
Error: rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
File: -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json)
Hash identifier: v/6UNdDiiKQZS3TVxiNvCtw5VAlfaqsKqXwgW57vlfM=
Subject key identifier: 13:C7:37:37:A6:6A:66:A3:F6:E6:B6:57:9B:FD:9C:3C:4C:38:0D:93
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Certificate issuer: /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial: 037F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
Manifest number: 0373
Signing time: Sat 26 Sep 2026 04:11:55 +0000
Manifest this update: Sat 26 Sep 2026 04:11:55 +0000
Manifest next update: Mon 28 Sep 2026 04:11:55 +0000
Files and hashes: 1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: ySPxtj0IFnAaZsktpdWtFtt7KawGPTJqzDLycn93V+8=)
2: 440AE6387FC211EFACAB56B8762E951A.roa (hash: Rbkyo5rELKFe+Cn1UL0BmEWDgHbqtqW4Mc1h5Ma1xWM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Validity
Not Before: Sep 26 04:11:55 2026 GMT
Not After : Sep 28 04:11:55 2026 GMT
Subject: CN=6ab7460b-6afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:25:10:9f:04:3e:ef:ff:47:b6:64:66:9a:
6d:2e:17:1a:2b:ec:4e:1c:eb:21:06:64:9c:42:85:
b1:4d:eb:cf:fb:6d:38:1f:8f:3c:b8:92:86:af:cb:
1d:e0:a4:04:1f:a5:c7:08:ca:6b:16:1f:2f:b7:3d:
7c:e1:10:de:b9:3d:80:ba:d4:c1:8b:71:b3:c4:67:
4d:79:c8:d0:37:4d:77:f9:28:42:d3:3e:ad:87:dd:
c1:29:f6:9f:72:e6:49:cb:a9:bf:83:61:07:39:06:
cd:83:88:a5:06:bf:27:e6:19:9e:e0:aa:c0:3b:80:
72:ff:be:90:57:0c:86:b6:fe:16:4a:80:20:c9:c3:
12:39:c6:a9:11:c1:2e:b5:ad:44:b4:a5:9e:04:d5:
bd:b1:dc:d6:58:37:fb:ab:78:af:97:b7:2a:3f:94:
5d:b2:32:90:d3:df:d0:b1:de:6c:18:41:9f:56:44:
79:65:1b:36:46:72:ca:93:3e:9d:91:e8:02:6f:a5:
0f:26:b3:df:de:3a:a0:73:b9:47:b1:e9:e3:5d:57:
87:26:e9:53:a1:e6:c4:57:2b:6b:5f:d8:26:67:07:
39:7f:12:6c:3d:21:d2:de:e7:d3:2b:5b:49:8a:ba:
11:43:f2:87:e8:f9:07:89:94:a5:55:91:88:ba:3d:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:37:37:A6:6A:66:A3:F6:E6:B6:57:9B:FD:9C:3C:4C:38:0D:93
X509v3 Authority Key Identifier:
keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a5:90:17:15:ef:96:98:f7:f9:83:ec:d3:55:c2:37:9d:79:
64:63:ca:cf:ea:1b:59:06:50:b1:9f:d7:5d:09:ca:79:e8:1e:
0a:5d:b6:dc:c2:2d:29:0b:00:2a:3b:e5:bc:51:6b:58:fd:50:
32:47:7e:62:e7:83:e9:f2:6a:79:8e:dc:f2:11:6c:3f:6c:b4:
4e:db:91:b5:75:f5:6f:c9:68:77:be:bd:c8:78:10:15:a9:9a:
28:4f:d0:fe:60:6c:a6:ad:15:6c:68:d0:29:b4:f4:d3:34:d8:
96:81:af:bb:43:50:fb:8b:c0:8c:b8:7c:f9:42:d2:89:c3:96:
16:ce:80:ff:cf:eb:c5:27:94:71:b8:67:fb:3a:b1:89:bd:59:
0c:2e:2f:78:0f:07:cc:73:8d:87:be:7f:16:22:3e:94:cc:b3:
5d:cd:f6:38:82:ab:a1:cc:8b:1a:45:de:7c:6c:6c:5d:5e:e4:
f7:c6:b5:14:a2:16:9b:08:6c:d5:b3:51:d1:23:5c:c2:18:55:
a0:f9:55:6d:98:cb:17:e1:a3:94:68:5b:05:9d:38:22:83:03:
b3:0f:fd:15:e6:13:11:cc:da:c2:12:db:52:b3:57:38:77:fa:
a4:e8:ad:e3:17:0a:3e:8a:44:21:38:1d:eb:07:10:60:f2:d3:
67:cf:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:46:37 2026 by rpki-client