
Error: rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File: M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier: bLmamxNuKorGtCeOrEmtIEBrpkhQ6gxeDPwg6HKiYF0=
Subject key identifier: C9:97:B0:AB:BA:AD:18:8C:52:1D:80:8F:C1:46:A7:56:EC:E3:2F:50
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer: /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial: 039A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number: 0399
Signing time: Wed 14 Oct 2026 04:08:46 +0000
Manifest this update: Wed 14 Oct 2026 04:08:45 +0000
Manifest next update: Fri 16 Oct 2026 04:08:45 +0000
Files and hashes: 1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: LYMTYiK+vDSqarSJg3Gcj+exwzTjOKBs45wVW/Cr2i8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 04:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E4CC6AF, serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Validity
Not Before: Oct 14 04:08:45 2026 GMT
Not After : Oct 16 04:08:45 2026 GMT
Subject: CN=6acf004e-43e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:29:55:a8:e9:1f:22:28:b3:82:3e:18:a9:
e2:7d:cf:9a:e1:23:71:57:43:69:71:b0:9f:ba:88:
08:c4:ed:7a:77:72:ec:a0:78:6f:72:e3:ad:d9:64:
e9:07:f0:51:6a:6d:47:de:5d:ba:e6:0c:d7:e1:7c:
b6:d5:8b:01:52:56:01:46:7d:1f:8b:ba:4d:78:3f:
4a:a5:b9:36:6b:8c:f0:a4:7b:b8:8d:2d:b5:77:4f:
2a:31:e9:12:99:c2:02:45:8f:f4:f5:75:2f:ed:42:
76:04:dc:53:56:6f:bd:8b:6c:08:06:08:06:ae:31:
5a:04:28:16:1a:33:ca:06:72:71:4f:ff:c3:89:1f:
4b:0a:f9:a7:09:e7:b5:c9:68:ad:8a:54:5f:06:dc:
f4:fd:d1:79:90:59:5c:f8:32:7b:04:1c:6c:31:36:
66:76:6b:4a:4f:4e:6e:06:98:9c:76:da:3a:fc:ca:
b4:79:27:14:7f:d2:52:9d:9c:7b:c3:72:cf:9e:f7:
e7:61:f5:c6:98:e8:31:c1:5d:e9:23:29:1c:4c:e9:
c9:fd:1d:46:04:27:27:f9:c4:5a:3b:09:21:c3:91:
eb:b1:a2:37:17:6a:84:d8:dc:20:8b:df:96:d5:32:
2a:e4:f6:96:52:4f:9c:54:6d:c8:62:c1:2d:c5:bc:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:B0:AB:BA:AD:18:8C:52:1D:80:8F:C1:46:A7:56:EC:E3:2F:50
X509v3 Authority Key Identifier:
keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:1e:f7:84:33:c1:13:8d:76:c6:47:94:fc:21:ee:4e:b1:01:
eb:09:ea:24:b3:26:85:26:b0:8c:12:eb:d7:c2:2a:24:2d:b9:
92:01:aa:02:b5:ee:96:59:82:16:63:44:c2:a1:34:53:ed:91:
9b:eb:e1:f8:39:26:79:ac:eb:6f:90:ac:c4:35:50:4a:70:61:
ca:fc:8e:c6:7a:94:7e:51:9e:66:33:f7:08:67:60:a4:a4:59:
a8:ba:43:29:93:e8:7e:6f:5a:4a:9e:3e:be:ca:64:7d:03:9e:
18:05:ed:6a:bb:c3:c1:67:d5:ea:c4:84:6a:61:8d:3b:1f:b0:
f3:ad:ee:1e:ad:23:c0:45:28:58:51:cf:9f:ba:c5:2a:03:7a:
90:99:28:b2:ce:a3:88:79:04:29:7f:35:47:95:63:dc:3a:2e:
c6:a7:fb:1a:a2:26:bd:71:9a:b7:d5:ae:74:7c:76:fc:c3:ad:
89:ed:53:61:8f:0a:51:b9:c2:e2:f4:66:6b:22:ed:fb:f1:5a:
7f:28:55:0e:07:5c:bf:be:45:98:e7:48:46:1a:4f:44:e5:5f:
e0:e7:9a:7d:f9:37:6b:af:ac:b3:3b:51:de:e9:62:4a:87:c4:
cb:c1:91:66:a0:4c:b5:c5:4a:52:9c:e6:94:89:38:ef:35:48:
d8:31:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:08:15 2026 by rpki-client