
Error: rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: TnCdOfzFL3BwfUF3JaLk5SKjkR5CNvjWiNMvdWbJaSc=
Subject key identifier: A5:13:E8:4B:F5:90:44:7F:26:34:EE:D5:10:FC:9E:65:89:09:E4:6D
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 03EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 03ED
Signing time: Tue 13 Oct 2026 04:00:33 +0000
Manifest this update: Tue 13 Oct 2026 04:00:32 +0000
Manifest next update: Thu 15 Oct 2026 04:00:32 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: gFkS090DJJ1JKL79xRarL/F31IoOqXIk/1O3U+inaQY=)
2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Oct 13 04:00:32 2026 GMT
Not After : Oct 15 04:00:32 2026 GMT
Subject: CN=6acdace1-9303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:bb:b0:0f:fe:26:1b:9b:a0:79:e6:7a:b1:
87:7d:b3:d9:ea:50:f8:1f:50:e9:6d:c5:5f:c5:54:
1c:36:2a:4f:4e:72:7a:40:54:52:98:93:ae:5f:b8:
47:20:14:83:74:19:03:6d:68:88:3f:45:0a:61:c7:
11:c0:1d:9f:f0:85:62:6a:9e:c4:50:03:12:1c:be:
05:23:8d:f2:c4:9e:db:a1:d5:fb:ac:20:05:b3:74:
0b:c1:f4:51:12:f0:f9:3a:ce:16:49:1f:5e:5b:ba:
7f:76:29:37:d5:5b:9f:d8:1f:d0:89:8b:a8:3f:74:
ee:f4:51:c7:37:0b:03:b6:9e:86:83:40:8d:0d:a2:
42:92:5b:d6:17:31:89:af:6a:c3:14:47:e3:5d:b5:
79:1b:0e:49:50:31:28:fd:0b:5f:e2:91:ad:68:6a:
b3:ff:de:4b:17:b2:81:8b:a3:31:c9:fc:51:db:6f:
ed:7e:ee:ec:1f:9a:cb:45:9a:58:70:8a:64:23:f7:
a8:05:46:61:72:d9:2e:8f:2f:85:54:25:a5:e8:e4:
2b:42:7d:3a:5e:36:ad:21:44:88:1a:5f:7d:8f:73:
e3:e6:b9:d6:f8:97:cc:84:5a:7e:0a:15:5a:00:11:
71:87:86:b6:c6:20:2e:06:62:77:72:19:6c:0b:c9:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:E8:4B:F5:90:44:7F:26:34:EE:D5:10:FC:9E:65:89:09:E4:6D
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:58:ba:ac:9e:44:48:65:52:aa:98:fd:5b:3d:bb:48:03:74:
d7:7f:17:aa:e8:5d:34:dd:0e:55:33:f2:df:7f:f5:57:1c:e1:
f5:1c:8e:b5:ba:b6:a8:eb:c1:47:00:80:fa:55:69:6d:74:03:
5b:0a:3a:a8:52:98:c9:38:fa:e6:71:82:31:7b:2a:59:aa:e4:
79:0a:00:c8:34:09:b9:87:a0:a1:16:c1:f0:b0:b9:84:b0:11:
e4:e0:c4:17:58:d7:6a:53:95:0b:66:bb:ec:47:cd:e9:45:74:
c1:04:aa:42:3f:fa:27:a1:ff:cd:18:f4:f3:ed:3c:ca:1c:3f:
01:c8:ca:a1:dd:f6:23:3e:b8:60:f2:2b:ce:4e:6b:94:3b:da:
78:9a:f2:b0:72:a3:66:6a:63:cc:b3:e5:53:dd:c2:97:1e:cd:
d4:db:62:7d:ce:88:22:a6:d1:11:b6:c6:51:db:57:ff:9f:b7:
ed:37:e2:9a:5f:ce:4f:5f:43:e6:b5:79:bf:dd:f4:b7:ab:5d:
5c:92:48:0e:0b:7a:00:c2:58:e5:97:0b:f0:de:26:86:74:4f:
9f:8a:6d:aa:6f:a5:95:4b:1e:0e:45:e1:59:39:0e:c6:e5:67:
19:58:03:77:54:c4:9e:5b:3f:ba:5e:f3:61:05:ca:37:1e:f3:
c5:8c:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:06:26 2026 by rpki-client