
Error: rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
File: 282W95Lg6D5i6CDFStMGU1QFduM.mft (raw, json)
Hash identifier: a3lbEWgOWtJmXGZHE/uvtUm51FP5NLlzXeYf/Mij3pg=
Subject key identifier: 1A:6D:85:5B:8F:FE:1C:38:C9:33:3A:1C:E7:6A:F2:D9:9D:E8:3F:08
Authority key identifier: DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
Certificate issuer: /CN=F36F8F06AF/serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Certificate serial: 59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
Manifest number: 57
Signing time: Wed 23 Sep 2026 05:43:52 +0000
Manifest this update: Wed 23 Sep 2026 05:43:51 +0000
Manifest next update: Fri 25 Sep 2026 05:43:51 +0000
Files and hashes: 1: 282W95Lg6D5i6CDFStMGU1QFduM.crl (hash: tj2YglOIlow7BkqUA2QDmCfLvyQZgGYf5RYQ3zo23I4=)
2: 800DBED485E311F1A69754D4CE1D38B0.roa (hash: gIjXIokhBTqr9NfKMjABZHd19gtr0Nhw1HH6PPnE5Jg=)
3: 647E02F0753511F18E3974DECE1D38B0.roa (hash: xKBb/SHJ/6UiPb5L7oEAFDNfhF2/kjoVITp1UjEzsf4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F06AF, serialNumber=DBCD96F792E0E83E62E820C54AD30653540576E3
Validity
Not Before: Sep 23 05:43:51 2026 GMT
Not After : Sep 25 05:43:51 2026 GMT
Subject: CN=6ab36718-2af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:de:34:05:2c:2b:f0:b6:f2:07:d5:7a:80:
ae:47:8c:f2:62:d5:2e:12:99:70:d4:2f:3c:6c:d0:
34:30:2f:70:3e:ab:8a:12:6d:e8:cf:47:8b:04:9a:
22:d9:66:5d:32:62:b1:ac:46:ff:79:43:71:9b:df:
4c:cc:a2:f4:55:84:d5:f9:3f:f8:b7:f9:51:b5:3d:
37:f7:a9:2f:1a:f6:c1:a2:b7:d7:b7:b8:37:df:76:
1b:79:49:71:3e:d6:b2:69:48:12:a5:f7:7e:4c:7f:
d1:13:e7:f5:39:66:84:e1:a1:3d:2c:ba:a2:5b:53:
43:b9:e2:e8:6e:d1:b3:9e:90:f3:4d:67:e8:b8:3a:
eb:e5:12:1c:e1:26:c9:14:60:d2:eb:75:34:d7:ee:
c9:30:1e:41:1f:15:a1:15:23:4b:59:22:28:44:9d:
8f:13:64:a9:98:2e:ec:3c:d6:68:33:c9:85:4b:1e:
73:d6:0f:73:d7:23:2f:a2:f1:04:74:f8:35:8d:a6:
7d:9e:53:b7:4e:b1:08:d9:88:1b:1c:45:07:a9:9e:
fe:c9:cd:4c:3b:67:24:86:51:54:04:c2:83:dc:07:
49:d1:23:5f:f5:da:4a:e3:bf:5a:0a:1c:48:ea:4f:
0f:bd:8a:60:1c:c2:6a:f4:9a:1d:e9:2e:ce:80:c9:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:85:5B:8F:FE:1C:38:C9:33:3A:1C:E7:6A:F2:D9:9D:E8:3F:08
X509v3 Authority Key Identifier:
keyid:DB:CD:96:F7:92:E0:E8:3E:62:E8:20:C5:4A:D3:06:53:54:05:76:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/282W95Lg6D5i6CDFStMGU1QFduM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F06/FC017892753411F1B1F65ADCCE1D38B0/282W95Lg6D5i6CDFStMGU1QFduM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:29:92:ae:45:7d:89:45:d3:38:b5:f8:72:24:fb:7e:35:
ff:8c:66:69:ac:97:9e:50:4a:4c:3f:de:c1:a4:ff:8b:86:cd:
9f:cc:74:4a:f5:a4:7b:d5:ce:41:1b:05:08:e9:0c:51:72:5e:
99:37:90:77:26:9d:a5:fe:07:30:41:c4:28:f0:b8:cd:df:3f:
ed:88:d1:2f:67:c3:4a:76:88:fc:62:ce:f9:c8:2e:f8:4d:35:
3f:38:fb:1a:6f:12:3e:2a:aa:56:12:8e:de:8e:8c:3e:57:f7:
b0:07:05:b5:b8:d3:d5:a0:02:76:10:63:55:22:d8:a5:4b:4f:
9a:7b:c4:d3:58:be:ba:67:a6:14:57:0d:c3:49:b1:22:f8:d9:
90:aa:3c:1d:c5:cb:c1:a5:35:f2:8d:b4:3b:15:7b:a0:aa:d0:
2d:0b:ed:1a:18:ae:ff:04:ec:ee:3d:40:9c:c0:d9:8c:dc:90:
62:51:af:a1:08:e2:50:7e:6f:56:63:24:bc:e8:5a:ab:c9:cc:
c5:ba:ac:0e:28:65:6f:8b:43:c7:2c:fe:a4:e5:a5:5a:a2:08:
0e:5a:87:b7:4f:7b:11:88:6c:c2:aa:6a:b0:72:2f:0d:5c:ce:
a0:d1:59:95:9a:99:4b:f2:5d:05:32:a3:26:e5:7e:f2:5e:ec:
a5:f9:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:33 2026 by rpki-client