
Error: rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
File: 4DauCP4DQW9YiHqdGV2_2GolYDw.mft (raw, json)
Hash identifier: 55q8sgeG25TYv/KBhAN8690lvt+d6kcQPUprNxxPJxs=
Subject key identifier: A6:14:30:63:92:0F:A5:59:EA:83:87:0D:4B:E4:69:B5:45:6A:B7:E6
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 03FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
Manifest number: 03EB
Signing time: Sat 26 Sep 2026 04:01:40 +0000
Manifest this update: Sat 26 Sep 2026 04:01:39 +0000
Manifest next update: Mon 28 Sep 2026 04:01:39 +0000
Files and hashes: 1: 4DauCP4DQW9YiHqdGV2_2GolYDw.crl (hash: GZMp8mTsy/0jrC+YHY1sasJgt8wL1cICYGooJRk6qDY=)
2: A2097100F22B11F08B8C38A9DAE4EC9C.roa (hash: pgofEA1JKv6J0QyvR8PTfDQrVo0AqDPbmJIOB5ay5zU=)
3: 3C958764E73111F09C666E9EDAE4EC9C.roa (hash: fVdYrlrooDNQRHbalW2EII4S7EJlQJMERwsN9flm4IM=)
4: 3581D3BCE72F11F0A99EF990DAE4EC9C.roa (hash: 5RjZs62O7vwmy22YIdLlbngdIKkVBJ+4r9M/hh5yfj4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Sep 26 04:01:39 2026 GMT
Not After : Sep 28 04:01:39 2026 GMT
Subject: CN=6ab743a4-4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:50:5d:e8:18:52:84:ed:d5:b9:1d:23:ee:
c0:5c:9b:85:65:61:0b:f0:32:df:d2:d8:00:6e:1a:
d3:d3:f0:71:53:71:90:7b:30:34:d7:a4:28:90:77:
b9:9e:f7:ee:18:f3:c7:63:3d:28:2b:a1:8c:b8:13:
6e:2d:d5:e9:4e:fe:eb:2b:5c:39:a8:e7:e3:27:c6:
3e:73:38:7e:ec:fb:89:ea:ba:64:b8:8c:11:1f:74:
3e:b4:93:41:0a:21:c3:23:c5:a9:30:92:af:9d:08:
99:b8:c4:a3:88:fc:fc:a3:26:86:31:93:1b:1b:58:
b5:74:b8:ec:f7:1b:ad:a8:a2:76:6f:61:4c:ac:90:
aa:a0:94:84:8f:e4:a9:5a:01:9d:29:8c:ea:58:64:
d0:88:cc:16:49:94:1f:8c:81:40:ee:7f:a3:e8:24:
be:74:56:17:f2:9c:00:b1:ee:a0:69:f3:4b:98:ff:
62:a0:ef:00:aa:c3:eb:c0:a8:21:05:fa:27:96:17:
a6:e4:70:41:31:0d:6b:e7:9b:f0:13:fd:68:15:c2:
4b:38:d7:f7:ba:3a:51:ed:74:d1:20:59:12:7e:eb:
df:75:dc:1d:90:2d:50:05:b3:c3:e9:cf:f1:b6:ed:
5d:5e:7d:3e:68:0a:1d:c2:56:a5:b0:79:c4:52:bb:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:14:30:63:92:0F:A5:59:EA:83:87:0D:4B:E4:69:B5:45:6A:B7:E6
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:91:f6:a6:91:75:55:6c:db:d6:40:49:1c:e3:fb:d7:4e:6f:
14:99:9c:e9:a2:4f:91:b1:70:7b:19:77:38:af:ae:31:e2:7a:
f1:d4:56:14:55:05:23:77:03:90:b2:41:f3:cb:a3:08:73:b0:
24:cb:34:42:ef:b5:56:5e:6f:e4:52:f0:ce:a1:b3:90:05:65:
38:af:04:52:08:d2:d3:4b:41:56:7b:09:de:de:f0:51:47:c9:
43:29:d9:53:16:95:d4:c2:61:2c:bd:50:82:46:48:75:12:65:
b0:46:34:6a:2a:4e:7b:a9:3b:8d:33:04:3f:6b:7a:85:41:41:
c5:09:3a:15:df:82:6b:9e:27:d1:27:aa:64:0f:ef:23:fa:a4:
d5:a3:f5:d5:2f:cd:e6:b4:a2:9a:5e:f5:43:c9:33:1f:a5:c8:
18:b4:a8:39:52:4b:33:ca:0a:98:a7:1c:d0:4f:d0:ba:32:41:
b2:6c:df:dc:b3:88:77:b2:4d:e4:86:3b:24:4a:76:71:a4:60:
97:0d:0c:70:91:5d:fc:77:da:3f:15:7e:71:3e:aa:45:46:ef:
9c:cb:bd:f0:1e:1d:df:06:80:c0:c0:60:43:f6:51:13:0f:c4:
a4:c9:f2:c8:22:01:88:c1:c9:b7:2b:f0:04:78:24:4d:ff:85:
14:31:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:41:36 2026 by rpki-client