
Error: rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
File: IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft (raw, json)
Hash identifier: ZlAx9kG3ge8Bmw4o6EsxFD7xZ1CgfbbI1OV4r6MrP4U=
Subject key identifier: 5B:B7:BD:1E:5F:E6:15:C5:19:F8:73:C7:7A:54:F3:8A:00:E2:BA:A6
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Certificate issuer: /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial: 0558
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
Manifest number: 0554
Signing time: Tue 22 Sep 2026 03:14:09 +0000
Manifest this update: Tue 22 Sep 2026 03:14:09 +0000
Manifest next update: Thu 24 Sep 2026 03:14:09 +0000
Files and hashes: 1: IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl (hash: fh/DnHzHMb5ew9kVp7vKpTCunCj578w1/9ltwUe9t/0=)
2: 375BCD788A6811F1BF7143F0CE1D38B0.roa (hash: oVUo+t/et85fqSTTr6zsQae5fnGPc7bNZZM1y/Lf9V0=)
3: EB75AAA08A6711F1AF4A57EECE1D38B0.roa (hash: hBL7Bw0T1p6qOiAygZ/IygqoLmmJFrYyoL3SKs5rE9I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C7A1BAF, serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Validity
Not Before: Sep 22 03:14:09 2026 GMT
Not After : Sep 24 03:14:09 2026 GMT
Subject: CN=6ab1f281-6d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:65:cd:fb:68:a2:c5:9f:73:53:0a:e6:40:
4d:18:f5:18:ea:b9:b5:a6:92:5e:ca:2a:21:f7:f8:
46:4a:fb:c0:b0:16:6e:60:7c:78:21:a2:5c:6e:92:
32:ff:78:8b:b5:43:23:05:a4:8a:15:e6:db:23:4e:
47:02:e6:7f:e7:fc:92:48:5d:07:94:3b:d2:84:ad:
15:cd:e4:c5:d4:df:4a:f6:4a:c1:54:7d:46:8b:d5:
54:75:41:1e:53:96:02:cd:c2:00:05:ac:88:28:21:
13:f6:7a:ba:59:5e:8b:70:7d:0d:cd:72:9a:eb:8b:
2d:e1:9f:32:05:fd:78:1f:33:00:7d:a6:19:65:7c:
27:3c:68:e5:fa:6c:23:f2:2e:d8:5d:79:3b:19:95:
69:fe:33:82:81:21:96:27:91:31:90:e2:b1:85:b0:
4e:f8:1f:2e:4e:b0:b0:91:3e:6c:95:fb:21:46:4a:
36:45:b5:40:ed:6f:01:a1:fa:a9:e2:93:99:6e:65:
c9:17:14:f8:3c:5b:1e:f3:5e:75:21:5d:7f:38:27:
c6:f0:24:bc:30:08:0c:ad:62:f3:a2:b4:8d:12:c4:
a2:bc:6b:43:b3:27:5f:8d:93:b7:e2:0d:0a:df:01:
60:59:1b:67:fa:cd:7c:6f:06:80:e8:b5:53:20:07:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:BD:1E:5F:E6:15:C5:19:F8:73:C7:7A:54:F3:8A:00:E2:BA:A6
X509v3 Authority Key Identifier:
keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:19:c6:a5:3a:23:42:de:6d:e6:48:5d:97:89:3a:2f:b7:d2:
9b:ae:54:03:4e:30:ab:23:65:4b:38:3a:dc:b4:19:d3:15:17:
9d:a9:50:b5:22:86:0f:10:b7:ad:15:01:a2:72:22:de:87:44:
13:da:98:b4:45:9e:a7:9b:cf:d6:83:ea:a2:8f:1d:60:86:85:
3f:9b:51:08:20:47:4a:92:32:32:fc:4e:c0:c9:fc:4d:a7:d8:
84:5c:dd:d0:8c:dd:58:63:17:e0:5c:76:82:44:c6:be:e9:d5:
64:4f:5e:b6:db:f2:c6:e6:ba:55:ca:0d:a2:b2:b6:8b:64:3f:
f5:48:6f:ac:79:cd:6b:8f:a6:3b:f0:65:5d:cf:e6:d4:35:56:
7c:d5:7a:6b:6d:ed:8a:c3:11:4e:ee:99:7c:36:13:93:cd:aa:
25:27:73:81:04:5e:3e:47:d6:f7:00:33:6b:54:ee:a1:4e:f1:
f0:5d:73:6c:e7:85:4b:d2:ad:3b:12:56:be:4d:96:ec:b9:14:
f1:1c:35:78:fd:aa:c1:4d:11:d3:10:4a:cb:ee:a2:8d:63:5d:
25:49:65:06:38:65:1a:95:df:34:2d:b7:95:4a:8f:29:f5:29:
c5:39:c2:95:51:ce:26:cd:82:39:93:b6:1f:9a:31:a5:0e:0d:
83:a5:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:20:51 2026 by rpki-client