
Error: rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
File: e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft (raw, json)
Hash identifier: qaTgRdzvyb9agS3T7IB18TclMRhRaeKgE6x/A/oMVlE=
Subject key identifier: BE:87:17:22:F3:EE:62:5E:01:B4:21:B8:CA:42:26:93:A6:BB:EC:0A
Authority key identifier: 7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
Certificate issuer: /CN=F36B9F4BAR/serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Certificate serial: 0ABE
Authority info access: rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
Manifest number: 0AB7
Signing time: Mon 28 Sep 2026 01:28:58 +0000
Manifest this update: Mon 28 Sep 2026 01:28:57 +0000
Manifest next update: Wed 30 Sep 2026 01:28:57 +0000
Files and hashes: 1: e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl (hash: GDksVMjOG6DiDiCANw4pAMahOyn13oFIKfZbXTk//7Y=)
2: CC58F7C422BD11F183461ADFDAE4EC9C.roa (hash: DWZrC4+ZCy9WarSzpXK13RhrAoH94T/igwaBF75lQlY=)
3: 033994E822B811F183FAB1BDDAE4EC9C.roa (hash: NWQU47xDGEMdfBshOG2MbAYNTV/ExbjFLB7MJsI28xY=)
4: 3FA44D0622B811F1A097CFBFDAE4EC9C.roa (hash: bm9LUHD8iWz8/51Tk3NQcoYIf2jRL8L+SWl78X4zXkI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAR, serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Validity
Not Before: Sep 28 01:28:57 2026 GMT
Not After : Sep 30 01:28:57 2026 GMT
Subject: CN=6ab9c2da-16a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:9a:be:51:75:64:b1:a2:d7:8f:84:70:03:
05:ed:56:02:31:5f:c3:4e:53:c1:22:f7:4a:9f:e5:
4a:15:26:02:35:13:4d:37:d2:cb:de:b2:50:27:cb:
96:5d:63:f3:a0:29:5e:71:6f:bf:66:51:f2:52:bd:
89:65:d3:7d:c2:b1:7b:47:62:f5:f7:6c:c0:bd:b6:
b8:02:3c:94:f5:f4:44:9c:f5:86:4b:bf:fc:c2:0e:
fb:6b:e2:3a:17:19:56:2e:19:62:ac:19:74:b4:ac:
87:4a:9a:d9:41:f3:47:56:8e:69:b3:71:23:4a:8f:
88:ac:ad:1e:c2:92:66:92:16:03:be:bb:25:5c:f2:
fb:5d:c9:f3:5e:be:9d:a0:89:7e:de:6c:f7:79:3c:
55:fb:fa:11:68:dd:f1:a4:a5:0e:7c:bb:73:8b:94:
a1:99:0b:3e:fc:88:14:65:0a:95:82:b5:7b:f7:89:
c5:ab:09:9c:1f:90:7f:22:92:bc:79:66:e9:03:e4:
8f:38:ca:cb:b0:b7:6d:e5:04:42:17:16:2c:8e:b0:
0c:8e:4f:8f:5e:27:15:a1:1b:1a:1b:6e:5f:de:e5:
fa:02:02:76:7d:aa:b2:dc:c4:eb:60:79:aa:09:66:
60:96:5c:ec:d2:e1:2f:ab:f8:da:46:f9:6e:d2:5c:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:17:22:F3:EE:62:5E:01:B4:21:B8:CA:42:26:93:A6:BB:EC:0A
X509v3 Authority Key Identifier:
keyid:7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ca:a2:54:91:7f:ed:4a:34:4d:5d:b4:47:11:c3:8a:ee:e2:
4c:f0:22:cf:db:b9:bd:b6:43:0a:7c:a8:8e:ea:cf:f7:de:6b:
3b:c9:0d:4d:1e:7c:08:fa:1d:3f:6f:57:df:6a:56:db:77:d4:
cd:7d:a9:ab:8d:e3:90:6a:35:48:24:1c:72:68:ae:72:ec:e5:
fc:68:35:51:3d:fe:db:f9:e4:f5:af:4a:d3:ce:3a:01:4e:12:
a5:1f:46:61:73:5f:4f:5a:5a:41:b3:1d:dd:32:07:76:5c:3c:
e5:17:a5:e5:58:12:ab:22:97:7f:c4:2b:e1:eb:28:ea:32:ab:
79:c7:fa:c2:cb:33:68:9b:1a:76:28:95:54:dc:e3:cb:75:f1:
16:41:65:5c:d2:60:49:f2:ae:67:94:3c:d3:04:5a:25:7e:ae:
48:c7:fa:13:e2:85:1f:54:58:52:81:71:c8:72:ec:5f:4f:3b:
9a:10:be:79:64:07:0a:fa:25:0b:18:ef:8d:69:7a:c2:1e:ec:
19:c3:2c:f4:f8:c4:55:f1:7a:32:57:8d:fe:1d:2c:55:78:83:
5c:49:ee:f1:4b:98:55:a0:d2:d5:5c:e7:11:f1:c3:ed:a5:0e:
9a:aa:64:20:1d:64:20:5f:a7:1d:6b:86:d9:fd:b7:f8:d5:b4:
e3:0c:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:49:11 2026 by rpki-client