
Error: rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier: V/3Y+tOpaKThdl/c5tTACvUV6IHb4utWR3GILlju7R4=
Subject key identifier: 9C:54:AC:B0:CB:50:CD:03:F7:65:71:5C:5B:46:CA:A1:B0:F7:1E:EA
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer: /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial: 04AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number: 04AC
Signing time: Sun 11 Oct 2026 03:38:12 +0000
Manifest this update: Sun 11 Oct 2026 03:38:12 +0000
Manifest next update: Tue 13 Oct 2026 03:38:11 +0000
Files and hashes: 1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: xYDmpPwSaXutFO/rKwNH55LL4ipFX92GrzEgPPfwb+o=)
2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F143FAF, serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Validity
Not Before: Oct 11 03:38:12 2026 GMT
Not After : Oct 13 03:38:11 2026 GMT
Subject: CN=6acb04a4-2a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:eb:15:83:bb:71:e4:3d:45:1b:99:81:64:
05:b0:41:63:93:0d:66:9a:df:15:93:0d:14:20:e5:
1b:f4:c1:8b:47:5b:e3:f3:0a:ef:aa:a5:ac:37:36:
5b:72:2e:66:ef:ba:76:cf:6c:61:20:2f:52:0a:66:
bf:a1:44:b0:ad:86:66:f2:6c:da:68:d1:b0:f4:45:
6c:52:94:ca:cf:90:81:58:27:db:a0:1b:14:21:62:
ae:f4:65:01:a1:f3:3e:eb:6d:23:a5:91:25:3f:ad:
1b:2b:26:df:ad:8d:b6:76:49:db:d9:8b:06:11:e7:
50:61:b3:16:f3:e2:85:ed:5e:22:96:ce:92:c9:00:
ab:a5:58:29:4f:53:5d:8c:a9:95:5d:b1:23:6f:35:
a0:c4:09:77:0e:27:23:89:17:ff:64:1b:8c:b1:d2:
25:df:f5:f3:bd:1b:84:ed:fd:0b:58:67:7b:f9:75:
13:ec:1a:db:ed:47:17:f7:f4:97:d5:de:77:73:6e:
95:8b:e4:c4:4e:b1:7a:d2:a0:7f:30:b2:49:10:c9:
82:36:e7:6e:3a:5f:36:1c:af:3f:90:bb:ff:e3:98:
b5:2b:8e:a6:be:09:e4:08:de:b1:d3:09:9f:96:7a:
5b:ae:fe:7f:23:6f:fc:6d:a3:6c:1b:94:c9:ba:3d:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:AC:B0:CB:50:CD:03:F7:65:71:5C:5B:46:CA:A1:B0:F7:1E:EA
X509v3 Authority Key Identifier:
keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:54:13:45:9f:2b:fc:14:19:4a:87:96:15:2c:64:c6:d6:
54:62:96:83:d7:71:dd:fb:56:0f:c1:44:99:45:7d:f1:4f:41:
e4:aa:15:35:00:8f:d0:60:9b:1d:e5:96:bb:93:0d:1b:c9:a5:
3d:4a:87:bb:7c:0b:d1:58:e0:5b:63:bb:9d:88:ed:0c:94:ba:
4e:7b:31:8d:79:52:48:97:d3:2d:9f:ac:fe:c2:bd:78:f5:3d:
53:89:e4:a6:a1:65:66:3b:f2:c7:47:e4:e7:36:05:6b:bd:65:
0e:3e:ab:3e:9d:46:e7:db:d5:f2:30:23:1a:41:2d:69:38:24:
92:8d:d0:4b:fa:43:f2:41:38:eb:e9:54:a8:b5:54:17:d1:32:
cd:6b:0c:89:eb:79:19:09:1e:96:be:eb:2e:20:16:c3:d5:41:
5b:c9:e1:3c:ef:f2:df:97:91:3d:2f:7a:d4:ec:5a:07:cd:62:
e5:c3:da:af:7a:a3:3d:a4:d9:1f:0e:58:6c:f1:4d:17:f6:65:
e6:00:67:a5:5f:f9:a8:c7:d3:0c:bf:82:dd:b5:f1:94:ed:94:
9d:89:5e:48:b9:32:01:93:85:3a:90:68:a3:8b:dc:21:a4:0f:
01:31:00:b3:05:e4:c7:d5:a6:01:4e:ab:12:99:a5:ea:0a:ab:
84:cc:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:04:28 2026 by rpki-client