
Error: rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
File: MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft (raw, json)
Hash identifier: chHre26GdM48EVkhYPMS3klAgWC+w8beRCv3iMX0vc4=
Subject key identifier: 11:AA:C5:EC:5D:81:B6:53:89:04:AF:A5:BA:B1:D5:1A:76:80:5F:BF
Authority key identifier: 31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
Certificate issuer: /CN=F36BC6CCAF/serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Certificate serial: 026E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
Manifest number: 026A
Signing time: Tue 22 Sep 2026 04:46:04 +0000
Manifest this update: Tue 22 Sep 2026 04:46:03 +0000
Manifest next update: Thu 24 Sep 2026 04:46:03 +0000
Files and hashes: 1: MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl (hash: +C2ykbYWjFe1yG5/cRxXhrQuhD8UEr4Qxi4u1GY8UHM=)
2: DF18A1E640CF11F09299DFB6DAE4EC9C.roa (hash: ztjI0ZwpfaRw5ubRwQgZNSs1wBiMAXUEL6HQoRKIjlI=)
3: 981965A640C911F0AA7BC28FDAE4EC9C.roa (hash: /+6/RjZuNbqQtneE80fqEs+UIumXvOJpiE0MpFoYgdc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BC6CCAF, serialNumber=31F79501F700C6A67662DE27B615EEC830B1B876
Validity
Not Before: Sep 22 04:46:03 2026 GMT
Not After : Sep 24 04:46:03 2026 GMT
Subject: CN=6ab2080c-3733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:10:c7:23:cd:95:0f:6c:ba:9a:aa:8a:e4:
a6:99:46:e8:7d:8b:8b:80:85:52:b5:dd:e9:96:03:
9a:8a:a3:67:7a:d9:9d:d0:00:98:af:43:19:e4:04:
a4:4f:cc:67:2f:86:f6:e4:a6:45:38:ed:36:1d:74:
01:e4:59:bf:e5:a5:b0:fa:6d:e3:06:c6:3b:08:8b:
6a:84:90:50:d2:c2:22:13:7b:1d:57:61:43:d2:d8:
ec:d1:ee:d9:44:c0:01:3b:18:bf:f5:07:fc:4e:bf:
79:d8:53:ce:b5:08:59:5d:9c:bc:05:25:42:6a:a2:
22:80:e4:c1:e7:fa:5c:5b:6c:9c:41:0e:4d:c4:c4:
ff:0e:e0:94:16:ae:9c:51:60:d1:01:db:c4:b8:7d:
4c:9b:1e:36:f3:ca:2c:6f:4f:4b:9f:1f:02:67:2d:
2a:be:cf:5c:72:fa:5a:ea:1c:fd:a6:be:d3:74:b4:
c0:16:fe:99:46:c7:fd:64:f5:90:e9:59:12:93:20:
7d:10:da:08:2b:79:0b:79:0b:96:4e:78:47:f6:1f:
96:00:da:82:9e:c0:cb:ff:49:cd:5f:28:53:67:aa:
ae:68:e4:f4:c8:3c:f3:09:e6:8b:3e:d1:7c:fa:06:
34:cb:d9:a0:30:79:ee:94:59:d7:0c:5e:e6:d7:f9:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:C5:EC:5D:81:B6:53:89:04:AF:A5:BA:B1:D5:1A:76:80:5F:BF
X509v3 Authority Key Identifier:
keyid:31:F7:95:01:F7:00:C6:A6:76:62:DE:27:B6:15:EE:C8:30:B1:B8:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC6CC/0F853534DD3811EFB2E4C477762E951A/MfeVAfcAxqZ2Yt4nthXuyDCxuHY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f6:f2:11:de:7f:cb:ee:23:8e:a4:58:f3:9e:6e:bb:ca:3e:
4c:49:26:d3:90:b4:5f:ba:ce:5d:6c:66:72:8d:8c:db:e0:99:
df:aa:eb:c8:c2:39:18:51:11:53:97:93:3b:c9:4e:ee:6f:70:
9c:96:5f:b1:3f:2b:5b:83:53:e4:47:45:15:fa:fa:24:2c:34:
48:cd:2f:4e:8a:b3:79:90:17:fd:85:3b:ef:0f:a3:9a:4b:93:
5d:49:80:43:8b:c5:57:69:b8:21:c4:2c:72:50:0b:60:b6:79:
a9:28:bf:84:7f:5b:0b:0b:59:80:7c:96:af:f9:be:5f:ed:d0:
28:69:d9:15:ed:44:f7:f0:d0:e5:40:70:77:f9:2c:8c:e8:02:
ab:fd:06:27:d5:8f:ef:00:67:da:7c:41:7e:3a:fa:8e:94:f9:
ad:10:d6:1a:5c:4d:ab:cb:06:a4:40:50:fa:fb:59:96:31:a4:
06:35:a8:f2:d7:fc:19:0d:72:67:7c:bf:23:4c:e7:bd:ba:fb:
0c:62:75:ca:b7:57:c0:bf:49:25:31:64:c4:db:85:6c:97:f5:
d2:5c:8a:86:bd:f2:c6:59:53:61:7f:dd:bf:47:44:23:2f:c2:
3c:57:a6:c3:7c:4d:14:a1:e0:db:3b:47:46:10:67:75:11:7e:
89:09:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:33 2026 by rpki-client