
Error: rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File: YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier: gWOUfjVYCLkcL3i/LrRTwPWSwspPmr8rLugZq3NYl6E=
Subject key identifier: 57:FC:5C:DA:E6:82:94:E7:B3:0F:AB:2D:3A:0E:53:4B:BD:F2:E2:31
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 069D
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number: 0694
Signing time: Mon 12 Oct 2026 02:42:29 +0000
Manifest this update: Mon 12 Oct 2026 02:42:28 +0000
Manifest next update: Wed 14 Oct 2026 02:42:28 +0000
Files and hashes: 1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: QTG+140lwIdjxNpngLvBfRmHlA0O85kzjfynLDxCzCU=)
2: 8E8DDE1C6FD111F1A724E610CF1D38B0.roa (hash: 1KMlFaEajdNRT3rBNkJK3leEidm1bkbbNhMaz2bl61o=)
3: B715016C631511F18D69FFF3CE1D38B0.roa (hash: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=)
4: 0201DC14657711F1B151DFE6CE1D38B0.roa (hash: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 00:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Oct 12 02:42:28 2026 GMT
Not After : Oct 14 02:42:28 2026 GMT
Subject: CN=6acc4914-3082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:1c:d2:dd:2d:ce:31:a7:5b:2b:cc:3f:9f:
7e:c3:33:3a:b4:84:f0:6b:f5:85:32:05:0a:e4:a6:
ed:1c:2f:7e:37:a7:d8:04:24:40:73:5a:c8:b5:4d:
df:91:da:28:19:24:0d:0f:fd:ab:06:cf:3d:d0:e8:
35:38:0d:4d:aa:95:8c:78:e9:b9:52:cd:55:b5:5b:
37:e4:74:02:ac:8f:32:96:5c:df:84:5c:51:c9:96:
a1:b9:66:96:77:2c:0c:a0:38:a6:64:24:92:8e:f1:
64:8f:bb:37:e5:82:1a:33:7c:8b:a0:7d:74:8c:0a:
83:79:d9:e8:51:19:05:55:09:e5:ba:44:52:0f:26:
43:22:31:68:5c:6d:ff:b7:ca:16:2e:fd:09:0d:ba:
60:a4:4f:20:94:82:9e:9c:7b:71:fc:9b:de:0b:3d:
01:a2:27:9f:15:d9:bd:75:4f:ee:19:c7:9e:99:20:
4d:f8:2b:36:a8:af:38:7e:16:18:84:f3:22:0e:75:
1a:4f:06:eb:08:5f:b4:db:10:d4:27:27:15:47:95:
c5:01:42:4a:01:19:ef:c4:35:38:cf:4a:11:62:6a:
31:73:f6:73:c9:a5:47:c3:1f:14:4d:5a:ce:7b:89:
b7:5d:8d:a2:e0:ae:8f:db:12:f1:df:5a:2e:b7:14:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:5C:DA:E6:82:94:E7:B3:0F:AB:2D:3A:0E:53:4B:BD:F2:E2:31
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c4:29:94:17:ac:01:cf:45:11:82:2e:d6:0f:e2:00:5a:1b:
85:c6:54:ad:2d:e1:00:ea:9e:39:bc:15:55:32:68:5c:77:ef:
f9:b0:35:66:88:93:6c:81:c1:c5:fa:e0:2e:cc:3a:fd:2a:7d:
1b:6f:75:e2:77:19:26:bc:75:32:27:01:02:6d:e0:fc:13:e3:
66:f4:29:a3:ba:0e:e8:16:e4:fd:50:c9:e7:fa:72:06:99:f4:
b5:cf:b5:ae:86:24:a9:69:1b:79:2d:bf:a4:df:9f:a4:a5:8b:
95:5b:4c:d2:c4:2c:39:5f:97:b7:69:83:cd:f5:d9:21:ca:56:
90:b7:f3:d8:12:f5:cf:ea:27:e5:72:3f:52:e8:43:be:58:5e:
8c:3a:8c:31:41:c8:1f:58:8d:fe:56:7f:13:c1:d4:de:72:50:
6a:01:8a:51:af:39:00:40:f3:40:f4:3f:57:73:e0:c8:95:99:
6a:24:09:5c:09:17:e7:ec:fa:8a:73:4b:c4:2f:24:91:80:56:
9f:55:52:de:c3:7f:87:b7:7e:73:b6:aa:c0:69:4c:ae:2e:f5:
52:84:24:d4:aa:1e:a2:1f:8f:b0:1a:5c:32:6c:41:76:2c:5c:
d7:c9:b5:aa:a0:ae:86:60:20:75:5b:d8:4b:93:a0:e1:60:98:
09:80:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:32:39 2026 by rpki-client