
Error: rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
File: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft (raw, json)
Hash identifier: xJ8CLdeDUPOUOMlszCoCrROih93c5Gr4tFPmTApPlJo=
Subject key identifier: 79:2E:28:3A:09:3B:0A:27:48:4D:20:42:D2:35:AB:BC:8D:4D:1A:2C
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Certificate issuer: /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial: 012D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
Manifest number: 0128
Signing time: Mon 21 Sep 2026 05:18:36 +0000
Manifest this update: Mon 21 Sep 2026 05:18:36 +0000
Manifest next update: Wed 23 Sep 2026 05:18:36 +0000
Files and hashes: 1: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl (hash: 61Sk7ovA+l5CzQjogm6VNi3SwbDsHNoIrYPjG/P7fJc=)
2: D84805CA842911F1A87FADD3CE1D38B0.roa (hash: Bb8BvIkxNfUEG8CAuLAlAE29AWUszoCKzzlh0ch3r/w=)
3: 0DBF4A56842A11F1957CDAD3CE1D38B0.roa (hash: Fgl+emJScu5akPkuue+0W6zA/h0FF95KqJIyjubrPFc=)
4: 4A5868D04DD911F1ABB268C4CE1D38B0.roa (hash: u0pAqj+9c5bW6sNCCZBPt13ns/bNVxnzw0j3JVWmkPI=)
5: ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa (hash: J8FadMK7Ea9bvlPNiTTJTPLhHgQY+iwpbXSBMwmh9Yw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Validity
Not Before: Sep 21 05:18:36 2026 GMT
Not After : Sep 23 05:18:36 2026 GMT
Subject: CN=6ab0be2c-c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:ae:fa:c1:c7:c9:cd:44:f7:72:92:27:ea:
82:81:20:31:20:d8:fe:cd:53:44:d8:17:bd:ea:1c:
d0:e1:45:1e:d3:0e:77:e0:37:2b:a4:51:db:b4:0b:
a5:34:ca:97:ab:f6:44:f2:a7:be:c6:e8:72:e0:90:
ed:91:87:e9:40:5d:53:80:bb:f2:73:d9:f1:b4:23:
c0:e9:b6:b3:c9:78:8b:c5:5e:0b:38:7c:7f:91:1e:
fd:c4:7f:45:23:4d:c1:1e:2b:22:da:86:5a:80:3d:
8c:62:1b:a3:b4:72:8f:e5:04:56:2a:97:41:c5:55:
a9:fd:4d:86:08:ca:ca:e1:0f:e5:74:84:75:21:f7:
e4:45:e0:90:a2:e8:3a:8d:fa:ac:db:ea:2a:67:74:
43:3a:14:2f:08:60:50:f0:93:9f:65:41:13:bc:f7:
a7:33:71:87:6e:8b:60:21:c6:64:27:b7:05:d8:40:
7a:97:4e:26:f1:ca:12:4a:8a:6b:76:03:06:57:9d:
9d:5e:ae:87:f6:0d:e9:16:ac:07:17:59:bb:03:7e:
c6:2d:3d:33:b4:82:d1:a4:cc:da:90:cf:d9:39:2d:
70:e8:2f:13:84:af:76:c4:b5:79:df:03:8b:a2:e4:
fa:c8:28:c7:23:a1:a7:45:f6:5b:a0:d6:b2:dc:51:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:28:3A:09:3B:0A:27:48:4D:20:42:D2:35:AB:BC:8D:4D:1A:2C
X509v3 Authority Key Identifier:
keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b9:5b:93:37:e7:7c:16:17:c1:61:35:f3:c8:23:8e:cf:91:
78:be:2d:13:83:d1:77:7a:74:7b:eb:27:7a:cb:16:aa:a8:23:
50:37:61:20:bf:37:34:18:3b:eb:88:44:f8:fd:c1:9e:40:f8:
99:72:f7:02:91:e5:fc:bf:b3:8d:fd:f8:d0:63:5c:38:02:23:
5a:d6:de:8f:b2:a8:a1:67:eb:80:27:2a:b4:39:69:d8:9a:84:
39:13:af:45:28:ab:46:f7:03:53:19:18:71:d7:8c:e4:eb:09:
1b:00:8f:7b:bb:c3:61:02:06:7f:c2:93:4e:44:fc:1b:7d:66:
69:9f:74:aa:b8:d5:dd:66:34:1c:a5:9c:e0:26:4e:41:43:dc:
93:a6:24:24:9c:b9:04:7b:ee:74:00:1e:23:ff:a7:d1:8b:6c:
42:88:ed:24:66:14:21:49:4b:79:1b:59:90:a4:ce:44:9d:b5:
1a:38:46:56:35:05:f4:b6:3e:4d:51:40:9e:9f:49:00:1c:e2:
46:c2:8b:11:91:3a:0e:4f:93:eb:92:1c:3a:31:9c:13:aa:dd:
a8:dd:69:36:cc:91:f0:2a:3c:77:b3:5c:7d:28:e7:3d:7f:3f:
7f:4a:9e:b1:c8:72:f0:2e:c7:48:24:e6:02:f0:17:1c:a0:98:
9d:2d:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:46 2026 by rpki-client