
Error: rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
File: 8N_7--IrTkOYavhggOjb0m5nNXs.mft (raw, json)
Hash identifier: 3l9D3t/nX5VfuHqKOkk7TV2/JmTpRz59jaHWwZDtA4M=
Subject key identifier: 12:13:2C:58:A3:11:A8:ED:41:55:D4:05:42:27:38:0F:72:01:EA:8D
Authority key identifier: F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
Certificate issuer: /CN=F36D104BAF/serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Certificate serial: 0561
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
Manifest number: 055F
Signing time: Tue 22 Sep 2026 03:11:34 +0000
Manifest this update: Tue 22 Sep 2026 03:11:33 +0000
Manifest next update: Thu 24 Sep 2026 03:11:33 +0000
Files and hashes: 1: 8N_7--IrTkOYavhggOjb0m5nNXs.crl (hash: oDOCg6z0s3N6ocYKx2py6tbcGoCHWq2DDB2A4QG7lgU=)
2: 18CE3D288CB111F1A69A35EFCE1D38B0.roa (hash: yuw9SqaSji82whOI34XNHPNvtvPwM5dKKS7KbN+aLMk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1377 (0x561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D104BAF, serialNumber=F0DFFBFBE22B4E43986AF86080E8DBD26E67357B
Validity
Not Before: Sep 22 03:11:33 2026 GMT
Not After : Sep 24 03:11:33 2026 GMT
Subject: CN=6ab1f1e6-1e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:7a:f2:cd:4d:89:5c:25:e4:64:79:77:ae:
1f:43:f3:3e:a8:a9:48:a2:aa:93:c0:f2:45:9f:5b:
1c:de:63:4e:ba:b2:21:4f:b6:65:af:a8:4b:01:5d:
ed:fa:e4:f8:96:31:73:2b:d0:1a:e1:73:62:69:40:
67:b0:ab:bf:44:95:fa:97:78:8e:47:71:45:49:f5:
dc:81:60:30:7d:2c:84:95:85:41:a6:b4:c4:61:7a:
2e:8f:34:c4:e2:3f:72:8a:43:75:37:09:e0:34:9b:
4d:29:a7:10:4e:80:d5:ce:45:03:cc:3f:62:f1:24:
0a:79:20:7e:96:18:bc:d5:00:5d:19:ca:fa:82:35:
1f:64:b5:f4:d4:cf:86:6a:4b:26:81:99:ca:7a:68:
2c:a1:f0:b7:dd:90:3d:01:8d:5a:d9:d7:3b:e3:23:
b5:cf:7a:ac:8a:56:b8:c2:d3:a5:ee:27:a0:fe:44:
a4:66:8a:5d:4e:56:e9:38:15:a6:5e:e2:63:e6:64:
61:86:76:11:33:e2:9a:0e:00:00:6c:4b:5c:b6:48:
30:16:6b:39:91:68:8e:55:d1:84:2a:d8:01:85:47:
c5:e3:32:cf:29:c7:59:74:b0:2a:5c:ab:ae:82:57:
fd:df:da:dc:e5:a3:26:d4:17:a9:72:20:89:2b:aa:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:2C:58:A3:11:A8:ED:41:55:D4:05:42:27:38:0F:72:01:EA:8D
X509v3 Authority Key Identifier:
keyid:F0:DF:FB:FB:E2:2B:4E:43:98:6A:F8:60:80:E8:DB:D2:6E:67:35:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8N_7--IrTkOYavhggOjb0m5nNXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D104B/6977A4BA9BD511ED9F8809CCF1222468/8N_7--IrTkOYavhggOjb0m5nNXs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:49:c6:bb:3b:1b:77:d7:d4:e1:ce:62:7a:fa:49:5e:e8:d2:
f0:d2:0b:83:33:8e:15:1a:61:ab:6c:a1:27:87:77:74:d4:a2:
5e:63:98:bb:1f:d9:28:0c:79:a6:7e:e0:2e:24:9a:e2:fd:04:
84:a3:2e:9b:6e:81:f2:e7:cd:fb:2c:3d:d2:e0:1c:b9:74:f1:
56:54:14:ac:08:62:b3:6b:81:d2:18:60:1b:88:c1:cc:6e:c8:
8e:ae:94:c1:04:c9:e6:a4:a2:98:53:59:a2:c7:e9:f5:22:e8:
1f:25:fc:b8:57:67:af:f1:c5:80:7a:a7:5c:da:d7:cf:a9:40:
96:f2:74:f4:28:1f:fe:ec:ea:5a:2d:0d:a7:12:e0:8f:20:6a:
55:3e:f7:03:55:bb:88:f5:bd:7f:a7:ad:2c:6a:ad:8a:1d:0d:
98:ac:f6:26:72:f4:be:40:53:ef:2c:09:33:9a:75:b6:69:1b:
07:e5:78:a2:eb:9c:7f:14:99:d1:e7:1f:61:77:ab:e6:ec:11:
14:07:76:3a:b2:77:e0:7a:28:bf:8d:16:dd:5c:0d:29:2b:fd:
8d:4b:fa:8e:d1:ad:96:8e:22:49:80:2a:e9:29:cb:1a:84:af:
fd:22:9c:27:ef:a5:b9:4d:77:dd:36:13:a2:58:94:ab:f7:ff:
0a:e4:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:08:51 2026 by rpki-client