
Error: rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File: i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier: OryACmk0VsPh98u5vBT+KaLrVi/b5Re930lOsZP2zeg=
Subject key identifier: C0:55:9B:9E:08:4B:7F:75:8A:DE:1E:0A:63:2A:69:7A:27:74:54:49
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer: /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial: 02E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number: 02E2
Signing time: Sat 26 Sep 2026 04:33:50 +0000
Manifest this update: Sat 26 Sep 2026 04:33:49 +0000
Manifest next update: Mon 28 Sep 2026 04:33:49 +0000
Files and hashes: 1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: ELvg9DIfRSUlNpj7e3iQ0gelwlDbpf15AtwG98klaJY=)
2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Validity
Not Before: Sep 26 04:33:49 2026 GMT
Not After : Sep 28 04:33:49 2026 GMT
Subject: CN=6ab74b2e-9c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:df:d8:0c:12:8b:81:c0:cc:ec:0c:75:07:
92:87:aa:5f:e7:84:92:f5:7b:12:09:e6:86:00:e4:
bc:db:e4:2c:e0:5f:7d:b9:15:86:27:06:ac:15:de:
a0:c5:38:9c:f0:4e:99:3b:61:0f:89:e2:5c:f5:8b:
c4:d2:14:87:49:6e:8a:c8:f2:59:01:cd:cf:32:32:
dc:fe:65:92:00:43:0d:76:46:f9:09:7a:60:aa:e2:
c0:38:35:1a:0c:01:97:20:e6:00:14:ff:95:d3:2e:
32:cb:1c:12:07:19:c2:48:71:05:f9:02:1b:f4:d5:
37:89:29:c5:14:00:98:75:52:5d:e4:1f:ab:e4:6b:
4d:47:4e:fc:ce:c9:8c:f2:11:9a:d8:af:3d:4b:78:
80:78:ab:75:38:b4:a7:f7:5e:0a:09:eb:15:3c:cf:
f0:63:cf:96:0a:82:cd:62:7f:ca:59:8d:64:33:67:
80:4f:57:f7:b9:2a:62:f9:8b:88:95:4c:97:15:6c:
6f:93:58:9f:d8:1e:ca:02:c9:71:87:19:8f:3d:3c:
e0:1e:86:f9:e0:3d:dd:df:ed:cd:07:f0:f2:6a:f3:
3f:1e:bd:10:73:a1:ae:e0:94:51:32:d7:67:7c:38:
8c:90:68:3b:9d:ce:6f:3c:4f:80:3a:1b:ee:65:a9:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:9B:9E:08:4B:7F:75:8A:DE:1E:0A:63:2A:69:7A:27:74:54:49
X509v3 Authority Key Identifier:
keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:6d:0b:8d:3e:87:07:db:0f:e7:61:2c:a6:5f:f7:a5:ed:
d7:28:c9:d1:d4:f0:2c:4b:38:6c:73:a9:61:5c:78:3c:f2:55:
8f:eb:01:72:43:ab:7c:41:16:ab:f9:5a:da:aa:97:d0:fe:2b:
a8:7f:0e:b5:54:46:7a:75:7f:31:77:14:30:3f:75:b0:7f:17:
37:f5:6f:48:81:63:b1:a0:81:45:7f:ec:fb:ae:71:af:b6:5d:
76:30:c2:40:96:af:76:57:57:9c:be:08:fe:9e:24:26:a7:41:
72:b0:d8:5a:ae:c9:53:d6:34:dc:b7:fd:9a:29:8f:fb:07:a9:
a9:ed:54:33:de:f7:20:86:fb:dc:2f:70:6d:fc:b1:8c:93:30:
b6:f7:9b:35:0d:3e:d8:10:ad:0e:ae:ee:43:32:95:64:ef:9c:
4f:90:f3:26:05:65:a0:2c:64:f5:e4:30:be:99:48:ca:b0:56:
5d:0f:a5:ce:10:54:ab:6a:d9:79:5c:1a:cd:75:3a:4c:b2:ea:
ac:7c:2a:c2:d3:be:be:29:1a:b8:1d:90:c0:0f:ae:18:35:c5:
70:15:b0:dd:ba:63:ee:82:e2:63:bf:c2:70:20:e5:59:d3:4f:
03:49:75:9f:23:40:56:40:43:99:25:69:bc:41:21:5b:23:eb:
bf:61:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:19:20 2026 by rpki-client