
Error: rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
File: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft (raw, json)
Hash identifier: G4aiy+SP/fixE1a4byvNeIvbaevUkcMud+8/7uxcraM=
Subject key identifier: E9:2A:28:25:16:03:20:7E:05:DD:E9:D1:F3:E4:E3:51:39:3E:65:9D
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Certificate issuer: /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial: 0430
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
Manifest number: 0422
Signing time: Sat 10 Oct 2026 03:55:51 +0000
Manifest this update: Sat 10 Oct 2026 03:55:50 +0000
Manifest next update: Mon 12 Oct 2026 03:55:50 +0000
Files and hashes: 1: 4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl (hash: 0hiIcg1MpiptFNfkQr7jFUfFYFlysUg3Uo5gwAw2xwI=)
2: 963E345AAA6E11F092CBEA92DAE4EC9C.roa (hash: pST0iqM1LIDeTWfpvZG5M6dsTHwi1B1szH8dsYd3DBU=)
3: 2257925CAA6E11F0A6F76B90DAE4EC9C.roa (hash: oxEm9UctpCtTUrbHITbDcrkM+rBf2+aSQrb3SqlA3kA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3A58AF, serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Validity
Not Before: Oct 10 03:55:50 2026 GMT
Not After : Oct 12 03:55:50 2026 GMT
Subject: CN=6ac9b747-29b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:80:2c:83:7e:39:df:68:4e:59:63:e1:e7:
08:e5:56:16:7e:64:e7:a2:d0:17:45:bc:a0:cc:17:
6a:01:41:19:ed:48:02:14:69:f5:6f:5e:0c:98:15:
c5:16:ea:32:fa:54:1d:f8:e3:3a:68:d2:97:7b:08:
b0:28:52:0b:c9:57:da:70:cc:90:21:0d:01:83:5d:
7b:f6:6e:f5:f5:ba:5d:3b:34:19:67:83:0c:30:cf:
33:06:27:6d:ef:f2:ce:26:31:4b:2f:c3:af:57:65:
ee:78:bb:da:dc:8f:a1:6b:b2:6b:ae:fd:a2:1d:bd:
c1:89:7e:1c:62:88:32:82:ca:50:b7:d0:be:d6:bd:
11:17:7b:d6:fe:9b:da:87:b7:07:8a:9f:86:3f:f6:
1e:80:89:69:27:d2:dd:20:6e:7e:08:83:6e:26:01:
36:f3:09:e0:3c:38:00:f2:e8:ac:9f:25:57:6b:79:
24:62:c5:d3:97:35:6a:39:0f:f3:be:ce:9f:97:b4:
f9:ff:a4:4c:3c:bc:52:87:68:86:8f:5a:b5:e4:3a:
c1:83:d6:8c:5f:9d:1d:3b:50:40:c2:01:32:54:3c:
39:64:89:23:f7:b3:93:1c:39:0c:a3:c6:0b:35:56:
19:7b:97:2c:80:99:3d:e9:99:01:0a:6a:73:ce:b4:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:28:25:16:03:20:7E:05:DD:E9:D1:F3:E4:E3:51:39:3E:65:9D
X509v3 Authority Key Identifier:
keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:4b:1d:d1:f7:7c:26:55:f0:61:b5:32:58:69:97:1b:e9:
ca:f5:44:6f:4f:e1:da:9f:4e:26:3d:30:28:08:e8:44:1e:d1:
c1:e8:84:66:d4:b4:84:5b:f1:4d:0a:b2:6e:6d:9d:48:a8:7d:
96:f7:a0:f5:ca:8c:72:7a:4b:7f:09:c4:77:c7:99:78:02:80:
f3:fd:31:8b:a8:c5:b5:a9:bc:06:af:f0:62:fd:5f:90:76:02:
ed:91:ae:ad:a9:c4:26:67:f2:c8:82:94:a9:cf:43:82:3c:c0:
5a:3a:57:90:ec:49:06:0f:c3:f2:49:f1:ec:98:e0:10:98:70:
09:f6:13:a3:eb:41:3d:b9:28:49:3c:cd:0a:9f:a9:0a:dd:20:
79:54:ea:c0:d0:39:13:56:c2:43:94:4c:94:e4:2e:16:71:e1:
77:af:95:14:8c:8b:da:2a:2f:90:1b:d6:68:29:d1:24:09:84:
33:85:cc:f8:21:f4:72:b5:71:46:7d:d5:7d:0d:78:42:70:44:
ba:f2:75:60:16:36:6e:75:06:61:ba:43:b8:32:0f:ac:9e:19:
7e:34:ee:20:90:c9:2c:fb:5f:3a:9a:79:f3:65:2c:ba:f5:82:
b4:d4:50:00:e3:53:34:fa:0b:f6:8b:6d:aa:cb:ed:21:df:6c:
7d:00:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:54:18 2026 by rpki-client