
Error: rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File: HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier: YcqPJ462ldNxJahjho7INeSOA03CAlo9WZCWxfwySIM=
Subject key identifier: D1:31:91:69:BC:89:AE:4E:A3:90:7E:7B:E4:02:17:0F:EC:BF:E2:C9
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer: /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial: 04F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number: 04F0
Signing time: Sun 20 Sep 2026 03:24:56 +0000
Manifest this update: Sun 20 Sep 2026 03:24:55 +0000
Manifest next update: Tue 22 Sep 2026 03:24:55 +0000
Files and hashes: 1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: dJZw5ykPjLSyrDml7AKrtMCLjvkRs3bywLXefyAeHeE=)
2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268 (0x4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Validity
Not Before: Sep 20 03:24:55 2026 GMT
Not After : Sep 22 03:24:55 2026 GMT
Subject: CN=6aaf5207-c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:ac:bd:4c:5c:90:da:4c:46:61:c4:22:9b:
43:e6:1f:c7:6b:b1:ee:1f:b5:c1:34:a2:53:f8:ad:
44:23:72:42:05:5a:2b:a0:a8:c3:55:c6:dd:31:fa:
7b:4e:81:17:76:59:18:3d:a0:4a:37:9d:ae:ff:20:
81:06:dc:08:46:52:33:16:e6:7f:02:55:76:9e:ec:
b1:de:88:9b:fe:be:99:30:87:8b:18:7e:fd:5f:ff:
17:4b:a9:a1:40:62:47:1a:2e:a4:6d:19:bd:17:fb:
4d:02:df:f4:3f:02:76:04:56:55:0e:c0:a3:8c:ec:
0b:cf:fe:21:1e:13:14:8b:f6:1f:ce:de:ca:99:3e:
54:05:a0:20:42:89:ee:6c:ee:96:e3:df:ae:e4:b4:
97:f6:99:d9:ec:f1:a9:15:8d:92:07:20:e5:12:60:
06:22:62:dc:e0:44:be:79:0e:d0:76:da:24:e3:a6:
2c:33:8c:ba:d2:65:d0:bc:5c:0a:64:a1:b4:27:37:
79:33:52:c3:6d:cb:98:12:9e:cc:c8:68:e5:77:58:
c0:4f:4a:cf:b2:b1:28:4a:65:d3:af:da:c7:29:04:
66:d1:bc:11:74:a5:25:42:48:2b:b5:0a:a9:2a:50:
ea:23:f7:9f:6d:ce:5c:fc:d2:cd:89:db:14:7e:a3:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:91:69:BC:89:AE:4E:A3:90:7E:7B:E4:02:17:0F:EC:BF:E2:C9
X509v3 Authority Key Identifier:
keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:58:65:38:ba:fb:c8:31:19:88:91:a7:af:8a:66:96:9d:
7f:55:7b:b3:9e:ed:d3:1e:ad:84:7f:41:b2:7b:16:78:6d:96:
db:c1:08:04:38:bb:d2:aa:64:77:54:d9:23:19:28:a7:fd:65:
81:6d:a0:b8:4b:05:30:ad:ae:ac:c4:56:03:5c:a7:40:1e:73:
1a:bb:11:01:ad:f4:4e:8b:36:94:94:f2:e3:fd:2b:58:a9:50:
1f:19:dc:80:35:b9:c5:21:26:6a:68:fe:74:cb:95:d6:ed:81:
f2:35:98:d1:3a:de:a0:48:b4:43:ff:74:9b:09:a0:6c:db:91:
18:11:18:93:0c:e8:70:4b:45:fd:81:18:77:53:f2:bf:e7:11:
86:a4:c7:85:a3:81:c6:51:0e:2f:c3:ad:41:6d:5a:0a:f4:8b:
dd:ff:08:9f:ef:14:c4:96:cc:a3:93:49:90:55:b4:a9:4b:5f:
57:b2:04:f0:f5:6e:6e:82:b1:2c:89:3a:a2:d6:8d:20:30:bc:
13:3d:98:6f:a7:cf:46:da:9b:c7:78:75:7d:ed:85:d0:39:62:
e6:cb:ce:6e:37:f6:5f:fc:b9:b0:fe:28:d7:40:87:60:c1:47:
ba:18:eb:c7:1c:a2:28:5d:80:04:64:1e:94:00:a1:c1:45:df:
ba:1e:77:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUwNURBRjExMC8GA1UEBRMoMUREQjhFOTMxRjU3QTkyODE3NjQ5ODMwQzRFRDhB
REQ3NEVGNDlGOTAeFw0yNjA5MjAwMzI0NTVaFw0yNjA5MjIwMzI0NTVaMBgxFjAU
BgNVBAMTDTZhYWY1MjA3LWMxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4/6y9TFyQ2kxGYcQim0PmH8drse4ftcE0olP4rUQjckIFWiugqMNVxt0x
+ntOgRd2WRg9oEo3na7/IIEG3AhGUjMW5n8CVXae7LHeiJv+vpkwh4sYfv1f/xdL
qaFAYkcaLqRtGb0X+00C3/Q/AnYEVlUOwKOM7AvP/iEeExSL9h/O3sqZPlQFoCBC
ie5s7pbj367ktJf2mdns8akVjZIHIOUSYAYiYtzgRL55DtB22iTjpiwzjLrSZdC8
XApkobQnN3kzUsNty5gSnszIaOV3WMBPSs+ysShKZdOv2scpBGbRvBF0pSVCSCu1
CqkqUOoj959tzlz80s2J2xR+ow2bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0TGR
abyJrk6jkH575AIXD+y/4skwHwYDVR0jBBgwFoAUHduOkx9XqSgXZJgwxO2K3XTv
SfkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MDVELzFGQjFCNEIwRUU1RjExRURBODIxOUM1QTRBRDlFNkZDL0hkdU9r
eDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkdU9reDlYcVNnWFpKZ3d4TzJLM1hUdlNmay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjUwNUQvMUZCMUI0QjBFRTVGMTFFREE4MjE5QzVBNEFE
OUU2RkMvSGR1T2t4OVhxU2dYWkpnd3hPMkszWFR2U2ZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAutVhlOLr7yDEZiJGnr4pmlp1/VXuz
nu3THq2Ef0GyexZ4bZbbwQgEOLvSqmR3VNkjGSin/WWBbaC4SwUwra6sxFYDXKdA
HnMauxEBrfROizaUlPLj/StYqVAfGdyANbnFISZqaP50y5XW7YHyNZjROt6gSLRD
/3SbCaBs25EYERiTDOhwS0X9gRh3U/K/5xGGpMeFo4HGUQ4vw61BbVoK9Ivd/wif
7xTElsyjk0mQVbSpS19XsgTw9W5ugrEsiTqi1o0gMLwTPZhvp89G2pvHeHV97YXQ
OWLmy85uN/Zf/Lmw/ijXQIdgwUe6GOvHHKIoXYAEZB6UAKHBRd+6Hndz
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:49:54 2026 by rpki-client