
Error: rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
File: 38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft (raw, json)
Hash identifier: HLCelsYO7P9nWpo2JMX45AnW+Y4GaEmEWypIaIkXkzg=
Subject key identifier: 53:5C:CC:84:0D:3F:C0:B9:95:5F:EA:42:05:CE:BA:55:49:2B:B4:FF
Authority key identifier: DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
Certificate issuer: /CN=F36D9331AF/serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Certificate serial: 70
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
Manifest number: 6E
Signing time: Thu 08 Oct 2026 05:39:49 +0000
Manifest this update: Thu 08 Oct 2026 05:39:48 +0000
Manifest next update: Sat 10 Oct 2026 05:39:48 +0000
Files and hashes: 1: 38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl (hash: dr6BvYWWhaFMwBJNS6JujCqwZ3QZnsDK9uf8iXzQXDc=)
2: 294373CC6F0F11F1819301F7CE1D38B0.roa (hash: ETMnfkYgdR0C9KWl5E+TZTv27PVluRefelvYjni0Gxw=)
3: FDC40B586F0E11F1BD52D3F6CE1D38B0.roa (hash: JvHfa8PbxLnLrnbEStFKCsSxCR5AFd3IjBiTnIAQW+Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9331AF, serialNumber=DFC07D56106D23ACFC7DD2D0E2ECB3924C7527D8
Validity
Not Before: Oct 8 05:39:48 2026 GMT
Not After : Oct 10 05:39:48 2026 GMT
Subject: CN=6ac72ca5-2a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:bd:b5:cd:e4:c4:0c:af:a7:9f:a7:c9:74:
a5:fa:34:e6:73:1c:0b:b3:ac:7f:98:e8:af:e8:87:
53:e0:7d:a0:05:27:9a:a4:a5:cf:a7:e6:e5:8e:1c:
cc:6a:34:45:ea:85:10:54:df:4d:c8:b1:5c:72:fd:
44:35:e1:4f:16:44:36:15:4b:5f:49:5d:bf:03:ce:
42:90:51:de:40:d3:e6:7f:ac:ef:0a:21:58:40:c6:
63:77:44:7a:11:ff:99:ad:58:2d:ba:47:66:5a:2b:
bb:be:c7:f8:f9:9b:c7:f6:27:bb:ab:5a:1b:ce:18:
62:20:46:e4:fc:ea:cd:28:50:34:67:d1:ea:d5:8a:
63:44:6c:da:13:b6:86:28:29:d4:1b:60:47:21:de:
36:eb:88:fc:2b:3a:8a:c3:5e:5b:74:3d:39:8f:ed:
c2:62:40:63:b8:66:14:be:0f:4f:ef:f3:36:b5:e5:
6d:5c:da:7b:6a:90:c6:07:6f:6c:0a:34:39:70:3a:
04:ea:98:df:71:c7:d0:67:bc:83:2f:32:a3:c6:c0:
6c:e3:48:ff:b5:5a:39:f9:b2:ef:b2:05:af:41:05:
e1:a5:f7:62:16:f5:3e:70:0c:35:99:d8:e4:55:e8:
72:c6:09:f9:f4:5b:63:5b:a7:2b:63:63:37:33:60:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:CC:84:0D:3F:C0:B9:95:5F:EA:42:05:CE:BA:55:49:2B:B4:FF
X509v3 Authority Key Identifier:
keyid:DF:C0:7D:56:10:6D:23:AC:FC:7D:D2:D0:E2:EC:B3:92:4C:75:27:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/38B9VhBtI6z8fdLQ4uyzkkx1J9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9331/DB66D3846F0D11F1BE4AF3EECE1D38B0/38B9VhBtI6z8fdLQ4uyzkkx1J9g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:45:f8:fe:85:d3:2a:58:a3:98:df:b7:3b:de:06:e5:a5:
3a:da:db:ab:10:b4:cb:08:27:bf:da:ef:55:33:ef:c2:4d:98:
19:46:d3:d7:c6:27:6f:5d:f2:38:05:cf:03:d3:5f:02:3d:0c:
2e:00:d2:9d:39:43:fa:38:97:5d:6e:6b:c4:af:3f:ad:80:3f:
2a:e5:2a:ad:af:3c:41:8a:84:8c:57:86:3a:43:5f:47:65:9f:
d3:86:8f:d7:7e:6d:b7:15:8d:d1:24:99:55:08:17:d7:73:87:
33:67:92:c8:a9:bc:00:4f:24:f9:bb:40:34:cc:e2:3f:7a:32:
6b:89:dc:65:87:4a:35:ee:29:f0:51:16:6a:33:9b:43:d6:c3:
9e:e1:bd:30:7f:1f:48:36:5a:f3:5f:b4:7a:41:65:7f:da:d3:
32:1c:2f:6c:3d:9a:dd:f1:40:8d:d9:cb:8f:bd:9b:b9:5f:46:
93:56:87:63:af:6e:06:cd:21:15:38:ac:0e:be:52:03:76:45:
7d:58:f0:82:c3:8e:a0:98:d2:53:4a:7e:f2:85:52:89:e8:9d:
1f:9c:c3:13:9c:ba:2a:3f:c4:c0:d0:bf:68:3b:7f:ae:12:5d:
d7:08:6e:e6:8f:08:3d:89:42:31:80:81:4b:64:45:de:c7:23:
c1:0c:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:29:09 2026 by rpki-client