
Error: rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
File: vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft (raw, json)
Hash identifier: mekmfsO34X5Ghks3BRdk3/E3f7swlXugjmx6IGBm/oI=
Subject key identifier: BE:CA:FF:42:16:07:19:72:F3:72:96:AD:49:70:32:B0:03:D1:2E:AF
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Certificate issuer: /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial: 04C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
Manifest number: 04C5
Signing time: Mon 21 Sep 2026 03:31:16 +0000
Manifest this update: Mon 21 Sep 2026 03:31:15 +0000
Manifest next update: Wed 23 Sep 2026 03:31:15 +0000
Files and hashes: 1: vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl (hash: PBTA5c1vOGkUFIMMR/OJTpH4cwTI5wQvPLBOlCBbhbM=)
2: C66A8CFA0F6611EE86DEEA374AD9E6FC.roa (hash: CtMLiyHqHp/2c3885KFMX3Kp1Td1UoRIr2a2dfZo4lI=)
3: E2F626462E6111F1A1498780DAE4EC9C.roa (hash: MmGMSbM7fxM4JZU+cJo8RgpUYAK1JK9mDHEDIULx+f4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 03:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1295AF, serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Validity
Not Before: Sep 21 03:31:15 2026 GMT
Not After : Sep 23 03:31:15 2026 GMT
Subject: CN=6ab0a503-6d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:0e:0b:82:58:bf:1d:9f:b3:d6:ce:d0:3f:
64:3d:ad:6d:28:54:43:de:29:ea:63:26:76:b4:3f:
d9:ca:57:ea:4e:bc:d9:63:36:55:34:95:be:7c:c6:
47:83:b0:ed:c3:55:0e:f6:f2:13:b8:3d:c3:cd:2f:
0f:3a:e6:64:e5:4f:4f:c0:2c:52:2e:e6:34:79:66:
d1:5c:b6:ef:4d:0c:31:97:0d:66:b0:fa:d5:cb:38:
78:de:68:e5:41:d2:9a:bd:65:a8:5e:41:d9:c7:ad:
b6:e0:31:2b:3c:d9:90:ad:6c:f2:d0:df:63:08:5e:
fd:62:4d:c9:50:19:ee:c9:d3:dc:31:93:97:44:35:
74:f3:0c:11:a5:08:29:1c:31:0a:cb:f3:6d:56:40:
f1:f5:6a:28:fc:30:52:db:9a:6a:03:56:83:9f:a7:
f5:89:c1:64:43:dc:f7:56:fd:ad:0d:a1:74:5f:89:
07:da:d8:e8:04:5a:4f:60:7f:de:b3:b9:4f:93:cd:
70:52:3e:61:48:26:cb:f1:bd:81:dd:0c:a5:60:b8:
e9:17:c3:b4:55:89:e4:b6:7a:b4:6e:b4:83:22:92:
f1:ab:af:85:35:f3:dd:44:64:67:30:02:3b:66:db:
d9:fc:d3:ae:9d:7b:ca:3a:69:1b:00:8f:64:05:e4:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:FF:42:16:07:19:72:F3:72:96:AD:49:70:32:B0:03:D1:2E:AF
X509v3 Authority Key Identifier:
keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:4a:df:3c:6a:04:ef:67:fe:e9:f8:89:56:a8:a8:43:30:
be:1e:dc:90:48:7a:63:26:79:82:13:14:dc:c5:01:c0:00:14:
83:60:cc:62:2d:39:8a:fa:7e:5a:dd:f9:aa:49:3b:31:39:24:
14:93:87:98:1c:6f:47:0b:8b:e3:da:05:30:97:82:0b:4f:fe:
0b:1b:cf:41:c3:1d:96:e8:f4:2d:c1:d2:18:f1:67:6a:a0:1e:
fa:48:51:42:d9:40:24:32:d7:e1:2a:81:5c:df:ec:f9:d1:e8:
4b:b1:63:ca:16:d5:db:98:8b:2a:44:bd:75:0e:54:cc:bb:4a:
4e:75:fd:0e:38:0a:7d:b5:dc:6c:86:d7:7e:45:c4:c5:a6:12:
5a:35:97:de:ff:5d:3c:ce:c6:46:90:83:23:60:f1:70:1d:5c:
52:88:4b:6e:28:24:1f:f1:1e:e2:99:3f:c5:5c:40:b1:53:65:
5c:1a:eb:dc:b7:d5:33:72:c5:80:b1:5c:96:6f:e0:41:21:10:
b3:da:a4:b0:8a:2e:5e:3b:c2:fb:3c:18:d8:7b:49:1c:b1:85:
52:64:1f:22:77:7e:a9:63:09:f2:c0:30:a0:1b:ab:37:fe:bc:
e0:e7:a1:42:62:ad:7d:74:e4:63:0a:84:c0:72:fa:dc:f8:e1:
33:f1:35:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjEyOTVBRjExMC8GA1UEBRMoQkRCMUFGMUY4QjRFQjZGM0E0MjM3MEY5MUU3MUM1
MzJDN0Y0NjAwNTAeFw0yNjA5MjEwMzMxMTVaFw0yNjA5MjMwMzMxMTVaMBgxFjAU
BgNVBAMTDTZhYjBhNTAzLTZkMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJfw4Lgli/HZ+z1s7QP2Q9rW0oVEPeKepjJna0P9nKV+pOvNljNlU0lb58
xkeDsO3DVQ728hO4PcPNLw865mTlT0/ALFIu5jR5ZtFctu9NDDGXDWaw+tXLOHje
aOVB0pq9ZaheQdnHrbbgMSs82ZCtbPLQ32MIXv1iTclQGe7J09wxk5dENXTzDBGl
CCkcMQrL821WQPH1aij8MFLbmmoDVoOfp/WJwWRD3PdW/a0NoXRfiQfa2OgEWk9g
f96zuU+TzXBSPmFIJsvxvYHdDKVguOkXw7RVieS2erRutIMikvGrr4U1891EZGcw
Ajtm29n8066de8o6aRsAj2QF5KQhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvsr/
QhYHGXLzcpatSXAysAPRLq8wHwYDVR0jBBgwFoAUvbGvH4tOtvOkI3D5HnHFMsf0
YAUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxMjk1LzJGMEVCQzhDMEY2NjExRUU4MTRFMjIzNjRBRDlFNkZDL3ZiR3ZI
NHRPdHZPa0kzRDVIbkhGTXNmMFlBVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZiR3ZINHRPdHZPa0kzRDVIbkhGTXNmMFlBVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjEyOTUvMkYwRUJDOEMwRjY2MTFFRTgxNEUyMjM2NEFE
OUU2RkMvdmJHdkg0dE90dk9rSTNENUhuSEZNc2YwWUFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnN0rfPGoE72f+6fiJVqioQzC+HtyQ
SHpjJnmCExTcxQHAABSDYMxiLTmK+n5a3fmqSTsxOSQUk4eYHG9HC4vj2gUwl4IL
T/4LG89Bwx2W6PQtwdIY8WdqoB76SFFC2UAkMtfhKoFc3+z50ehLsWPKFtXbmIsq
RL11DlTMu0pOdf0OOAp9tdxshtd+RcTFphJaNZfe/108zsZGkIMjYPFwHVxSiEtu
KCQf8R7imT/FXECxU2VcGuvct9UzcsWAsVyWb+BBIRCz2qSwii5eO8L7PBjYe0kc
sYVSZB8id36pYwnywDCgG6s3/rzg56FCYq19dORjCoTAcvrc+OEz8TUR
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:21:03 2026 by rpki-client