
Error: rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File: _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier: vPZWnVPdkBxVeN0OmnD3Z4qZRS89wOqfJjaS9rJoUTs=
Subject key identifier: 14:63:6F:A6:3B:F8:8A:EE:D4:55:B3:7C:03:AD:F2:C8:05:CE:DC:61
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer: /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial: 0539
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number: 0535
Signing time: Thu 24 Sep 2026 03:19:20 +0000
Manifest this update: Thu 24 Sep 2026 03:19:19 +0000
Manifest next update: Sat 26 Sep 2026 03:19:19 +0000
Files and hashes: 1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: P4jr22oAQIVierCBwVar2qUBhcspAYhJQXBUAZgyMco=)
2: D025818C847A11F1B5502AB7CE1D38B0.roa (hash: s3DKvzZqZ1yrsDDeKf3A4fFbQn6aVQ+8rQd1FiSdSzk=)
3: 5C84A38E847A11F19D393BB3CE1D38B0.roa (hash: AHaUFDbGD5NxejHMZa7exucr+iFPx6p3m8Tht7NKBYE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Validity
Not Before: Sep 24 03:19:19 2026 GMT
Not After : Sep 26 03:19:19 2026 GMT
Subject: CN=6ab496b8-3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:8d:a3:cd:08:e2:c4:ac:fe:4d:6b:03:05:
3d:0c:e8:e5:53:59:b0:92:86:21:1c:f0:ce:7c:56:
2e:18:80:a0:1c:ef:a7:00:66:71:ea:f9:6d:81:04:
57:1e:2b:ad:bf:03:b4:a6:55:d1:a8:e0:4e:cb:94:
35:6e:66:1a:99:f2:c6:6b:eb:2f:35:1c:b8:77:4b:
43:c6:83:18:d3:ca:2d:d6:ff:cb:ee:b7:b5:95:99:
27:f6:46:3f:56:f6:26:1b:97:23:71:90:04:22:03:
c7:4d:d5:71:6a:d2:e2:37:de:87:2b:1f:bb:b6:35:
e9:aa:d9:d1:a3:fb:14:6e:fc:91:b6:11:32:7d:73:
67:7f:96:06:65:b7:c9:1c:0d:e6:b7:7a:ef:fc:aa:
1f:a6:05:6c:b7:37:2b:64:c6:00:b4:31:52:06:87:
69:d1:dd:37:75:74:1a:fb:b0:68:6d:61:e9:79:14:
79:36:ce:f2:23:ca:86:5d:ef:d9:de:5e:87:d5:17:
d6:7e:b3:36:76:5b:54:58:53:b1:b0:fe:63:0c:58:
46:6e:b5:c5:cc:ba:72:bc:9b:0c:8b:a0:a7:47:5a:
3a:9b:d1:c2:8c:17:69:17:ff:e2:7e:28:10:4c:3c:
64:e8:d0:6d:25:88:28:da:95:2c:cd:2d:85:a1:83:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:6F:A6:3B:F8:8A:EE:D4:55:B3:7C:03:AD:F2:C8:05:CE:DC:61
X509v3 Authority Key Identifier:
keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:79:5f:ae:20:28:c6:db:a5:8d:38:a6:e3:14:66:6d:f5:
f8:7d:5f:35:89:10:97:c0:17:c3:be:ba:b1:2f:b0:f8:cd:7c:
e8:73:f9:e7:da:21:58:2d:1f:5d:c5:39:7d:ac:0f:91:95:e2:
b1:89:6b:11:c1:fb:68:26:30:56:6e:0a:f0:45:74:af:3f:2e:
6a:b3:bc:c2:8c:87:14:de:bc:8b:03:ef:dd:d7:13:d6:54:09:
5e:2f:3a:62:1c:6c:d8:52:f4:88:e2:66:9b:5c:ba:ce:c6:02:
cd:49:51:53:95:83:ad:93:44:6a:ac:6b:a3:a5:f9:c9:e2:83:
47:ad:81:03:42:f8:04:a5:35:84:b4:f8:65:44:63:f6:0e:1d:
ca:63:10:38:28:36:15:84:9a:77:e2:4f:61:21:41:cf:8d:c4:
63:46:5c:c7:e9:59:df:7a:e1:53:73:96:98:75:9e:77:eb:92:
dd:f2:6d:01:9e:3d:b9:8d:d2:dd:1e:ba:4a:b0:c3:84:0c:5a:
08:70:e1:9b:39:58:8b:83:6c:b8:1a:c4:f7:3e:49:ce:01:be:
85:02:2e:91:8d:1d:f3:ca:36:62:38:fe:3b:b3:48:2e:99:b1:
0b:bf:c7:35:d3:32:ad:a0:14:54:0c:d5:77:7e:a2:fb:90:47:
47:19:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:34:07 2026 by rpki-client