
Error: rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File: xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier: fbZcYwB7Gd6I1MhHjDnVB5UogLKH+yGqL1ZROa1blxA=
Subject key identifier: 42:9F:3A:93:81:61:A7:10:94:21:9B:04:61:A2:3B:F4:40:CF:09:23
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer: /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial: 0751
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number: 074F
Signing time: Mon 21 Sep 2026 02:23:50 +0000
Manifest this update: Mon 21 Sep 2026 02:23:49 +0000
Manifest next update: Wed 23 Sep 2026 02:23:49 +0000
Files and hashes: 1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: IqTj0YlojFPf1+OrQXjsafgx5pDrE0sYc2rdLF+EYdE=)
2: 383BEA7E873A11F1878DF408CF1D38B0.roa (hash: V583EW/K8C0P/Ms6xCkqcw6DMAeSTriRFoAJ45sih64=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 02:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Validity
Not Before: Sep 21 02:23:49 2026 GMT
Not After : Sep 23 02:23:49 2026 GMT
Subject: CN=6ab09536-1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:64:71:d3:13:d1:29:3a:3b:c6:04:87:6c:
13:79:9c:3b:9f:ec:f5:4e:5e:0e:f2:3a:38:71:7f:
37:5d:dd:9e:d8:40:30:da:72:d9:dc:06:60:59:79:
2d:23:07:cd:78:e4:6e:48:4c:33:c6:15:ea:e7:34:
69:82:85:87:a1:c5:3f:58:d3:b1:49:a0:62:a8:29:
38:1c:bf:38:90:2b:f8:54:eb:41:b8:cb:03:75:b9:
b1:d4:91:62:9c:6e:66:76:5e:c2:42:39:80:6c:da:
1e:b8:8c:17:6c:ee:29:42:d9:98:b1:24:3f:d0:cd:
49:2b:5a:11:e1:91:99:6b:e4:9e:86:bf:9d:a5:8e:
35:19:d6:34:44:db:15:d9:98:88:f8:12:99:a1:15:
ce:72:ad:f9:c4:d2:c9:cc:ba:6c:3d:e8:98:c6:89:
4c:60:a3:4c:82:d6:c8:c5:46:e0:cf:28:c1:ed:23:
8a:bd:20:83:8d:22:e5:c9:3d:b4:1f:d1:3b:da:37:
ce:05:09:50:24:0f:c2:6d:f5:f8:03:0f:3c:89:c4:
7e:c9:58:8d:31:f6:b7:9f:c8:ae:5f:db:80:04:df:
48:36:a7:10:c7:14:b7:83:53:a9:6b:c2:6c:8c:6e:
b7:74:e3:15:d6:bd:35:7e:bb:57:60:0d:ed:82:0a:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:3A:93:81:61:A7:10:94:21:9B:04:61:A2:3B:F4:40:CF:09:23
X509v3 Authority Key Identifier:
keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d2:5f:ba:a3:72:98:4c:8e:fd:df:11:c7:0b:58:ec:43:33:
f2:7c:71:51:5e:f2:36:3a:71:d8:31:54:6f:d4:23:00:fd:e9:
ff:69:5d:5f:1b:f0:11:bb:20:32:b8:83:2e:38:79:02:41:bb:
6d:92:ca:99:7d:2c:d9:7f:76:52:ae:10:38:5e:d8:f5:c4:69:
d7:e7:3f:81:13:e2:c2:6b:75:2d:02:58:7a:e1:10:79:3b:69:
cc:8d:3a:cd:0c:a0:d5:c6:40:d0:0a:de:a9:79:a6:c5:79:37:
a3:03:6d:eb:87:68:c7:98:22:6b:6d:f7:0e:7c:f7:85:4a:7b:
09:5c:b5:d6:d1:86:90:cf:b9:88:df:0f:75:54:e8:e7:63:59:
0c:38:dc:5b:f7:0e:f4:8e:fc:6a:73:64:92:1e:af:84:6c:3b:
cd:da:fa:57:ab:a6:b5:78:3e:71:39:4d:f7:bc:d3:42:6d:d7:
49:3c:50:4e:6f:db:72:36:58:8d:49:27:cf:fb:29:ee:04:e4:
63:aa:6b:e4:7b:84:f0:a3:39:b1:df:0e:93:8a:bf:3a:17:67:
db:e8:43:28:9f:1a:98:b4:e1:a0:d5:7d:cc:24:f4:dc:07:53:
e9:fd:b5:27:71:e4:6d:8f:a4:6f:fc:a1:e4:72:8a:d5:d4:61:
82:ad:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:46 2026 by rpki-client