
Error: rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
File: e-SeL48taNn-5zmG1EeTdhak7Yg.mft (raw, json)
Hash identifier: SrZWAbTubjVGJOOqUwwGdk0DQAFr6CC5/K5D0vf9lCI=
Subject key identifier: BF:68:61:D1:FE:55:0D:75:1A:AF:42:5B:34:45:02:4F:9F:62:94:D6
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Certificate issuer: /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial: 4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
Manifest number: 47
Signing time: Thu 24 Sep 2026 05:45:08 +0000
Manifest this update: Thu 24 Sep 2026 05:45:07 +0000
Manifest next update: Sat 26 Sep 2026 05:45:07 +0000
Files and hashes: 1: e-SeL48taNn-5zmG1EeTdhak7Yg.crl (hash: 0rhHdMRvrBz1i8bzj+83BuJUyKwI/ce4NCyqhPypIfc=)
2: 9E812784844911F1AC6FBF0FCF1D38B0.roa (hash: Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=)
3: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (hash: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Validity
Not Before: Sep 24 05:45:07 2026 GMT
Not After : Sep 26 05:45:07 2026 GMT
Subject: CN=6ab4b8e4-0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:88:09:b1:2b:6d:1b:79:44:a8:1d:d2:70:
38:e9:02:73:a8:d4:1c:f2:14:7e:6e:d6:be:33:4d:
a5:0d:9c:96:54:e9:97:e8:27:d0:45:2a:be:d3:ec:
ac:b0:cc:61:d7:ba:1e:73:45:33:7a:96:35:a7:ba:
de:78:02:63:7d:41:56:00:40:9b:db:1c:74:9c:b8:
2f:5d:80:26:f8:1f:69:e0:76:0c:38:29:e9:25:43:
7f:e0:15:ce:1a:2d:4a:34:c7:1d:9e:52:d6:7c:11:
9d:0f:a1:b4:f7:26:71:83:2a:de:4e:19:fb:24:d1:
d5:2e:31:1f:e9:97:4d:69:ec:4e:6c:dc:b0:64:1b:
86:79:a8:b2:31:d9:4f:32:ab:5c:35:2c:56:50:57:
83:54:4b:21:a0:96:68:aa:85:df:d0:31:be:6a:33:
4c:8f:1e:f9:33:b6:54:8d:1c:4a:dc:a1:01:0b:f8:
c4:49:fd:db:ba:df:8a:49:30:61:14:b3:38:e8:ab:
78:36:d8:16:14:cd:60:f5:26:17:67:e4:2e:0b:d3:
f5:54:9c:9f:57:3d:14:66:46:eb:a8:0b:cf:e2:76:
36:71:5e:df:d1:fa:f9:c5:9a:b3:cf:a9:41:c1:a5:
01:29:27:c9:c8:14:82:db:5f:8f:7e:2b:1e:5e:d9:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:61:D1:FE:55:0D:75:1A:AF:42:5B:34:45:02:4F:9F:62:94:D6
X509v3 Authority Key Identifier:
keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:ec:bd:5a:4b:90:54:2d:91:9a:dc:54:3e:10:96:ed:55:
0b:44:93:26:d9:50:00:7f:1c:5c:f6:40:13:c9:68:50:b8:0f:
3b:39:7e:06:71:98:74:05:74:00:37:9d:9f:b4:43:ce:e9:ef:
7f:78:ec:e1:b6:f8:14:26:59:70:e4:0c:67:28:3b:2d:a6:90:
83:f1:9b:1a:c5:a0:fe:df:c0:a2:90:cb:83:dd:51:20:82:96:
23:73:67:97:6e:db:9a:00:68:dd:2e:2d:3e:e0:e3:63:47:d9:
24:f7:b1:4f:80:a1:75:61:f0:e0:b0:ad:7e:01:dc:e4:c7:fe:
ea:f8:56:d0:3d:9b:f3:b0:3e:51:73:0d:2d:22:7d:f6:4d:c7:
9d:0b:a4:12:da:16:e3:7d:73:4b:44:f9:e0:b2:65:9b:c6:db:
f8:4c:ab:73:b6:07:c9:69:9a:8f:04:2b:2a:d0:74:65:44:b5:
ba:df:f2:23:91:d3:0e:fc:2e:2d:43:c0:4f:20:d6:f2:17:75:
2e:27:cc:7e:df:ad:0d:8d:cf:bf:24:87:10:ff:8c:e0:4f:20:
43:b7:18:5b:ef:f7:42:65:d3:c4:b5:d9:40:c4:d6:df:39:d1:
f5:2b:19:88:3d:14:0f:a6:c1:e0:1a:2d:7f:7c:89:cd:8e:cc:
d6:0c:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:36:43 2026 by rpki-client