
Error: rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: tir0xqQmvFnKVjQ+IwpFqV4LzveW47QPesHIkMM9peU=
Subject key identifier: C6:25:75:69:7E:A5:50:7C:B7:5C:4E:A6:0A:A9:0D:AC:1D:4C:61:43
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 03A8
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 03A6
Signing time: Sun 11 Oct 2026 04:07:59 +0000
Manifest this update: Sun 11 Oct 2026 04:07:59 +0000
Manifest next update: Tue 13 Oct 2026 04:07:59 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: g2fB8MIDRqm2DiNM42Ll6j7MzFD21G+dwK6m3HT0Inw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 04:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Oct 11 04:07:59 2026 GMT
Not After : Oct 13 04:07:59 2026 GMT
Subject: CN=6acb0b9f-7055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:b6:6a:0f:77:ec:02:06:ce:ac:0b:66:19:
57:80:ec:bd:dc:76:e0:1e:71:70:82:be:65:66:8d:
83:de:6b:79:87:79:ab:94:84:ef:fc:14:7a:9d:10:
fb:57:10:0f:83:66:7b:19:cd:ab:11:18:2a:54:67:
66:ea:7b:49:48:d3:36:ab:9e:9b:02:bb:da:e8:21:
dc:aa:db:43:7f:cd:d2:45:65:23:21:ef:c9:98:5d:
bd:92:95:f1:60:1d:15:2c:fa:95:7a:ec:0b:8e:18:
31:b2:fa:38:81:e2:0c:cb:f5:69:97:28:0c:b6:92:
5f:8e:e1:28:61:7b:d5:bc:3a:64:53:5b:fc:25:42:
13:82:3b:ad:36:16:b2:6f:19:5c:bf:71:a6:16:b7:
a9:34:6a:fa:d7:1d:2d:23:8f:ff:2d:ec:fb:83:c7:
2d:67:29:84:10:13:b5:53:64:68:f7:2a:cd:51:fb:
55:58:83:49:f2:e0:1e:97:a3:d2:ff:69:7f:f3:b3:
5b:12:d9:9f:a2:c9:4f:6a:5c:b2:63:40:5b:51:b2:
49:dc:ec:a1:3b:eb:ee:b8:52:79:b2:de:e1:5b:01:
d5:6c:72:c5:f5:0e:4e:35:8c:b1:b4:fd:a1:d9:c5:
83:9b:c2:1d:dd:7b:b7:f3:7f:06:5b:b8:b1:b8:22:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:25:75:69:7E:A5:50:7C:B7:5C:4E:A6:0A:A9:0D:AC:1D:4C:61:43
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7b:72:6b:a5:0b:e6:c3:19:4e:9a:f4:65:6f:4a:cf:b4:fe:
9a:90:bd:41:2f:1c:bd:f1:fd:a0:07:06:a1:38:e1:b9:05:25:
f5:a5:26:44:2c:f1:8e:0f:fa:4f:a7:7f:50:18:1c:be:ad:6c:
40:7f:6f:d8:31:0a:e9:1f:04:e6:0f:07:df:65:8c:25:cd:d9:
3a:b8:df:8c:6d:2a:74:67:f0:66:28:7b:99:f1:1c:f6:d7:c9:
87:8e:9e:a1:b3:7f:87:b8:e9:9a:4e:6d:4e:33:cc:d8:38:22:
a4:8f:7c:c8:7b:24:44:84:85:80:28:bf:b3:91:a7:38:54:5b:
52:32:73:8d:5e:77:59:63:44:d8:5c:b4:55:a5:3f:62:7c:74:
fc:15:3a:d3:18:06:4f:a2:8b:c9:d0:8c:1c:3e:f6:be:2e:36:
e9:c7:23:16:9f:90:7b:d9:e2:54:c5:4c:d7:aa:d3:8f:99:1c:
6c:a6:4c:95:7d:dc:ba:9d:66:0a:f9:c0:a2:68:4e:50:15:b7:
f1:6f:e3:74:6a:81:75:91:f1:8a:5d:b2:07:b6:92:d0:af:af:
09:e3:cf:31:f4:ea:50:76:fc:75:1e:4c:b0:49:fa:84:4c:16:
e2:88:21:d2:cf:cb:30:da:01:67:0f:d8:ca:ca:6b:50:20:0e:
20:a1:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:57:44 2026 by rpki-client