
Error: rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
File: DZvooDz0-SG-roASCfDNqfpcKKk.mft (raw, json)
Hash identifier: Ma5mot7BMgBYXRl7nINBNEKBhkYUVmqKGU1maFGJkks=
Subject key identifier: 6A:53:80:0A:D3:2C:B1:88:99:44:76:59:F6:21:8D:2B:9D:2D:B2:62
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Certificate issuer: /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial: 01C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
Manifest number: 01BF
Signing time: Mon 21 Sep 2026 04:59:29 +0000
Manifest this update: Mon 21 Sep 2026 04:59:28 +0000
Manifest next update: Wed 23 Sep 2026 04:59:28 +0000
Files and hashes: 1: DZvooDz0-SG-roASCfDNqfpcKKk.crl (hash: uPHOqPm+jCw3r5evaDuKnPyue7dfZqy4xS4df9Qm2dA=)
2: 61276BBA8FE211F1A322B3D5CE1D38B0.roa (hash: ZgYi187X+5Outlah/ax0NZjZ4kzN2fXozzCC/u2qZ/I=)
3: 481A94F88FE211F196C1ACD5CE1D38B0.roa (hash: /b4HJPRNHI6xpg0bDUmbfP0kip9OmM0xcDOIsyuagII=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Validity
Not Before: Sep 21 04:59:28 2026 GMT
Not After : Sep 23 04:59:28 2026 GMT
Subject: CN=6ab0b9b1-cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:cf:d8:9a:40:91:b5:d2:6d:d5:19:37:47:
5f:00:a4:8f:ee:1a:63:cd:c7:87:6b:f2:c9:86:fc:
5d:a2:4f:03:87:8b:cc:c7:69:6e:5c:5e:03:41:6a:
27:9d:49:5a:6c:d3:25:9b:1a:8c:b2:60:b3:53:e5:
fa:6b:76:42:82:2b:30:19:31:de:96:13:59:50:ae:
e7:70:d6:79:4b:91:40:d2:18:b8:ee:94:3a:ca:e7:
a3:31:57:a4:5e:46:35:6f:97:7b:5a:c2:2a:10:d4:
0e:a7:dd:ec:f4:4a:ad:ef:c9:b9:ec:a1:e2:d6:06:
f6:6e:32:bf:cd:cd:09:40:43:c9:e6:28:55:a9:12:
52:25:64:b7:93:2f:44:35:a8:24:29:63:09:dd:ee:
77:7f:92:44:bf:26:04:ff:04:09:8a:13:9f:b5:e0:
02:4d:71:1f:02:43:18:17:29:be:47:ae:b5:8e:53:
df:f0:bc:34:a6:b6:b8:a5:23:f7:5a:c0:cd:d5:d3:
ba:cd:f2:1b:17:2c:a5:e0:92:26:7c:be:88:f2:d4:
73:6d:70:b6:20:a8:d3:f6:4d:d4:4b:2b:7c:1c:48:
cf:1f:9c:bb:4e:e1:18:eb:8c:8d:25:f3:37:c8:06:
7d:95:fa:dc:96:f1:16:b1:31:92:50:5f:96:a4:05:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:80:0A:D3:2C:B1:88:99:44:76:59:F6:21:8D:2B:9D:2D:B2:62
X509v3 Authority Key Identifier:
keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d0:ca:25:c3:ff:1e:93:ed:86:0d:11:49:6c:56:a6:b3:87:
27:d7:3c:3f:2c:01:11:08:35:a8:a4:9b:0a:34:97:d6:75:92:
fe:08:48:67:b8:3d:b2:60:35:ec:03:bd:89:20:38:b7:1a:79:
b3:0d:c7:1d:7d:07:01:64:97:13:e8:f5:75:5e:52:97:3f:a6:
37:ad:ed:91:5f:fb:a5:36:b1:6c:8e:1f:01:44:34:76:53:96:
ed:c5:a1:f1:1d:12:a1:54:06:82:24:9b:83:a1:1a:da:c7:f9:
6c:e1:0b:81:d2:eb:9e:c7:9c:d4:52:a6:91:97:47:ba:2b:c9:
3f:9f:84:77:90:56:e3:f8:b0:a9:69:09:f4:3c:6e:52:ca:0f:
3a:7c:c6:f5:c6:2c:a1:6c:49:17:7d:17:cb:a7:40:20:86:62:
ee:16:62:d4:c8:c8:04:07:17:19:1f:18:ae:01:a9:d3:c0:79:
1a:f1:85:3c:14:0d:37:3f:d8:b1:e2:e0:69:08:12:98:ba:e9:
8e:85:ec:dc:53:3d:0d:f5:23:12:5d:e9:b6:17:6b:f8:33:82:
c7:f7:da:0c:7f:01:9c:40:14:31:01:fc:1d:60:5d:c6:dc:40:
c5:14:3c:df:1c:ea:ca:5c:30:71:3e:1f:0a:21:81:a8:16:c3:
49:cb:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:35:35 2026 by rpki-client