
Error: rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
File: QOQ11_MUFa_OV9DelQm3hi-WClc.mft (raw, json)
Hash identifier: rNhTmLkKcpuiuQRbQPX0QKRjS2vd2T10BdkGyZ/ao88=
Subject key identifier: B9:95:7E:B2:D0:60:44:58:E0:BE:99:4A:03:05:DA:6C:A7:71:71:10
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Certificate issuer: /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial: 0AD7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
Manifest number: 0AD4
Signing time: Sat 17 Oct 2026 01:20:59 +0000
Manifest this update: Sat 17 Oct 2026 01:20:58 +0000
Manifest next update: Mon 19 Oct 2026 01:20:58 +0000
Files and hashes: 1: QOQ11_MUFa_OV9DelQm3hi-WClc.crl (hash: BIDE+TLU523xGhqrOI4dE/TuWZxfFYGqPCz2Vw6AOeA=)
2: DD1E8AE47BAB11E98D80B33FF8AEA228.roa (hash: BTzcxln9lknQk/0gio9sglyD4baCdk8/WR9c29o94Hk=)
3: 881335FA7BAA11E9A046BD3EF8AEA228.roa (hash: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=)
4: 54220D207BAA11E9BEE08A3EF8AEA228.roa (hash: 6mAfvCPcBikixr82UHSocOCucUOi7FCh+gOmIS/+gHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 19 Oct 2026 00:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2775 (0xad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Validity
Not Before: Oct 17 01:20:58 2026 GMT
Not After : Oct 19 01:20:58 2026 GMT
Subject: CN=6ad2cd7b-4814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:47:f3:7a:b2:fc:75:b6:3d:cc:c4:de:b6:
b8:fa:80:1f:aa:d5:d2:fe:25:59:41:8c:02:4b:97:
0d:10:21:60:4e:98:44:7c:e7:9b:aa:1e:ce:b4:03:
d9:46:e5:ee:0b:d8:7a:a6:7a:48:28:31:64:8f:89:
56:d1:26:b9:00:b5:6d:e3:ab:59:ca:10:74:b2:18:
3e:ef:5d:dd:49:b2:f2:11:e7:54:a6:ff:15:98:1f:
14:c2:19:01:68:1e:bf:40:a3:64:3c:64:26:1f:2d:
74:ec:96:c8:58:2c:0f:68:fe:19:ed:8d:9a:8c:d2:
42:27:58:3c:ef:55:28:6c:69:b5:15:b4:5b:bc:d4:
59:5d:5c:a6:bb:8e:8a:18:fa:e9:34:0b:f5:16:c5:
47:8e:d9:d1:93:53:39:69:6c:09:9c:3b:f6:13:77:
65:03:1d:33:28:c4:8b:3e:94:5b:99:2c:6e:8d:eb:
02:fc:62:03:1a:c6:c3:50:8b:94:0d:22:8a:7e:e7:
bd:7a:ea:eb:c5:14:2b:c2:92:90:1c:f5:b9:cb:af:
d7:3a:6b:9d:7c:45:35:f1:3c:66:68:00:1d:49:14:
b9:39:23:66:f1:68:c6:0e:93:56:06:fa:f0:b6:16:
9c:9d:0f:90:8f:02:18:e8:ed:18:92:ef:eb:b8:7b:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:7E:B2:D0:60:44:58:E0:BE:99:4A:03:05:DA:6C:A7:71:71:10
X509v3 Authority Key Identifier:
keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:8a:4a:56:21:94:4f:87:56:f9:9f:af:6c:70:9b:0a:0b:27:
98:6d:9b:3b:39:87:08:00:5c:82:6d:a8:c1:4f:51:97:e5:a5:
b7:2d:48:7f:fa:df:7e:d3:12:bf:05:52:29:e3:1d:36:f9:8d:
84:f6:29:27:66:a1:8d:75:f6:df:b0:02:5c:89:30:22:22:fa:
7e:c9:b5:41:e7:11:63:61:31:c0:4a:6a:24:2c:ed:06:b1:fa:
61:c0:ea:8e:2f:c2:d6:06:b9:33:b6:a6:b4:5b:c6:51:f1:ed:
e4:4e:62:a2:46:93:99:47:72:8b:2e:71:62:71:a4:ec:d1:d6:
01:a8:60:2e:03:47:8c:84:e4:33:67:68:e3:b7:4f:61:bc:10:
60:d2:8d:d1:b1:c6:d2:07:b5:be:4a:f2:dc:fd:ff:89:06:f7:
7e:bc:94:54:fe:d4:5c:d8:a2:19:f6:9c:16:fc:30:3c:9b:bf:
97:05:e7:4d:91:bf:0d:32:1c:bf:cd:18:8b:44:f5:8b:95:be:
7b:e4:de:b5:8d:09:3c:31:0b:3e:7f:ee:89:36:7f:b1:9b:6b:
57:d6:e5:8c:ab:81:42:47:f8:b6:9c:54:ed:73:0c:52:8e:f1:
96:c6:e1:90:84:87:ff:6d:d8:42:7c:d7:e8:bd:b1:29:c2:27:
5b:b6:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:51:56 2026 by rpki-client