
Error: rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
File: MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft (raw, json)
Hash identifier: QG1MIBUpGAxCcgdEFJ2F7FDBRo+qmQTeAbKmmZP65+A=
Subject key identifier: EF:DD:E4:96:01:2D:F0:C8:43:98:05:09:92:BF:88:B6:57:50:06:4F
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 0315
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
Manifest number: 0310
Signing time: Tue 13 Oct 2026 04:28:27 +0000
Manifest this update: Tue 13 Oct 2026 04:28:26 +0000
Manifest next update: Thu 15 Oct 2026 04:28:26 +0000
Files and hashes: 1: MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl (hash: hkQNTirgBaiOqi7Yj0JLR1u2D6ZBjb7pLFgnFUMY07M=)
2: 26FC764A6FAC11EF8469D197762E951A.roa (hash: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=)
3: B25B5AD66FAB11EF87286395762E951A.roa (hash: vwW65Nr7lh1XhWegso15AlnrJBnrQ6EFgBiPcl1lNqQ=)
4: D16713486FAB11EFBBD4B095762E951A.roa (hash: 8SVqRCmZw8s4aV8wC2vczr/9L/GkHhk4+czM91U/KkQ=)
5: ED98BED66FAB11EF9A20B695762E951A.roa (hash: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=)
6: 099CAAA26FAC11EF9F68F695762E951A.roa (hash: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 04:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Oct 13 04:28:26 2026 GMT
Not After : Oct 15 04:28:26 2026 GMT
Subject: CN=6acdb36a-e0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:a9:98:45:54:f6:5c:70:99:26:7c:b1:c5:
25:a8:59:2b:c2:e7:eb:10:d4:61:51:bc:39:19:46:
b2:7d:c3:1d:13:a1:bb:c2:3e:d2:23:85:49:db:05:
39:07:59:ce:3d:7f:07:75:3b:83:65:ba:6e:2b:17:
f3:52:83:a3:0d:10:bf:05:0a:1f:d6:c4:f5:41:d6:
0b:c8:b1:d7:13:27:f0:d8:bd:96:b9:95:1c:05:ce:
dd:92:5d:0e:46:70:3d:a0:b1:a4:1d:fd:8a:7f:47:
e0:26:60:db:e7:fa:d4:f3:ed:a4:15:99:2c:c3:c3:
85:60:6f:87:a9:ca:fa:2d:2c:00:5c:ea:63:ea:1e:
06:cc:36:10:dd:57:4d:44:7e:83:a7:7e:52:3a:9a:
b1:d8:9d:af:2a:71:73:cd:56:90:b0:a7:65:ad:ef:
43:25:8f:29:4c:b9:b9:06:bc:c4:b0:e2:da:50:5d:
16:bd:4f:85:98:d5:fb:df:dc:50:7a:19:cc:ca:94:
9e:4e:ea:3c:6e:d6:e5:e9:fd:85:30:9b:c1:82:87:
3d:3c:16:7d:ad:0a:04:99:27:fc:da:87:30:e6:52:
59:30:f7:82:f1:e7:ea:91:48:11:97:56:c9:1b:48:
f2:0c:e8:7e:2f:75:a6:b1:35:a2:04:2b:82:99:5f:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:E4:96:01:2D:F0:C8:43:98:05:09:92:BF:88:B6:57:50:06:4F
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:6a:71:46:dd:75:ad:d3:fa:6c:ea:67:50:98:63:41:36:
e5:0b:de:d4:77:8e:f5:19:c4:71:a8:76:ea:dd:f3:3f:05:83:
49:46:9e:bc:e9:b9:dc:5b:1d:e5:03:90:15:4c:aa:d2:03:a9:
e3:11:fd:ea:8e:b7:37:7b:77:9c:1a:04:a2:a6:f3:eb:e5:1a:
59:cc:35:90:55:1d:cc:1a:b2:90:84:c3:14:b7:99:eb:cc:55:
ac:6f:91:80:ec:ab:9a:a4:fb:d5:23:74:02:5d:c4:14:7c:e5:
48:41:66:f0:11:27:a1:6e:5a:a6:1f:c0:f1:58:00:d7:ad:be:
66:a5:40:6e:9a:95:96:e7:67:b1:3b:71:64:97:27:26:71:88:
0b:24:ef:5a:5a:c6:6f:cf:83:0f:c5:54:95:e9:7f:c3:0a:52:
ea:93:a3:31:ae:0c:79:98:a3:be:ce:d3:db:8d:fd:66:b3:8f:
a7:17:c5:d1:6a:d9:ef:78:bb:25:51:41:94:f8:6b:43:72:16:
3b:66:14:be:70:af:bf:39:7a:41:3a:3b:c5:15:64:e3:97:9f:
85:85:cd:c6:12:86:26:7a:14:02:07:34:2b:e2:9a:fd:32:fe:
f6:5a:6a:6f:22:a0:3e:76:92:e0:e5:ac:fa:2f:1a:49:e9:9e:
c4:a6:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:44:42 2026 by rpki-client