
Error: rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File: S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier: h4vrAK/W9iKhl9nxEbuYylmr9Z6MiYbzRaZvh+j7F7g=
Subject key identifier: C2:25:F6:56:2B:40:02:AD:62:14:92:72:B3:E3:38:B9:FC:29:60:BD
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer: /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial: 101D
Authority info access: rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number: 1017
Signing time: Tue 22 Sep 2026 00:55:16 +0000
Manifest this update: Tue 22 Sep 2026 00:55:15 +0000
Manifest next update: Thu 24 Sep 2026 00:55:15 +0000
Files and hashes: 1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: nMQ+1eVRTeuyPcpISuCSOM0T9IahAa0wjY7xS2UmUXQ=)
2: 3467C85EB57811EFBB258E50762E951A.roa (hash: 7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=)
3: 3F711DA2B57511EF9BE2B9BD762E951A.roa (hash: HY6X5qdCvMeHk+soAwWe9vEEWgfGLOX8rrjzYU1Pl8w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4125 (0x101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AR, serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Validity
Not Before: Sep 22 00:55:15 2026 GMT
Not After : Sep 24 00:55:15 2026 GMT
Subject: CN=6ab1d1f4-6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:96:b0:0a:c1:9c:9a:19:01:48:07:71:08:
ed:72:77:40:99:42:0c:fb:ef:66:88:b1:36:ad:0f:
f4:f9:d3:21:8a:a1:16:c3:fd:c1:36:3e:f7:09:a6:
ee:ab:f7:07:45:20:b8:b4:53:32:39:c6:f1:11:85:
44:75:47:c5:4e:9c:e2:c3:b9:a3:d9:11:fa:99:1e:
e1:4f:b3:8f:7b:1c:d5:2c:81:f2:27:f5:f2:bb:19:
72:b8:fe:c4:89:ba:a5:b6:6f:4d:e8:31:8f:50:37:
ef:04:20:c4:c9:c9:a7:cf:8c:0a:e9:22:61:4a:3d:
ac:5d:79:1f:26:c2:a9:0c:40:3f:f3:68:35:dc:a8:
80:98:8b:2f:f8:a9:fc:65:c1:63:dd:81:6f:a5:b5:
60:3e:2b:5d:61:a4:0c:d7:f3:dc:d2:12:c9:c8:3e:
1d:94:ed:f3:8b:fc:7f:17:b1:c6:27:f4:f9:c3:d9:
2b:b4:41:c8:33:37:9c:f8:7d:da:30:4e:2e:76:45:
d6:4d:bc:f0:81:b7:8c:80:b7:fc:de:fb:5d:d8:8e:
64:17:81:98:93:86:d7:17:50:e4:62:54:6e:fc:25:
17:45:b0:59:0f:10:2f:d1:14:c7:bd:71:5e:de:20:
a5:6d:1f:39:84:e6:68:49:43:09:60:bb:0a:41:9c:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:25:F6:56:2B:40:02:AD:62:14:92:72:B3:E3:38:B9:FC:29:60:BD
X509v3 Authority Key Identifier:
keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ed:6d:eb:cf:0e:d6:81:7e:8b:be:14:ad:69:e6:5e:25:f5:
44:1c:77:c4:23:bc:31:21:53:e7:e0:bb:30:79:d7:62:93:8b:
ad:41:ec:6b:03:bf:8b:0a:4b:75:74:db:73:73:8f:eb:e3:57:
36:45:bc:ce:e8:ee:41:06:32:66:d0:55:d4:9a:e0:59:1f:12:
dd:7b:5d:9a:8c:0d:cc:bc:98:12:d2:1e:bc:62:c6:c5:68:16:
49:56:2d:ac:99:dc:6d:49:57:df:87:9e:5f:98:b4:21:20:fa:
15:5b:5d:23:18:e0:37:cf:bc:5e:ac:7e:07:3c:1f:a4:79:02:
5b:6f:52:93:b0:c2:15:f9:e0:f9:57:dd:2b:42:ab:74:c2:fd:
c6:e2:3c:20:ba:24:78:96:c2:e5:60:91:12:c3:c5:60:7f:97:
a5:24:9a:c5:8e:76:75:72:ba:f4:11:19:ed:ff:c0:ef:b0:8e:
e8:45:90:68:b8:0f:0a:14:75:a6:b2:9b:16:b3:d1:42:9e:16:
d4:27:e0:20:b7:95:4b:63:cd:c4:dc:bb:57:94:48:33:c1:34:
54:b5:af:36:86:ee:fb:c7:6f:11:3e:4b:53:c9:39:35:56:ac:
24:f3:e2:60:c3:82:bc:a7:5a:54:6a:ee:b8:f1:55:38:9c:e5:
10:fb:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:37:41 2026 by rpki-client