
Error: rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
File: DOoR1fD2WesQDyt_sejINrwlz5g.mft (raw, json)
Hash identifier: ccKGngHzvC9kfFceaC/nA1WvIqlSqArz1WdYxvFyNQ0=
Subject key identifier: 0A:CD:2E:B6:77:44:26:71:F1:B3:F9:FC:3E:F1:19:DD:96:1B:47:0F
Authority key identifier: 0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
Certificate issuer: /CN=F36C33BBAF/serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Certificate serial: 03DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
Manifest number: 03D9
Signing time: Mon 28 Sep 2026 04:02:53 +0000
Manifest this update: Mon 28 Sep 2026 04:02:52 +0000
Manifest next update: Wed 30 Sep 2026 04:02:52 +0000
Files and hashes: 1: DOoR1fD2WesQDyt_sejINrwlz5g.crl (hash: 5klnEu43SIcJpj/5HhGaMwpNOXDe9hWx2yS7ghjNT/c=)
2: 48BD0A7A14D811F09D2DBA0A6EB8BCC6.roa (hash: K8z2vSGpFFut3n7D7lisZcx7JDx1aJSflHUP/bhx0pg=)
3: 059E0E4AC59E11EEA53C71B7775412E6.roa (hash: ZFKITH+OchlrxbiwzeW9jzaBB9KK8U2j/qLB4RDTGvs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C33BBAF, serialNumber=0CEA11D5F0F659EB100F2B7FB1E8C836BC25CF98
Validity
Not Before: Sep 28 04:02:52 2026 GMT
Not After : Sep 30 04:02:52 2026 GMT
Subject: CN=6ab9e6ec-3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:4d:ec:42:d7:84:c6:fd:1a:77:93:33:a9:
c4:24:b3:ac:d2:30:4f:b8:cd:19:1e:fd:fe:81:ee:
29:05:6c:9a:26:7a:22:0c:48:21:dc:c9:82:6d:34:
11:0b:0e:90:44:20:ac:6a:cd:ee:78:92:0c:55:3f:
58:b6:55:19:40:db:1e:a7:7d:e8:15:ff:c2:a7:c4:
2d:7e:53:66:d7:36:a5:94:cf:a9:06:50:23:43:42:
a1:dc:0d:4f:fa:fa:fb:ec:72:c9:df:a0:81:5d:a7:
9a:25:0d:95:ff:69:2a:5a:66:94:43:cf:39:23:81:
8e:16:b3:79:4b:e0:73:f7:77:ea:88:2d:80:c1:ae:
2f:e5:94:7c:6e:d3:fd:a2:ea:0c:aa:b6:07:a8:c3:
d3:9a:1a:4e:30:8c:ac:51:e0:a4:da:b1:32:d0:30:
52:8b:da:4a:67:7f:eb:bf:a9:1f:93:a9:1e:59:10:
32:6e:0b:22:c6:a3:e7:0d:01:1e:f9:d4:1a:0f:3f:
6d:c1:a6:49:09:c2:7b:32:eb:88:b9:6b:88:e5:bc:
98:8a:a7:65:24:95:f1:0b:58:dc:d0:73:bb:de:1a:
d5:8b:51:60:42:49:9b:2b:64:29:72:53:61:04:49:
a0:ca:45:aa:f9:1a:fd:4a:9b:34:b7:e8:10:96:3c:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:2E:B6:77:44:26:71:F1:B3:F9:FC:3E:F1:19:DD:96:1B:47:0F
X509v3 Authority Key Identifier:
keyid:0C:EA:11:D5:F0:F6:59:EB:10:0F:2B:7F:B1:E8:C8:36:BC:25:CF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DOoR1fD2WesQDyt_sejINrwlz5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C33BB/B6F210F2C59D11EE9B8CCFB6775412E6/DOoR1fD2WesQDyt_sejINrwlz5g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:97:50:84:1d:bc:02:6a:ad:63:80:a2:b7:29:8e:af:6d:
a0:f4:eb:e9:34:c1:7e:fc:09:9a:84:31:b3:0f:37:04:fb:25:
b6:59:e0:19:94:e7:0c:46:fc:d4:33:ed:5e:ca:ba:0a:3a:1f:
46:f0:f5:4a:32:5a:cf:4d:ff:cc:da:65:b2:31:5a:9b:2c:84:
0c:81:31:38:42:a0:48:28:61:6e:12:54:bd:f3:ce:27:e6:ec:
6a:43:61:2d:f8:0a:51:18:16:40:05:b2:77:ab:74:b9:ef:c5:
2f:2a:27:eb:10:21:b0:05:01:23:f8:dd:a1:6c:27:43:91:34:
14:96:a5:ed:62:06:2d:58:11:c7:5e:29:e7:c8:e4:e8:e0:61:
93:23:dc:f4:7a:cd:f0:c2:63:65:c1:9c:db:11:0d:7a:02:b0:
ae:18:09:ac:5b:62:4c:08:b9:3a:74:59:bf:eb:3b:47:cd:1d:
43:6c:76:79:9b:ff:c5:65:a2:29:57:43:28:ba:a5:0c:2e:93:
c2:8f:d3:7a:12:78:97:9d:19:87:45:4b:7d:6b:6a:94:fb:93:
0f:a4:2b:8e:e6:03:7f:83:1f:cc:69:16:c7:71:5e:34:b6:8f:
1f:35:c1:a6:68:03:6c:11:58:3f:73:73:83:09:0a:b2:17:4b:
c2:86:18:88
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzMzQkJBRjExMC8GA1UEBRMoMENFQTExRDVGMEY2NTlFQjEwMEYyQjdGQjFFOEM4
MzZCQzI1Q0Y5ODAeFw0yNjA5MjgwNDAyNTJaFw0yNjA5MzAwNDAyNTJaMBgxFjAU
BgNVBAMTDTZhYjllNmVjLTNiODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGVE3sQteExv0ad5MzqcQks6zSME+4zRke/f6B7ikFbJomeiIMSCHcyYJt
NBELDpBEIKxqze54kgxVP1i2VRlA2x6nfegV/8KnxC1+U2bXNqWUz6kGUCNDQqHc
DU/6+vvscsnfoIFdp5olDZX/aSpaZpRDzzkjgY4Ws3lL4HP3d+qILYDBri/llHxu
0/2i6gyqtgeow9OaGk4wjKxR4KTasTLQMFKL2kpnf+u/qR+TqR5ZEDJuCyLGo+cN
AR751BoPP23BpkkJwnsy64i5a4jlvJiKp2UklfELWNzQc7veGtWLUWBCSZsrZCly
U2EESaDKRar5Gv1KmzS36BCWPE6hAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCs0u
tndEJnHxs/n8PvEZ3ZYbRw8wHwYDVR0jBBgwFoAUDOoR1fD2WesQDyt/sejINrwl
z5gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzM0JCL0I2RjIxMEYyQzU5RDExRUU5QjhDQ0ZCNjc3NTQxMkU2L0RPb1Ix
ZkQyV2VzUUR5dF9zZWpJTnJ3bHo1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RPb1IxZkQyV2VzUUR5dF9zZWpJTnJ3bHo1Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzMzQkIvQjZGMjEwRjJDNTlEMTFFRTlCOENDRkI2Nzc1
NDEyRTYvRE9vUjFmRDJXZXNRRHl0X3NlaklOcndsejVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjvpdQhB28AmqtY4CitymOr22g9Ovp
NMF+/AmahDGzDzcE+yW2WeAZlOcMRvzUM+1eyroKOh9G8PVKMlrPTf/M2mWyMVqb
LIQMgTE4QqBIKGFuElS9884n5uxqQ2Et+ApRGBZABbJ3q3S578UvKifrECGwBQEj
+N2hbCdDkTQUlqXtYgYtWBHHXinnyOTo4GGTI9z0es3wwmNlwZzbEQ16ArCuGAms
W2JMCLk6dFm/6ztHzR1DbHZ5m//FZaIpV0MouqUMLpPCj9N6EniXnRmHRUt9a2qU
+5MPpCuO5gN/gx/MaRbHcV40to8fNcGmaANsEVg/c3ODCQqyF0vChhiI
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:18 2026 by rpki-client