
Error: rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
File: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft (raw, json)
Hash identifier: v5ReOm/Q/uUC/JtkxRirptkbqf1yS580tO0M/pD6B8g=
Subject key identifier: F5:C9:05:1C:2A:F5:7F:32:3F:63:C4:81:7F:06:30:72:AC:6B:F8:57
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Certificate issuer: /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial: 0672
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
Manifest number: 066B
Signing time: Tue 13 Oct 2026 02:46:20 +0000
Manifest this update: Tue 13 Oct 2026 02:46:20 +0000
Manifest next update: Thu 15 Oct 2026 02:46:20 +0000
Files and hashes: 1: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl (hash: n1VMGV3YhgOcKnMM4ZFFd6GhNZcJBXdnVRJhiEcrKEU=)
2: C22D8994634611F1A44F9016CF1D38B0.roa (hash: dn0CiA4TD5hJ1aVLDN4K8BucDVCdQvAPyy7W2PdZhn0=)
3: 9EB86A96634711F19C778F1CCF1D38B0.roa (hash: IIR04ujeixANpE1nIcYKkmtOPYw3lT5knLPQfvE77Uk=)
4: 0F79069C634711F18E23381ACF1D38B0.roa (hash: XpA37kO4U/QHFHB+OsDeSIwJyVOkmHHBBXZIvEnz904=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 02:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Validity
Not Before: Oct 13 02:46:20 2026 GMT
Not After : Oct 15 02:46:20 2026 GMT
Subject: CN=6acd9b7c-6e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:e0:5d:cc:71:4b:df:e4:e2:4b:82:57:50:
1e:b2:df:f3:1a:43:3d:5c:cf:54:94:4b:0e:8e:0b:
aa:84:17:97:32:32:18:aa:39:7a:ad:5b:ec:7e:fb:
3d:af:e8:7c:72:3e:3b:5c:2f:fb:a0:b1:cd:56:7c:
bc:27:dd:0e:25:c7:77:7e:c3:d0:e2:49:8d:b5:aa:
ce:7b:2f:da:10:a0:1e:58:1f:62:0a:ce:8a:06:b2:
2b:54:c8:44:d0:09:85:db:19:57:88:dd:e2:6e:52:
70:72:0e:b2:3c:8d:3b:ee:7e:36:23:83:0a:41:a6:
ef:0d:f6:57:ac:01:d8:15:43:9c:37:78:f8:27:14:
43:4e:13:92:ca:1b:6a:b6:ae:69:4f:fd:4d:a9:80:
ad:70:ad:bf:7e:7d:75:16:ee:21:ec:f0:f2:09:94:
6b:16:6c:70:89:e0:7f:a4:84:d9:d2:85:08:b7:47:
71:b9:ba:e3:93:ac:de:cc:2d:13:ed:55:4f:1b:3b:
97:7d:ba:ee:53:71:8f:07:73:f2:18:a0:09:21:ac:
ff:f1:73:45:c5:87:e0:b3:db:82:9f:c9:25:ad:28:
d3:6a:0a:23:76:f5:40:1d:e4:97:ff:be:5c:5d:b2:
8b:e2:eb:d7:24:85:de:df:94:17:e7:43:91:09:1a:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:05:1C:2A:F5:7F:32:3F:63:C4:81:7F:06:30:72:AC:6B:F8:57
X509v3 Authority Key Identifier:
keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:07:ba:0d:8c:43:08:c3:cf:f0:a1:f3:0f:cc:2d:84:e3:
73:d2:45:0a:c6:18:32:4e:af:2d:7a:9a:ce:5e:e7:6e:c4:30:
7e:d9:c5:67:c3:e9:ec:41:af:f9:0f:52:3d:ef:bd:a1:52:51:
d3:8a:c7:3e:bc:6b:43:7e:84:c0:25:1f:e2:dd:4e:57:b4:79:
49:6a:5e:78:1c:92:df:06:92:69:22:c5:02:18:44:bc:e5:1e:
f2:48:89:3a:fb:78:2d:e3:7f:fa:c8:02:57:0a:6e:a9:79:86:
7f:aa:b4:e4:1d:46:75:1c:f8:c3:78:a4:d7:57:6a:c3:7a:97:
3e:93:e3:d8:a7:db:89:c8:c9:2e:0d:c7:18:dd:e0:1e:a8:2f:
df:b8:83:b5:bb:e2:86:aa:32:6a:d4:8c:18:cd:93:14:de:a9:
0e:e3:09:7f:a0:0c:20:f6:9f:87:7d:42:e7:1e:c0:02:b5:d6:
e3:b2:71:e8:db:26:15:27:83:50:a4:09:d8:35:f8:1c:5e:e7:
e1:eb:af:18:aa:a8:53:80:2c:9e:63:c5:18:76:a5:d6:54:f3:
23:38:3a:c3:80:26:17:74:5e:b0:93:c4:e4:00:c3:b3:dc:70:
d8:e9:08:4c:60:d0:82:b3:21:66:0e:80:3c:9c:4b:5e:28:78:
c2:5a:c1:c6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjAxMzNBRjExMC8GA1UEBRMoNjYzMEM3ODQwODQ2RjJGNjkwOTc1NEYxMzQxNDY2
Q0RBRkVBMkZENDAeFw0yNjEwMTMwMjQ2MjBaFw0yNjEwMTUwMjQ2MjBaMBgxFjAU
BgNVBAMTDTZhY2Q5YjdjLTZlOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4yOBdzHFL3+TiS4JXUB6y3/MaQz1cz1SUSw6OC6qEF5cyMhiqOXqtW+x+
+z2v6HxyPjtcL/ugsc1WfLwn3Q4lx3d+w9DiSY21qs57L9oQoB5YH2IKzooGsitU
yETQCYXbGVeI3eJuUnByDrI8jTvufjYjgwpBpu8N9lesAdgVQ5w3ePgnFENOE5LK
G2q2rmlP/U2pgK1wrb9+fXUW7iHs8PIJlGsWbHCJ4H+khNnShQi3R3G5uuOTrN7M
LRPtVU8bO5d9uu5TcY8Hc/IYoAkhrP/xc0XFh+Cz24KfySWtKNNqCiN29UAd5Jf/
vlxdsovi69ckhd7flBfnQ5EJGvZZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9ckF
HCr1fzI/Y8SBfwYwcqxr+FcwHwYDVR0jBBgwFoAUZjDHhAhG8vaQl1TxNBRmza/q
L9QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwMTMzLzUwNDFBNzA4RTU4NjExRUNBRkMyMkE4N0YxMjIyNDY4L1pqREho
QWhHOHZhUWwxVHhOQlJtemFfcUw5US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pqREhoQWhHOHZhUWwxVHhOQlJtemFfcUw5US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEy
MjI0NjgvWmpESGhBaEc4dmFRbDFUeE5CUm16YV9xTDlRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBage6DYxDCMPP8KHzD8wthONz0kUK
xhgyTq8teprOXuduxDB+2cVnw+nsQa/5D1I9772hUlHTisc+vGtDfoTAJR/i3U5X
tHlJal54HJLfBpJpIsUCGES85R7ySIk6+3gt43/6yAJXCm6peYZ/qrTkHUZ1HPjD
eKTXV2rDepc+k+PYp9uJyMkuDccY3eAeqC/fuIO1u+KGqjJq1IwYzZMU3qkO4wl/
oAwg9p+HfULnHsACtdbjsnHo2yYVJ4NQpAnYNfgcXufh668YqqhTgCyeY8UYdqXW
VPMjODrDgCYXdF6wk8TkAMOz3HDY6QhMYNCCsyFmDoA8nEteKHjCWsHG
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:37:46 2026 by rpki-client