
Error: rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
File: Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft (raw, json)
Hash identifier: 3PsB5i97W9ZYBonMlQdFD/bhWkcJVWRARACeWdhby34=
Subject key identifier: AE:77:BD:0F:10:1C:E8:7E:B4:55:63:65:C5:A8:4E:C1:95:02:FE:90
Authority key identifier: 56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
Certificate issuer: /CN=F36BF1B7AF/serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Certificate serial: 0B87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
Manifest number: 0B83
Signing time: Sat 10 Oct 2026 01:16:36 +0000
Manifest this update: Sat 10 Oct 2026 01:16:35 +0000
Manifest next update: Mon 12 Oct 2026 01:16:35 +0000
Files and hashes: 1: Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl (hash: B5ERde7Cqf+OQI73oKK4Wyuxb6anP4rd7Y0qZGSrh3g=)
2: 3622D1AAEEA211E89867905FF8AEA228.roa (hash: QDmUgaFX7YS3buOBowBMA1u32zvhujbAZ2pZ6j/6DXM=)
3: 9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa (hash: CDg6sixtxLLYq53qAACfV1YNKuHXTop88xuaWBI25Nc=)
4: 3B78D754847B11F1A500B6B7CE1D38B0.roa (hash: pvmPFAS+cuIJr6wNm8N+udknD9ftXiZh97mVDPera3k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF1B7AF, serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Validity
Not Before: Oct 10 01:16:35 2026 GMT
Not After : Oct 12 01:16:35 2026 GMT
Subject: CN=6ac991f4-7d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:16:11:e7:4c:db:5d:2a:f1:8d:c3:5d:12:
08:d5:72:0f:39:57:cc:f2:06:7a:75:06:b7:41:ed:
55:b5:28:87:f2:76:7c:94:a5:35:42:26:5f:f2:c3:
d4:85:a9:2f:4a:cb:f1:70:d8:1a:d9:ba:63:7e:02:
17:c4:57:2a:74:6a:54:43:0b:9e:7a:93:7b:82:bd:
a5:09:88:e7:9d:aa:a9:e7:73:d4:1f:4d:37:61:70:
bb:78:5b:28:5c:6d:a8:54:2e:77:e9:43:62:ff:90:
85:1c:7d:c3:b3:e2:07:4d:e1:f0:bf:b8:cf:0d:cb:
18:28:ea:e9:71:a3:6b:11:02:af:b4:5d:23:84:96:
46:f6:d7:bb:f9:86:8e:10:4d:5e:26:ed:39:6f:1f:
7f:60:db:4c:ba:d3:ed:3a:09:37:20:d5:f0:d4:a4:
a0:ea:95:3c:03:f1:c7:19:17:25:b7:c2:67:d8:81:
25:76:e2:81:8c:3e:a6:46:ed:cd:50:35:c6:71:96:
7e:78:7f:3f:ef:17:46:d2:cf:7f:5c:89:b4:3b:e5:
41:78:0e:22:13:43:a3:58:bb:0c:e4:f0:ba:c8:96:
0f:08:2c:02:3e:cb:ac:2e:39:da:2e:6d:12:94:d4:
a2:41:7f:7a:a6:dc:77:89:56:fa:12:f1:2d:44:2c:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:BD:0F:10:1C:E8:7E:B4:55:63:65:C5:A8:4E:C1:95:02:FE:90
X509v3 Authority Key Identifier:
keyid:56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:67:9d:16:d5:f3:bd:2c:27:b8:5a:d3:f7:f5:c1:0e:5d:
2c:8f:87:d6:d6:28:0f:ae:be:22:d0:7b:cc:22:c2:08:bc:40:
00:63:f3:ad:f0:a1:6d:e5:8b:21:4d:bc:cd:40:19:33:cb:68:
bf:87:65:82:59:1a:65:45:78:1b:01:11:37:99:63:a5:5f:77:
2a:d8:b0:f0:da:cf:ab:ac:ab:99:38:03:89:b8:7d:82:f1:53:
e2:00:be:42:3b:4c:02:49:85:8d:1f:93:5f:3e:5c:16:eb:e4:
42:13:74:1a:c5:06:83:83:dd:e1:48:28:6e:0a:79:01:b4:7b:
31:c1:c7:08:c1:96:22:14:ed:bd:13:bd:ea:02:33:9e:6e:b9:
2c:75:a9:08:a9:ef:4f:29:31:78:f1:6b:51:4c:59:a9:8e:f5:
97:55:c7:a6:95:04:2f:89:37:d1:be:a7:c0:df:aa:cf:57:5f:
8e:38:a7:80:49:1d:58:50:50:ad:d6:82:bc:1e:bc:54:60:88:
d8:0a:a6:d4:3c:69:26:f7:1d:55:04:9c:28:fc:36:a6:b3:2b:
db:2e:5a:ee:33:41:b8:c0:8c:f9:69:88:64:38:fb:7c:b9:29:
9b:e0:0c:47:2a:24:a8:d3:56:a0:0d:98:91:38:2c:ba:00:fc:
31:b5:db:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:38:42 2026 by rpki-client