
Error: rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
File: QSDDG25xyAv3mSJsbVmhC3AhOSE.mft (raw, json)
Hash identifier: 8Tt55b4T9NmOVFdCbeozRIF5tSyDSgtoIQGQHGZ4G/w=
Subject key identifier: 86:25:88:61:8B:0B:E1:D6:77:93:B1:36:7D:A1:C0:B2:D1:C3:2F:49
Authority key identifier: 41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21
Certificate issuer: /CN=F36E5BE1AF/serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
Certificate serial: 0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
Manifest number: 0E
Signing time: Wed 23 Sep 2026 05:55:53 +0000
Manifest this update: Wed 23 Sep 2026 05:55:53 +0000
Manifest next update: Fri 25 Sep 2026 05:55:53 +0000
Files and hashes: 1: QSDDG25xyAv3mSJsbVmhC3AhOSE.crl (hash: oYRvi7DTx9W/EmJMIw/9vXRs/zwk7Ul38zY/LeUh9hY=)
2: 58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa (hash: OZKOlwRZ2oUpIBOzPLN1rbG60TNAmTSPpk5qoo1YOs0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E5BE1AF, serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
Validity
Not Before: Sep 23 05:55:53 2026 GMT
Not After : Sep 25 05:55:53 2026 GMT
Subject: CN=6ab369e9-a14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:47:1a:62:43:a2:6d:ff:16:6c:0e:c9:25:
7a:eb:bf:d1:e1:3c:79:37:be:8d:15:51:84:17:d5:
16:52:51:e5:d1:ac:f1:d4:11:76:ab:29:cf:b5:51:
b3:6c:58:4a:39:74:ee:9c:0d:f6:f9:78:e3:d5:aa:
25:36:d4:97:11:3f:ac:bd:4f:af:43:8b:03:78:ef:
9b:91:99:ae:da:12:ee:f7:39:de:26:97:81:f0:3a:
bb:0d:d7:5b:42:e0:66:a5:58:4f:79:5d:02:e2:0c:
35:0d:30:83:0e:f2:e5:b6:76:6f:cf:3a:49:94:6f:
6f:25:e5:83:96:0d:25:1e:54:bb:b3:05:ae:e8:e3:
76:24:d7:6a:f0:01:b2:02:08:0f:b0:1a:82:fd:72:
96:5a:b8:82:eb:7f:49:8f:df:4a:48:97:4c:c4:b2:
dc:1d:01:21:4d:ce:aa:44:8d:1c:76:82:ca:5b:7a:
ba:6d:3e:26:fa:77:8c:55:82:c5:1e:f3:2d:b1:e6:
0b:c1:63:2f:22:66:04:0f:60:f3:67:c1:e9:54:e4:
ff:d5:52:b1:00:53:9a:24:22:6f:34:c7:71:19:96:
77:bf:12:42:b2:df:9c:3f:9d:36:59:b9:02:28:86:
e9:4c:e3:cf:c5:69:9c:cd:30:74:0e:5a:49:10:f5:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:88:61:8B:0B:E1:D6:77:93:B1:36:7D:A1:C0:B2:D1:C3:2F:49
X509v3 Authority Key Identifier:
keyid:41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:da:c5:fa:c3:bb:7e:4c:86:a7:d2:6a:c9:b2:3b:32:11:
b9:7a:7a:a4:8b:51:65:9f:91:c5:e2:b2:76:ea:08:0f:1a:be:
d1:b1:f4:b8:76:f4:29:01:81:25:a1:b3:19:b1:f2:31:67:35:
95:b2:ca:74:08:c0:ab:f4:79:89:5a:dc:af:1e:77:de:df:1b:
a6:98:8a:87:d7:58:ae:00:64:84:af:ff:17:f8:73:5a:cb:07:
1a:9a:17:da:1c:8b:66:f2:cd:49:b4:43:06:43:97:7f:7d:f2:
cd:4e:d4:2f:a7:cc:a9:98:80:f0:10:de:64:57:d2:6a:f1:7c:
0f:02:63:50:fa:87:4d:f9:79:75:51:7e:5a:0b:8a:21:be:78:
79:ba:54:6f:e7:55:e4:67:c9:53:4b:9a:6e:23:f9:7d:49:59:
4b:82:5d:61:bc:f3:d8:ee:2f:d4:e9:63:36:56:e1:51:2c:4a:
cd:ef:71:d6:3d:cd:19:b1:f2:08:5e:1b:3c:99:14:5e:f1:d6:
c4:78:63:0f:92:9f:b4:28:0b:d4:dd:f9:7f:06:a1:8a:e8:f0:
42:d8:a2:a8:8e:26:2a:8f:b7:0f:55:bb:d8:da:1c:77:a1:6d:
17:02:27:83:9f:14:fe:a8:23:e3:a0:ff:9f:d8:43:32:f4:d4:
cd:5a:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:29 2026 by rpki-client