32:04:8a:
90:34:13:db:9c:23:62:0b:e8:87:0b:68:95:07:3d:
11:61:17:ed:9b:c8:38:11:d5:ac:a6:e0:2a:c6:b1:
c5:7a:de:a8:cb:30:13:a0:57:3a:0f:88:7b:63:aa:
32:bc:86:e3:ca:98:1d:dd:1d:78:f5:38:a0:c9:6e:
f5:40:0d:b8:62:1d:e2:16:64:e7:0d:bd:e2:cb:e4:
aa:bc:28:97:ec:fc:45:06:35:c7:de:ea:e4:a2:85:
29:6a:39:36:1b:eb:c5:8c:35:c0:ad:38:22:b3:bd:
88:54:41:af:76:80:01:12:82:6c:08:c5:bc:c8:0d:
f0:65:6e:5d:08:6d:fb:78:1d:95:f1:7a:81:77:15:
1d:4f:4f:92:df:e6:28:8c:5b:a0:1b:99:cc:42:11:
05:b2:f6:6a:dc:af:e3:ea:d3:71:d0:fb:81:dc:d7:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:4F:E0:AA:1C:2B:8D:73:EA:BD:5E:F7:5B:E2:1A:71:7F:A8:76
X509v3 Authority Key Identifier:
keyid:53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:09:7b:ef:6c:bc:8a:f7:e7:68:bf:07:ef:b0:d1:c0:66:
6b:c5:55:d0:44:cc:10:22:1f:00:fb:2e:f1:1e:6a:b2:56:4e:
04:76:59:22:16:33:24:4d:fb:28:07:f3:ed:76:c6:dc:dd:29:
ef:90:86:b8:ff:67:21:46:09:be:35:80:c7:94:a0:17:be:9a:
44:de:eb:6f:bd:2a:b2:87:f4:e6:54:6e:04:d6:b2:c5:87:45:
3a:21:f6:89:de:3f:ca:e4:45:c2:c1:61:f1:ab:26:c9:cc:b6:
07:bb:5b:97:28:e8:8d:1e:7d:de:e3:c0:07:30:f7:c9:bf:80:
25:24:0e:60:dc:fa:5e:f8:5a:52:40:de:3e:8f:84:ac:a5:87:
fe:b0:51:a6:26:e8:11:c0:b6:32:9e:84:13:14:4d:09:f7:ba:
89:19:b4:1a:b5:13:22:c5:97:f9:51:9a:77:54:b1:b8:99:10:
57:b3:c6:a2:68:4c:d8:8f:ee:2e:03:9d:fb:81:1a:9c:a0:ca:
59:dd:d1:61:e7:7e:49:c8:b6:d1:93:5b:e4:34:09:b0:11:91:
e4:cd:e0:a0:e6:8f:8f:2d:db:0e:90:20:0d:57:a8:fe:e9:af:
4e:7e:a4:07:83:fb:e3:68:0b:0e:a1:6b:7b:ef:95:df:02:5f:
ff:35:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:05:08 2026 by rpki-client