
Error: rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier: hs4kYgzGS7SnC1+6uflhh5notWD+2nI7QQYnmHq7/mY=
Subject key identifier: 89:86:5A:C0:F2:53:3B:2C:18:39:F0:C3:58:DA:F3:C1:BE:0F:A0:88
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer: /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial: 0350
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number: 034B
Signing time: Sun 11 Oct 2026 04:19:33 +0000
Manifest this update: Sun 11 Oct 2026 04:19:33 +0000
Manifest next update: Tue 13 Oct 2026 04:19:33 +0000
Files and hashes: 1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: o2f4Prs5pIwuH312hgCu8oAiOzUNhYSJqZB64qAcoco=)
2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Validity
Not Before: Oct 11 04:19:33 2026 GMT
Not After : Oct 13 04:19:33 2026 GMT
Subject: CN=6acb0e55-27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:57:2c:2d:dd:f2:62:43:04:54:1a:84:cc:
06:39:57:46:ff:0c:dd:01:2c:9a:9d:dd:bb:20:39:
d5:e5:cc:4e:bc:a3:8a:4e:eb:ca:7f:0f:a0:49:16:
4c:a9:31:bd:a7:ed:c8:87:37:b3:7f:01:2f:e5:19:
ec:75:ff:36:18:5f:8d:e8:3a:be:2d:87:e4:86:43:
ad:89:11:6a:54:43:42:3f:55:a6:df:2c:7e:29:45:
ff:73:7d:f8:c0:cf:f0:2d:e2:a2:b2:59:9c:42:f6:
35:32:f7:0c:7e:f9:e9:bc:fa:e2:17:b4:8c:03:e5:
8a:79:c0:dd:6b:50:9c:76:62:c2:60:e6:b3:f1:7a:
ce:97:33:7d:ec:12:ce:bc:84:e8:03:c2:79:37:38:
12:32:19:c6:fe:e8:2d:f6:c5:80:d7:4c:8a:ab:c1:
4d:3c:59:62:94:06:96:b9:17:fa:ff:d2:60:db:4a:
2c:87:e9:4a:f0:42:bd:42:ab:7c:43:65:67:aa:64:
5d:f3:bc:e3:c4:27:10:f2:33:fc:e2:55:5f:47:5c:
86:b3:2c:b5:b3:86:c6:53:54:f1:5c:11:84:3a:7f:
1c:3c:a7:6d:6e:76:92:7c:d9:d2:fb:78:73:1b:95:
c8:a4:35:8f:43:38:3b:6d:39:c9:5d:e9:8c:34:6a:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:5A:C0:F2:53:3B:2C:18:39:F0:C3:58:DA:F3:C1:BE:0F:A0:88
X509v3 Authority Key Identifier:
keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f4:24:38:a4:17:74:14:09:87:f7:4c:41:93:ae:2a:ad:63:
52:cf:bd:de:bf:c3:8a:42:b4:93:e3:d6:12:a1:b9:7f:f1:bd:
75:cd:9d:a9:34:6c:cb:68:86:a9:85:30:9a:fd:34:46:7d:27:
11:10:eb:d0:47:5b:7c:44:59:d8:9c:ac:e0:00:d3:a6:ba:a9:
92:0e:0d:f9:22:26:86:fb:3a:91:fc:9a:2f:f1:16:fe:97:cb:
f3:db:74:4c:8b:d6:4b:65:0a:6e:36:5d:76:37:5a:c9:99:e5:
eb:ce:5c:fb:f0:a1:eb:3e:8e:9e:32:d5:30:73:04:b5:64:e1:
fd:f6:51:88:62:13:61:6f:70:35:2d:e5:34:de:a3:c6:29:50:
6e:a0:f6:df:18:a2:ac:3f:e0:6b:0e:0c:eb:fe:fb:b6:67:85:
3b:2c:dd:8b:83:1d:cd:6c:b4:be:79:e5:17:6b:59:09:a5:8b:
17:35:cf:36:e2:e5:7d:bf:92:67:c7:7d:7f:5f:75:be:c5:56:
e9:f4:30:85:d7:cd:6a:fc:08:f2:79:cb:10:4c:5c:f3:8b:91:
f2:bb:10:a5:93:f6:f0:78:45:e4:81:aa:d5:7d:b2:6d:23:60:
2a:78:44:99:4d:dc:59:f2:b4:5b:6b:b1:02:e9:93:39:a6:10:
54:9f:4f:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZCNzdBRjExMC8GA1UEBRMoRjVERkY2NEEzOUQ4MDA3MDQ0RDc2NzFDQkNBQUEx
RTE2MTU3NDVBMDAeFw0yNjEwMTEwNDE5MzNaFw0yNjEwMTMwNDE5MzNaMBgxFjAU
BgNVBAMTDTZhY2IwZTU1LTI3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXtFcsLd3yYkMEVBqEzAY5V0b/DN0BLJqd3bsgOdXlzE68o4pO68p/D6BJ
FkypMb2n7ciHN7N/AS/lGex1/zYYX43oOr4th+SGQ62JEWpUQ0I/VabfLH4pRf9z
ffjAz/At4qKyWZxC9jUy9wx++em8+uIXtIwD5Yp5wN1rUJx2YsJg5rPxes6XM33s
Es68hOgDwnk3OBIyGcb+6C32xYDXTIqrwU08WWKUBpa5F/r/0mDbSiyH6UrwQr1C
q3xDZWeqZF3zvOPEJxDyM/ziVV9HXIazLLWzhsZTVPFcEYQ6fxw8p21udpJ82dL7
eHMblcikNY9DODttOcld6Yw0ascFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiYZa
wPJTOywYOfDDWNrzwb4PoIgwHwYDVR0jBBgwFoAU9d/2SjnYAHBE12ccvKqh4WFX
RaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2Qjc3LzNDRkZBMzgwNDJDQjExRUY4QjlBMzdBRTc2MkU5NTFBLzlkXzJT
am5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlkXzJTam5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYy
RTk1MUEvOWRfMlNqbllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL9CQ4pBd0FAmH90xBk64qrWNSz73e
v8OKQrST49YSobl/8b11zZ2pNGzLaIaphTCa/TRGfScREOvQR1t8RFnYnKzgANOm
uqmSDg35IiaG+zqR/Jov8Rb+l8vz23RMi9ZLZQpuNl12N1rJmeXrzlz78KHrPo6e
MtUwcwS1ZOH99lGIYhNhb3A1LeU03qPGKVBuoPbfGKKsP+BrDgzr/vu2Z4U7LN2L
gx3NbLS+eeUXa1kJpYsXNc824uV9v5Jnx31/X3W+xVbp9DCF181q/AjyecsQTFzz
i5HyuxClk/bweEXkgarVfbJtI2AqeESZTdxZ8rRba7EC6ZM5phBUn084
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:43 2026 by rpki-client