
Error: rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
File: vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft (raw, json)
Hash identifier: iSacI9JYiVTWBsNDaM32L2DkGDSysVyId9gwT3DnjCY=
Subject key identifier: 4F:4D:AE:2E:3E:33:23:9B:1D:3A:33:98:F8:DE:93:EE:A7:FF:48:60
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Certificate issuer: /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial: E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
Manifest number: D5
Signing time: Tue 22 Sep 2026 05:29:25 +0000
Manifest this update: Tue 22 Sep 2026 05:29:24 +0000
Manifest next update: Thu 24 Sep 2026 05:29:24 +0000
Files and hashes: 1: vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl (hash: Uomnm31pEn0LNOKRaVNPny/Q9MCwlkjBKA+3qPonvm0=)
2: 5F3F870C33ED11F180E878B3CE1D38B0.roa (hash: 7xialWnZN8O/jx++FVBr1LOwRlL8Ft6W6YRIeco4BCA=)
3: 12854A54342011F1B1B3FEE3CE1D38B0.roa (hash: pT0m2gWKIGIqpxCq5RWYoGgM1OEZ3jmMFyars3Vkhlo=)
4: F468593A341F11F19237EFE3CE1D38B0.roa (hash: T7CbuXXhwxyEGnxPwVGgVjsxTM/k3t9lVyPY1e3Aq94=)
5: 1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa (hash: sbb9mXyfSj61UJjWbJwXmlAFr/cOrxQfzXZS3BVT1Ro=)
6: 35DF2FE833ED11F1B4145AB3CE1D38B0.roa (hash: A48YMHhA/dlybkCnRzYsuhf4oJk2hDb9PCemlafemBw=)
7: 861B94CE33ED11F1965390B3CE1D38B0.roa (hash: TggDZn/6+km0NmiNN9k3nE6i0CGJCXgqnNH4Fo/DA8k=)
8: 6478E0A0342011F191BE0FE6CE1D38B0.roa (hash: emC7GwLX61xHhM+cBfiU05CVWHA3VSY3bML+vXnttf4=)
9: D1FF3C60341F11F19A2BE6E1CE1D38B0.roa (hash: vlPWuJWoU9zTLPDgIJQsQdOrVIdbzbVOA1ve9uoqz1A=)
10: 3DF747BE342011F1A6EBDFE5CE1D38B0.roa (hash: 2JX7YfxLCoLtjBk/3MPBmLjpXRWBo37oy7tpgRQ6qiw=)
11: AA5B87D633ED11F181BB97B5CE1D38B0.roa (hash: 6Pd+u2gjjm+VgsR8IN1iRrAHY/KiGxo4zHwnk5HLQNY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Validity
Not Before: Sep 22 05:29:24 2026 GMT
Not After : Sep 24 05:29:24 2026 GMT
Subject: CN=6ab21235-de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e3:27:33:c4:79:8c:af:2e:2c:33:c1:79:71:
d9:cf:1a:a0:7c:0f:e9:68:42:6b:95:5b:59:31:42:
94:61:a0:8b:b0:6b:45:62:cf:f0:23:bc:a1:ff:68:
b7:35:a9:22:84:d6:ed:07:39:a2:83:0b:0f:bc:83:
90:79:63:fd:8c:a7:46:37:2e:69:3a:8b:3e:7d:cf:
e0:27:90:e7:79:b9:1b:9b:b4:63:16:d5:4b:93:4c:
6f:b3:7f:b0:c4:e4:b0:a2:a7:e3:e1:50:3c:03:fa:
09:3e:9b:8f:d9:12:7d:78:3e:ba:00:3f:46:96:e5:
35:0b:67:42:29:41:63:aa:52:1c:42:db:77:41:1f:
5d:9d:7e:1a:8c:0f:e8:2d:0d:8e:35:d0:96:2d:dd:
f5:f6:75:8a:13:05:9e:d4:22:f1:13:64:b3:86:79:
04:da:28:d7:41:5d:1f:81:0d:3b:21:d2:05:dd:14:
c3:9a:1f:9f:a7:78:76:e2:47:a0:43:9f:04:8d:45:
b9:14:07:34:28:c8:68:30:85:c5:b4:40:5f:f3:2a:
fb:ec:fb:71:35:22:57:75:4a:6e:bc:b9:11:a9:a5:
b8:aa:35:96:03:54:56:b5:93:de:06:53:ce:5a:32:
5c:99:7e:a8:17:2f:0a:72:ab:de:9f:9f:0d:4a:d9:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4D:AE:2E:3E:33:23:9B:1D:3A:33:98:F8:DE:93:EE:A7:FF:48:60
X509v3 Authority Key Identifier:
keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fc:5e:df:e2:58:ff:3e:8d:fc:18:6d:fb:4b:64:6c:74:66:
f6:42:8d:ce:be:51:a7:a8:b9:91:0f:d4:73:ab:03:6b:96:a7:
90:92:6d:94:70:59:3d:69:9d:15:16:fc:3c:e9:23:f7:9b:4b:
73:ee:3a:dc:c3:6a:b5:a0:3e:53:67:d3:fb:b6:bd:07:55:1a:
10:22:a9:f4:4d:94:5e:39:b1:1b:09:34:b6:8a:d8:c8:4a:84:
fd:c8:dc:9c:41:8e:c0:7f:bf:99:73:fa:a2:25:28:ca:2c:dd:
e9:6c:10:fb:08:d3:a3:c2:e8:5d:c1:fd:8e:5e:f8:da:e5:24:
e4:5e:de:71:0e:31:66:6b:45:8e:c5:23:3f:ef:2d:89:d0:f1:
7f:79:ce:b3:75:17:9d:d4:bd:d8:a2:40:26:13:46:4f:ce:4f:
d6:e1:f5:47:24:78:87:17:6e:e0:97:5f:99:ca:ab:d4:56:81:
1d:d2:6d:36:c5:e8:06:5a:d6:88:1f:fa:a8:ac:15:d8:b3:55:
7a:48:61:6b:d0:81:9a:cc:97:15:6d:4b:6b:94:7a:53:a3:c3:
af:7b:6c:cf:a7:17:c5:3c:0d:ff:4d:04:ed:f7:5b:44:ca:e5:
d3:8f:58:7b:05:e6:15:f0:7a:bb:a1:51:ad:fa:f5:ab:f1:a4:
0f:1b:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:16:22 2026 by rpki-client