
Error: rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File: v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier: DOhkdktniyxcbs52Yg48C/KwUseoDQ8mCBB1mmA/it8=
Subject key identifier: F0:36:F7:5F:A8:C0:73:D8:01:A9:E9:F0:6D:31:08:2D:01:B1:3E:B2
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 072F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number: 0727
Signing time: Tue 22 Sep 2026 02:30:24 +0000
Manifest this update: Tue 22 Sep 2026 02:30:23 +0000
Manifest next update: Thu 24 Sep 2026 02:30:23 +0000
Files and hashes: 1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: SLw+V7GMo+qldLybmR7S9Hv+6Bo1Ws+4NGXhU+Yub3c=)
2: C22CE7B8848211EFB04104A3762E951A.roa (hash: UvSKfzbPPPDmh9qt5fUcWRDz2kLL0/oUIRFROj/013Y=)
3: 8922B3068A5411F18CA202F9CE1D38B0.roa (hash: l7tujZrecd0pm3b6zD0UYp8LyARkv2XxQVA5DhrewW8=)
4: EC73A322848211EFA35B4DA3762E951A.roa (hash: E9n0BXdEdCO4VUpJ00TALsQfI4M1cW8WL9kQTleR3iM=)
5: 4FE58CA0848211EFB21CDAA0762E951A.roa (hash: hT4mSK8j0yF0krAa2/n501dY/MbNiSKbpGMw/g08dhw=)
6: C6263998848011EFAA998A96762E951A.roa (hash: 7pLiVykcpNB61b9uTOfPQKtdMaNQfNXZhZHjF5fDR2M=)
7: FD442A68977511EFAFDE5CA6762E951A.roa (hash: jCYhuEuX8SeXpiy1mcrGpnTn+Pm2iMoNn/fsKbfF3rg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF, serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Sep 22 02:30:23 2026 GMT
Not After : Sep 24 02:30:23 2026 GMT
Subject: CN=6ab1e840-34c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:39:1d:04:6d:24:bc:ca:8f:22:df:66:8a:
a2:29:dc:3c:86:8a:ec:a8:1d:b2:44:2d:28:09:b4:
30:9e:30:a3:8f:75:1a:96:a8:ee:b4:c2:6c:1a:4e:
f5:09:77:59:f3:09:6e:cf:3b:a8:fd:f3:aa:a9:5a:
b2:4b:75:5c:de:af:16:2f:b7:b4:37:73:85:c7:0f:
0b:a0:79:e3:26:ae:eb:1e:29:99:c3:06:34:a1:f2:
fa:e5:5b:a3:98:c2:d5:c7:28:95:e7:31:a2:b6:4b:
a3:1f:bc:fd:08:76:5d:3d:de:25:10:6f:3e:26:a0:
06:ac:f0:03:37:8b:10:96:4d:3b:a6:b5:b4:35:19:
84:46:f7:f9:86:26:ca:ef:c3:6f:ea:78:bd:8b:c9:
68:88:46:74:40:38:76:a8:15:8c:5b:4e:02:83:5f:
67:f8:a6:02:5d:3b:2e:fc:ac:ca:a0:d1:db:e0:e2:
cb:08:af:13:1a:a2:eb:b0:a7:5c:9d:0e:12:5e:bd:
46:44:96:91:54:49:25:fe:15:18:92:1e:69:07:a2:
5c:56:d5:a6:77:2c:18:29:99:fa:75:a1:9b:25:43:
20:d6:64:35:59:1f:ca:c1:42:08:0c:3c:21:cf:b6:
ee:8b:40:4a:f3:cc:90:c1:06:0a:86:a9:5e:97:c5:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:F7:5F:A8:C0:73:D8:01:A9:E9:F0:6D:31:08:2D:01:B1:3E:B2
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:a7:6f:3f:ef:df:58:bb:fa:96:71:06:c7:7a:e7:c0:d7:e1:
6a:0e:bc:a7:e0:fd:1d:7e:7d:66:de:e1:e0:6f:fb:e0:8e:f7:
5a:8c:88:1f:11:ec:d9:4b:bb:0c:b3:93:3b:7c:14:3b:5d:d8:
b4:24:a0:62:5a:d1:13:f1:4b:74:e6:d0:0e:65:09:32:a5:0b:
0e:fc:cc:f3:97:db:82:3d:67:91:02:97:f7:66:29:07:99:c4:
9f:ff:c7:83:c2:f5:a0:2d:dc:ab:7e:06:eb:2b:90:e7:47:6b:
06:7c:99:db:5e:e6:4b:4c:84:8f:cd:c3:d6:f2:85:60:27:c0:
25:ba:ab:bb:3b:96:35:a1:66:12:3a:b0:36:0a:7f:7f:b9:80:
b0:e6:19:e3:df:30:72:be:8f:73:a6:8e:98:17:d7:6a:d0:d1:
92:77:ee:87:f1:1f:d1:69:2b:8a:d1:6c:2c:0e:3e:72:3e:1a:
3d:a0:b9:16:8b:fa:04:20:3b:e3:70:cc:21:d2:3a:94:39:ca:
b1:12:64:6b:9f:14:19:1e:e9:bb:06:22:86:e3:9c:15:be:e4:
f2:c5:c7:78:c0:42:6a:49:f7:e6:ec:da:ea:c3:5c:b3:1c:6f:
62:f7:16:99:7b:14:23:d9:74:62:4d:bf:6a:e7:4d:6a:26:39:
ae:2c:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:15 2026 by rpki-client