
Error: rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
File: pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft (raw, json)
Hash identifier: hMqWUO4gOvqHR85U0UdIzRUWVAAjCtVIjYlWqDgk0B4=
Subject key identifier: 39:B0:F8:B9:B7:F3:CB:E8:F9:38:B7:1D:94:32:7B:60:05:4B:B3:E8
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Certificate issuer: /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial: 0153
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
Manifest number: 014B
Signing time: Mon 21 Sep 2026 05:14:01 +0000
Manifest this update: Mon 21 Sep 2026 05:14:00 +0000
Manifest next update: Wed 23 Sep 2026 05:14:00 +0000
Files and hashes: 1: pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl (hash: ozcuE1qV3GcOdWaCHxMDxbO48KnnGEjEbuotoBX9CnA=)
2: 57F5D562066811F182A03BF2DAE4EC9C.roa (hash: H/dZ7GU4y3+0W4NbF4qfRfiPWKdEGrksIwpjjQKBLhc=)
3: 122D36EC066D11F18E1FF791DAE4EC9C.roa (hash: jtB1Hhv1HwpPRBPDwK5yT3PXgecLmuqLhxaUNyALYGE=)
4: 5D13438A066911F1AF7B9E7BDAE4EC9C.roa (hash: o3eibrTB3qklVAlPQvfUzdZj6M57IsoeiCH4IoymBO8=)
5: A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa (hash: mbg1nz27QWm2VugAeSuCncl+InKYGhLEQyQ7AG/9h3o=)
6: B312FDDE066911F1BDF62B7CDAE4EC9C.roa (hash: buD5JSkUfeJCoxOUevkIVwfQkCScIrrjXbWb3f7GhrE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Validity
Not Before: Sep 21 05:14:00 2026 GMT
Not After : Sep 23 05:14:00 2026 GMT
Subject: CN=6ab0bd19-20a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:d3:ab:75:12:f5:a8:c5:d1:c0:38:33:9d:
64:49:7b:fb:4c:0a:06:46:f6:52:d7:b1:cf:97:fa:
59:8e:67:f3:dd:d4:8d:7c:2b:af:53:8c:ce:3a:26:
58:d7:48:30:51:36:33:c0:e8:df:0e:15:8a:9f:29:
e1:ab:38:ca:11:4b:f1:3e:61:1c:6b:e6:32:a1:26:
c9:2d:ce:9a:52:66:30:a9:6d:2f:10:d1:85:49:b3:
d0:1d:d3:5a:1f:be:75:33:3b:6f:b3:7a:6a:09:21:
0d:18:a8:86:72:a4:56:2f:3f:04:42:85:6f:26:61:
04:7f:2e:f1:ba:03:cd:ad:55:b6:09:56:cd:b1:ff:
50:18:1b:e5:3d:61:66:18:33:a1:93:f2:c4:e1:c0:
71:f9:8a:ad:10:cd:2c:7a:e3:32:01:b3:d5:5e:80:
74:54:23:4d:75:a2:2b:c3:25:cb:9f:7d:44:03:28:
5a:d6:a1:e7:f7:29:15:7c:b2:c4:4f:72:ab:a9:20:
27:c9:99:bf:d6:5d:43:7f:b2:d3:9c:97:15:cc:78:
4d:a4:de:b6:64:c2:d1:41:aa:be:83:27:05:fc:1e:
c4:1b:a8:a9:2a:5e:cd:d5:b7:a1:5d:d8:22:88:3b:
38:45:9b:c1:5c:b4:95:2e:b8:b0:58:0a:7f:02:ce:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:F8:B9:B7:F3:CB:E8:F9:38:B7:1D:94:32:7B:60:05:4B:B3:E8
X509v3 Authority Key Identifier:
keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:a5:36:65:36:35:3c:f2:25:3b:47:74:a3:11:36:ac:0a:
44:17:bc:a8:f8:54:ce:2b:4d:6b:e3:8e:4e:9f:4f:05:63:06:
05:36:87:d6:3c:7b:3a:76:15:ce:62:5b:f3:19:9c:be:e7:d2:
72:18:d3:09:2c:e3:d5:2b:9c:f1:45:0b:7b:3b:0b:e8:ab:d8:
15:2c:9b:3c:0a:c5:a8:4b:71:b1:ee:1c:3c:3c:fc:c9:6a:f8:
12:2d:c9:bc:7f:ab:13:cf:23:78:48:94:79:7f:c9:01:0a:fb:
67:57:cc:18:45:52:77:fa:7f:7d:01:de:43:32:33:a4:80:bd:
9f:14:dd:aa:4e:3d:71:95:4a:4a:a0:cd:5b:62:a5:38:0c:66:
fc:bf:6b:b9:b4:06:65:ba:6a:bb:a2:b0:be:e7:80:4e:83:82:
bd:08:f5:89:01:34:db:82:b6:52:7f:03:14:21:ee:f2:0d:1b:
41:a7:72:f1:e6:c9:27:3d:b6:32:ab:59:9a:b2:a9:d2:73:3d:
87:75:4b:3f:65:bb:41:8e:c2:ff:33:1e:c4:1e:21:cb:cd:9a:
ed:d5:62:8e:56:d4:1c:dc:74:b0:4d:73:4b:2b:64:96:6b:e5:
f4:b3:d5:40:f4:dc:fd:5a:42:61:d0:95:fd:fb:33:f1:df:30:
20:9f:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:36:04 2026 by rpki-client