
Error: rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File: IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier: Ys0e2UlB9Mhro846IC8I1C85m/4Ki24/rbjJ+r2eNO0=
Subject key identifier: 7D:D4:29:F1:B2:A8:5E:C1:B7:AE:02:98:AA:A6:FC:B8:40:54:F9:1C
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer: /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial: 0104
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number: 0102
Signing time: Thu 05 Nov 2026 05:28:16 +0000
Manifest this update: Thu 05 Nov 2026 05:28:15 +0000
Manifest next update: Sat 07 Nov 2026 05:28:15 +0000
Files and hashes: 1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: r5aYACgRfXru85PGI1ilBfYikau9A4kIDQ6HOXKth7g=)
2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Validity
Not Before: Nov 5 05:28:15 2026 GMT
Not After : Nov 7 05:28:15 2026 GMT
Subject: CN=6aec13f0-3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:3c:a9:49:a4:f4:f1:2f:43:65:99:2b:7a:
d8:61:fe:ba:ad:f1:83:ca:44:d7:de:2e:3b:d0:d9:
96:40:f5:59:48:57:39:27:4e:05:1f:1c:df:3f:99:
d2:c5:62:41:58:0e:5a:b7:54:30:9a:cf:d6:5e:4b:
c8:a5:20:d2:96:86:1e:c5:89:61:31:13:b9:8d:36:
4e:d8:0c:53:1f:26:3a:7f:3b:34:9d:16:f7:20:52:
e7:c0:aa:ea:b6:51:0d:95:0b:bf:9c:4a:fb:b0:5a:
be:48:1f:02:cc:dc:f8:6e:85:98:76:c8:e3:3f:fa:
3a:2d:a8:54:fb:00:a1:46:cb:37:b6:a2:08:ab:9c:
e0:90:b6:f4:a5:b0:fd:80:50:91:43:cc:6a:51:9d:
aa:e8:51:68:ce:f7:60:33:77:47:20:88:b3:fb:cb:
c2:4c:f6:61:ae:64:1e:02:f4:e9:54:f7:0d:5c:96:
7f:4f:fa:46:83:fa:65:b3:9a:22:be:29:a2:e1:bb:
54:a6:33:6b:32:2e:01:36:4b:ca:2d:28:87:06:a0:
0b:4e:fb:85:4e:21:82:6c:f7:1e:14:e6:9a:a3:bd:
40:86:29:d4:44:e8:bb:84:a9:0c:1b:57:68:38:8f:
52:6a:7c:05:7a:9d:02:f4:5a:ac:e5:9f:c9:e8:ad:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:29:F1:B2:A8:5E:C1:B7:AE:02:98:AA:A6:FC:B8:40:54:F9:1C
X509v3 Authority Key Identifier:
keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:27:50:2d:d3:b9:56:71:b4:a7:db:99:f4:2d:c6:ed:0b:
04:52:cd:fa:be:0d:60:3c:10:75:73:81:5d:2b:83:fa:36:99:
71:c7:dc:04:e8:86:06:b0:8d:3b:76:61:9e:a4:c4:c1:e2:dd:
50:b1:1f:0d:87:5b:6c:78:30:ca:42:67:01:12:34:65:75:fa:
2d:bb:4f:37:dc:54:5a:9d:fd:6d:44:b7:28:61:67:2c:6f:89:
ac:40:75:cb:6d:7f:53:34:78:eb:e8:57:5f:f6:b3:b4:b1:1e:
2e:f5:ee:8a:f4:4b:67:54:b8:e6:77:a3:41:19:8f:0d:02:fc:
f5:4f:52:3b:89:c5:56:b6:96:73:42:27:35:3e:84:1e:f8:e2:
8d:1c:a9:b6:21:53:2c:21:45:19:a5:fd:c4:d4:9f:09:5b:7a:
54:43:1f:0a:71:d0:41:5b:af:11:0a:24:73:4d:da:56:c8:ed:
78:24:b9:6e:67:57:f9:93:89:22:6a:13:dd:2a:8a:dc:3f:4e:
61:7b:eb:ca:26:f5:34:3b:84:d6:c8:04:35:55:3a:af:2a:ad:
ff:d9:9f:6e:67:bc:78:b9:4e:41:76:9c:02:70:79:78:bc:9f:
b3:10:df:5a:17:8e:cd:ae:f4:3f:88:1f:2a:a4:42:13:f9:e9:
91:a6:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:28:06 2026 by rpki-client