
Error: rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
File: QOQ11_MUFa_OV9DelQm3hi-WClc.mft (raw, json)
Hash identifier: d0kl/HildrU82/2BOATbpBD3VEwDQfl5fF1ty6/pV3A=
Subject key identifier: 7B:50:44:F6:74:82:67:8E:AF:28:68:BE:12:FC:B2:D1:36:2D:25:EC
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Certificate issuer: /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial: 0AD5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
Manifest number: 0AD2
Signing time: Thu 15 Oct 2026 01:21:15 +0000
Manifest this update: Thu 15 Oct 2026 01:21:14 +0000
Manifest next update: Sat 17 Oct 2026 01:21:14 +0000
Files and hashes: 1: QOQ11_MUFa_OV9DelQm3hi-WClc.crl (hash: wzu7V5SYL72QyzH4xvkL2YkeNx0cnXyctPcFRJZogTI=)
2: DD1E8AE47BAB11E98D80B33FF8AEA228.roa (hash: BTzcxln9lknQk/0gio9sglyD4baCdk8/WR9c29o94Hk=)
3: 881335FA7BAA11E9A046BD3EF8AEA228.roa (hash: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=)
4: 54220D207BAA11E9BEE08A3EF8AEA228.roa (hash: 6mAfvCPcBikixr82UHSocOCucUOi7FCh+gOmIS/+gHs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 Oct 2026 01:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Validity
Not Before: Oct 15 01:21:14 2026 GMT
Not After : Oct 17 01:21:14 2026 GMT
Subject: CN=6ad02a8b-b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:e2:2b:41:fe:fb:5a:a5:9a:12:50:61:e9:
30:24:d0:b5:a5:f9:17:19:cf:0f:8f:7a:c2:1e:52:
97:a1:81:48:74:aa:c1:89:be:70:9f:70:3a:72:3b:
f8:c9:30:1a:16:ef:81:ec:1f:24:db:bc:68:1f:0e:
ec:05:18:31:06:45:b5:a7:9d:86:fd:48:cb:40:8b:
f9:b3:15:c3:34:c0:83:ae:89:b7:e0:4c:27:fb:09:
ff:81:fd:74:3b:33:65:73:f6:58:c6:3f:19:48:b3:
a0:1d:23:63:09:92:55:25:60:4d:8f:70:0d:62:79:
27:00:82:01:61:6c:14:eb:11:2a:57:44:f7:02:48:
3b:1f:a6:fd:3f:41:84:07:ea:97:09:8f:8e:46:37:
bd:16:d3:d3:56:cb:a1:84:97:a7:ac:be:55:c1:30:
7d:b1:e5:a1:15:0b:ad:6e:98:91:5b:a4:e9:a3:bb:
8c:3d:0e:72:ad:2b:67:9d:89:31:70:9a:b7:26:7c:
28:11:27:bd:15:29:d0:2d:f2:ab:43:a6:69:08:a6:
dd:a8:cc:42:a5:fa:90:a9:8e:23:19:6e:9e:94:ba:
6e:45:ea:69:15:c7:d0:73:35:e1:be:12:1c:d4:6e:
74:0b:85:f3:5f:76:5a:a8:03:4c:10:f3:2c:00:1a:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:50:44:F6:74:82:67:8E:AF:28:68:BE:12:FC:B2:D1:36:2D:25:EC
X509v3 Authority Key Identifier:
keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:c8:38:c4:81:46:1c:29:6f:33:04:78:31:47:e4:a8:17:
ad:76:90:ce:5c:29:18:e0:90:7a:51:58:44:2e:3d:a3:af:49:
d0:0d:2a:4b:a4:72:3c:79:63:7b:bd:d8:71:9d:28:c6:b5:f5:
05:89:ad:11:7d:59:72:4a:7c:7f:f2:12:d1:e7:86:5d:0e:85:
cb:b8:ce:4f:a1:96:28:02:41:25:53:df:96:5e:76:d9:bd:d5:
60:08:52:a4:a4:ae:55:df:46:2d:1e:a7:ab:23:4b:3d:32:5a:
40:40:01:67:ec:3d:d0:2c:00:00:48:0e:d3:fe:01:84:4d:53:
f5:17:1a:9a:8d:42:3e:a5:26:ab:65:d0:82:6b:51:c8:78:22:
4c:1d:e5:8a:e3:2a:29:2a:49:05:36:86:44:db:94:fe:53:e4:
ed:6e:0e:0a:dc:4b:40:a3:83:06:23:de:78:73:72:e9:88:4c:
a1:08:56:d1:6a:fc:f0:b8:61:2d:9c:96:9a:8b:db:2e:dd:62:
c9:3b:37:25:90:c9:c3:6f:fe:e0:c7:51:7a:71:e5:94:04:46:
66:34:3d:13:65:08:9c:e6:a7:29:11:dd:fd:e8:4d:98:d7:1a:
7b:d2:27:39:f8:53:49:39:3f:6f:99:fb:1f:07:08:50:5d:b7:
da:52:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:16:26 2026 by rpki-client