
Error: rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
File: Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft (raw, json)
Hash identifier: ZHvSfw/UiPb90ygp8ilIJj5OdqZYsGNOTbcxRCcMnQU=
Subject key identifier: 18:30:84:4B:35:01:70:86:F9:5A:3F:C5:A7:ED:F0:BF:CF:56:B2:CB
Authority key identifier: 3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
Certificate issuer: /CN=F36F18B8AF/serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
Certificate serial: 09C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
Manifest number: 09C0
Signing time: Sun 11 Oct 2026 01:42:18 +0000
Manifest this update: Sun 11 Oct 2026 01:42:17 +0000
Manifest next update: Tue 13 Oct 2026 01:42:17 +0000
Files and hashes: 1: Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl (hash: zlfg65EvwJzIGBcEJSpk2+pHtXA37TJj6OGanN7JL2k=)
2: 8859EF00498511EABE163653F8AEA228.roa (hash: QVI82FLm1BSma7kxHblG+4W4pZzP5tIprd7dKYd5Sbc=)
3: 5C5FDF40498511EA92A20A53F8AEA228.roa (hash: xsQiPdSl+w9J+k6KG8KqiILkw0rtSox5Rr9IOhOA934=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F18B8AF, serialNumber=3E887E856814833141F8D0F664ACAF6C4A305D43
Validity
Not Before: Oct 11 01:42:17 2026 GMT
Not After : Oct 13 01:42:17 2026 GMT
Subject: CN=6acae97a-d27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:1c:c8:6c:2d:3e:10:dc:13:dc:22:69:3d:
0b:d8:1f:17:3d:c1:9d:e9:0e:88:4d:0c:af:17:c2:
5d:14:92:d0:49:52:f6:b7:f2:e8:73:2b:99:ce:45:
18:b7:fb:33:54:89:a1:c4:18:9e:25:e5:da:f9:e4:
9e:82:d6:45:22:a6:ac:47:cf:d8:24:ba:22:52:d7:
3c:30:66:4e:ab:4c:cb:5b:23:e3:f2:ba:a7:a3:17:
56:c9:0e:9e:bb:bc:30:6b:10:a5:97:ff:be:42:4b:
85:31:35:f2:74:eb:57:1a:12:ef:62:da:64:ab:a2:
ff:a3:d4:a4:00:39:c5:1a:57:e8:e5:93:be:af:6e:
c7:07:88:30:77:ee:fa:ec:9c:02:45:ea:8c:6d:66:
86:c9:f8:6c:f2:f8:06:31:e9:88:22:dd:ac:d8:db:
e4:b7:90:db:69:f2:4d:0d:e3:a2:7a:3c:d0:80:27:
65:c3:5a:2f:79:03:a5:f8:1f:99:ca:68:ac:22:7d:
82:21:25:c4:02:11:c8:9d:2b:be:e1:ba:72:40:0f:
97:1b:91:51:5f:c4:71:2d:6f:f0:a7:8c:8d:e3:b6:
28:64:5b:01:df:99:0a:c5:7b:79:4c:78:af:b8:cb:
1a:d7:28:e3:8c:9c:ca:03:e8:01:de:38:80:33:9b:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:84:4B:35:01:70:86:F9:5A:3F:C5:A7:ED:F0:BF:CF:56:B2:CB
X509v3 Authority Key Identifier:
keyid:3E:88:7E:85:68:14:83:31:41:F8:D0:F6:64:AC:AF:6C:4A:30:5D:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Poh-hWgUgzFB-ND2ZKyvbEowXUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F18B8/E21BF354498411EAAC42AA52F8AEA228/Poh-hWgUgzFB-ND2ZKyvbEowXUM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:21:00:88:4a:e7:11:3a:23:6c:71:b8:6b:13:ff:b8:bb:a5:
e5:70:63:49:1e:d3:20:43:37:db:fe:23:94:34:8f:34:28:ff:
a3:e3:82:4d:74:f1:ea:d1:40:1a:1e:c5:cb:eb:11:3b:64:6e:
f7:04:ce:fc:aa:d9:6d:8d:48:d6:86:3d:43:d3:0a:f2:ca:5d:
d3:f5:c3:08:78:b1:64:8d:95:2d:67:c5:c0:14:33:ba:6f:37:
93:3b:bf:d6:05:c2:8c:07:4f:e0:27:2b:68:be:ac:cb:46:86:
5c:dd:c8:dc:c5:5c:f3:6c:f7:e5:7b:af:df:24:d7:50:7b:5f:
19:86:a0:eb:7c:24:ba:c4:7f:d4:7d:c0:52:60:59:7b:3e:68:
d6:ee:ea:55:ea:b3:2d:d2:a3:c1:ac:2b:07:10:19:6d:84:f9:
1e:0b:fa:47:69:87:9b:3e:58:f6:00:51:72:7b:d0:25:fd:15:
28:79:d4:cf:59:08:53:bb:7f:a7:1d:c2:88:48:11:c5:f0:c3:
13:47:7f:9d:e8:28:c5:ea:d0:3c:bc:fc:38:fe:ab:6b:bd:2b:
97:8b:62:ce:5d:dc:6f:60:1a:d4:83:3d:29:5e:81:d0:96:ff:
79:53:77:f9:cd:b6:b2:ba:b6:40:c8:a4:48:85:e1:5c:b8:ae:
03:39:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:51:36 2026 by rpki-client