
Error: rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
File: 987YXSGwvXEkGHa-mdUSbUx97jg.mft (raw, json)
Hash identifier: zaHAO8wzDgvmLeXDN10yA8sgh+0XN0k703PH9+zUq1E=
Subject key identifier: 2C:71:FE:65:5F:8C:42:21:26:DB:89:88:BD:05:5C:10:57:F4:DB:17
Authority key identifier: F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
Certificate issuer: /CN=F36CE8B2AF/serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Certificate serial: 7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
Manifest number: 79
Signing time: Sun 11 Oct 2026 05:42:13 +0000
Manifest this update: Sun 11 Oct 2026 05:42:12 +0000
Manifest next update: Tue 13 Oct 2026 05:42:12 +0000
Files and hashes: 1: 987YXSGwvXEkGHa-mdUSbUx97jg.crl (hash: 7YIssqsiTAZtiTPIWTBzBn84nlvbycjc4Lx0h7174ww=)
2: 9C6E6940689511F1AD703AD9CE1D38B0.roa (hash: hmEhInLBJqaLVuFHEkICSEwu/JjxJN7wyGooUYia0VI=)
3: 27FB1568689511F1BF4696D5CE1D38B0.roa (hash: P9r5NT+IZTNrBXf7H5zGZkcusZ81NCamIZY03jMTycY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 05:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE8B2AF, serialNumber=F7CED85D21B0BD71241876BE99D5126D4C7DEE38
Validity
Not Before: Oct 11 05:42:12 2026 GMT
Not After : Oct 13 05:42:12 2026 GMT
Subject: CN=6acb21b5-4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:17:f1:18:c4:3b:34:52:18:3e:31:8b:23:
d3:fb:ce:04:54:2e:a7:e2:4c:15:02:b1:8e:34:20:
eb:89:e6:f4:f0:ff:b1:06:d5:a7:ea:f2:66:4a:da:
7f:04:2f:9a:e9:36:be:e6:4c:6a:5b:25:c0:85:db:
12:ac:b8:82:a8:c4:3b:6a:52:6c:40:29:6f:cf:6e:
61:2b:9b:c3:48:cb:d0:6d:b9:17:e3:7b:bb:60:17:
a2:a8:cd:ce:7b:2e:e4:19:f9:7d:4f:f9:6f:81:03:
24:a5:0b:b0:58:ea:4c:06:82:6d:d7:c2:3a:53:61:
f7:8f:fb:94:c3:b8:3e:5c:93:21:f0:62:53:19:61:
d4:b6:be:21:7b:af:6e:3a:ad:99:67:5c:98:c5:d6:
af:9f:2d:ad:20:11:79:4a:6e:70:e0:90:7e:25:ac:
55:7b:5a:5d:a0:07:d9:52:30:f6:11:fd:6c:d3:4d:
1b:55:76:8c:fc:fa:ae:59:53:a2:1b:e1:07:57:f1:
47:98:aa:3c:3b:55:55:6d:a3:32:ad:60:64:fe:be:
ba:45:03:b4:c5:5d:12:78:db:df:59:b6:e7:84:c3:
3a:48:59:19:13:14:5e:7f:20:86:86:40:ce:4c:0e:
18:6b:83:22:ea:c2:19:37:56:bc:3c:01:99:1b:98:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:FE:65:5F:8C:42:21:26:DB:89:88:BD:05:5C:10:57:F4:DB:17
X509v3 Authority Key Identifier:
keyid:F7:CE:D8:5D:21:B0:BD:71:24:18:76:BE:99:D5:12:6D:4C:7D:EE:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/987YXSGwvXEkGHa-mdUSbUx97jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE8B2/3E68A182689311F1AAC682C9CE1D38B0/987YXSGwvXEkGHa-mdUSbUx97jg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:90:82:72:c6:f4:5c:32:8c:40:0b:f9:7b:19:40:83:d0:
5e:91:b4:0b:dc:76:4e:e4:76:22:b9:c3:a3:44:37:85:f6:42:
e9:06:d5:1e:cf:da:8b:f8:4b:f2:93:40:e0:84:c3:0a:16:2d:
cb:d2:3c:f8:93:dc:b7:36:1d:fd:cb:df:6b:48:72:9b:c7:26:
69:09:21:3b:a3:1d:11:e6:bc:8b:fe:da:92:fe:5b:c5:5f:76:
a9:dd:34:d8:57:75:c1:f2:03:79:7d:34:b1:be:cc:39:c8:06:
9d:29:06:11:de:ad:66:5c:f9:2b:39:83:ea:18:41:a8:45:5f:
e4:56:79:82:13:32:be:c9:8d:8d:0d:95:f9:77:82:22:0d:2e:
83:4d:5b:47:1b:f1:9f:32:28:91:a5:30:63:a7:e1:dc:56:6a:
93:1b:b7:07:c2:37:64:9b:43:06:01:67:34:e2:9c:ba:bb:db:
07:30:05:e2:a0:34:6d:21:83:c0:62:cd:c0:40:19:81:7b:70:
89:90:5e:b2:9b:a6:3e:12:f2:64:04:3e:3b:13:5f:0c:b2:51:
ca:ae:23:0f:1b:bf:5c:7e:f2:a3:f1:89:c2:24:ea:93:22:30:
32:9a:2e:e6:45:a0:e7:dd:7e:7b:f3:59:8f:9e:07:79:e2:d8:
c0:c3:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:34:47 2026 by rpki-client