
Error: rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
File: nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft (raw, json)
Hash identifier: YQKM/HuXqCZAEpMFsUybQsjwNd22jnXykm+H4o9Mu6s=
Subject key identifier: 53:95:91:48:6E:B8:90:F0:96:97:B5:75:CA:80:EA:C8:3B:3B:DD:9A
Authority key identifier: 9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E
Certificate issuer: /CN=F36D9927AF/serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
Certificate serial: B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
Manifest number: AE
Signing time: Sun 20 Sep 2026 05:32:13 +0000
Manifest this update: Sun 20 Sep 2026 05:32:12 +0000
Manifest next update: Tue 22 Sep 2026 05:32:12 +0000
Files and hashes: 1: nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl (hash: 1418MHsZUndaw7QkaxBLdyb9AuH/a/0f/86dDPZP8ws=)
2: B60F2378335A11F18E8191B1CE1D38B0.roa (hash: PSeiG4gCj8s4yIE58jv3DbNRgxuPJSXI1vD2+d6k2Yc=)
3: F278A9C4335A11F19639E4B1CE1D38B0.roa (hash: UU0V0NfzzH+dIdfJ5GgUO+sS3Xy/jBQNuHs7Gk+oVuE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9927AF, serialNumber=9D6F817CFEDF6BD09D9A4A965E148E60506F3A6E
Validity
Not Before: Sep 20 05:32:12 2026 GMT
Not After : Sep 22 05:32:12 2026 GMT
Subject: CN=6aaf6fdd-6ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:a9:df:57:dd:15:83:75:72:c6:69:e4:8f:
94:56:e1:47:61:c3:52:71:ca:2d:d1:07:21:e8:a2:
83:46:31:b0:51:e8:c8:34:69:ea:d6:35:13:2a:10:
ed:89:fd:e0:e0:e0:16:e1:73:0a:e7:46:6f:59:66:
d3:ce:4d:e1:a1:dd:16:87:d5:42:ae:3b:bc:8e:3b:
e1:c4:52:77:39:12:91:e0:ad:bf:28:76:64:19:9a:
69:23:2d:04:ef:b4:14:88:c0:c2:3c:4b:9c:5b:47:
6b:1b:2a:e0:fc:83:ff:0d:f3:18:4b:bb:0e:0d:6a:
ab:3a:59:25:7e:44:65:fe:3b:c7:99:46:f0:2b:61:
f7:20:36:6f:f7:07:87:8c:d0:d9:29:f0:61:3d:be:
1f:c4:7b:4b:c0:85:48:9a:e3:71:21:f3:ac:7f:21:
57:76:97:fa:3f:4e:40:b7:7d:8d:03:2c:0e:04:ca:
da:23:fa:5c:1e:67:04:44:a0:b3:91:a8:fb:d2:06:
7c:6f:59:bc:bb:1a:2d:d4:ba:1d:7e:7b:10:d7:d5:
f5:f2:bc:8d:e0:82:fb:8e:bb:7b:81:69:27:71:36:
d3:16:bd:3f:72:dc:08:4e:3b:4f:99:52:03:66:ee:
11:d5:48:7a:c5:39:e5:2c:de:55:70:84:3f:be:32:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:91:48:6E:B8:90:F0:96:97:B5:75:CA:80:EA:C8:3B:3B:DD:9A
X509v3 Authority Key Identifier:
keyid:9D:6F:81:7C:FE:DF:6B:D0:9D:9A:4A:96:5E:14:8E:60:50:6F:3A:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nW-BfP7fa9CdmkqWXhSOYFBvOm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9927/70C37DE4332511F1B78D32F3CE1D38B0/nW-BfP7fa9CdmkqWXhSOYFBvOm4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:78:6d:11:79:d1:50:fc:6a:9e:61:05:06:18:86:83:91:
24:18:af:48:ba:dd:3f:23:ae:de:e4:e0:9c:a6:f0:f6:87:b8:
ec:32:44:10:f9:0e:bc:ae:98:bd:39:4a:d4:b0:f2:23:cf:dc:
81:5b:2c:00:35:1a:d4:70:da:e8:4a:06:3d:4a:38:85:e3:89:
8c:14:b9:89:93:8f:5d:1c:53:8a:5c:e6:5c:1b:c9:90:a6:8d:
06:24:cf:4c:96:27:71:d6:f8:74:6c:c3:61:2b:a8:07:33:3f:
32:4f:b5:bb:44:8f:ab:e9:53:5e:10:af:9d:8a:3e:07:55:f1:
82:ac:df:ae:2f:e1:5f:61:bc:49:61:e6:60:f2:2a:7d:fd:e9:
cd:1e:54:96:9f:b9:21:4d:2b:88:2e:71:51:74:43:11:e7:52:
a9:cb:49:55:9a:46:02:59:ae:5a:d1:45:ee:d9:1a:d0:69:f9:
60:cb:3a:4a:6c:cf:1e:1b:18:db:b5:2c:ed:a5:60:4f:de:98:
e7:86:af:d5:02:51:ab:94:38:52:77:81:93:03:c2:23:1d:27:
40:04:f7:eb:4e:51:d7:d7:39:ed:5a:7c:0d:08:5f:3d:cd:e4:
f9:4a:17:8d:44:35:5d:fd:bd:9d:7a:80:e2:98:5f:06:17:9e:
0a:bd:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:06 2026 by rpki-client