
Error: rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File: sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier: S7+rtNgAVVmT8YGHMn7gHLUolqHQ2qTiusPGVV1SU4k=
Subject key identifier: B9:61:00:5D:55:42:96:CD:AF:DC:B7:07:AC:94:70:8F:AE:07:84:9B
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer: /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial: 0384
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number: 037E
Signing time: Fri 09 Oct 2026 04:10:11 +0000
Manifest this update: Fri 09 Oct 2026 04:10:10 +0000
Manifest next update: Sun 11 Oct 2026 04:10:10 +0000
Files and hashes: 1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: 5oZ+xlp499a72BTRWOYxEPdN+txjwH0u3hefyWt1w1Y=)
2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Oct 2026 04:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Validity
Not Before: Oct 9 04:10:10 2026 GMT
Not After : Oct 11 04:10:10 2026 GMT
Subject: CN=6ac86923-9e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9d:b4:aa:5f:3c:f6:76:9d:cb:47:47:c6:dc:
a5:4b:2f:db:d4:9b:98:d9:85:4d:d1:c3:f3:1e:e4:
0b:da:8f:05:1b:3d:c2:82:b6:c9:09:3c:40:a8:86:
f5:fb:e8:25:f6:bb:4a:b6:79:dc:45:42:bb:3b:43:
f1:0d:0f:01:60:ff:8a:53:ec:0a:7e:dd:27:ff:a3:
00:13:e1:87:1d:16:c5:bf:fd:6e:9b:be:1b:63:48:
41:55:8a:f7:3a:2a:d6:6d:c8:55:fc:3b:05:b9:9a:
8b:90:da:6b:ad:1f:d7:ce:d0:7f:34:fb:70:b1:b6:
60:0f:da:65:a0:82:2c:30:61:39:c5:22:bc:3f:d7:
b8:38:4b:15:05:86:14:e0:f2:0d:a0:eb:fd:c2:8d:
42:22:b4:75:79:5c:37:36:19:76:f7:03:05:e0:91:
3b:50:22:73:d0:a1:b1:16:fd:75:82:7c:82:80:50:
2a:9d:b2:a0:78:7c:1c:03:51:c0:5f:9e:5a:cc:9b:
13:ee:24:f2:b9:65:b1:c8:6c:50:dd:e8:a1:93:e7:
26:d4:3d:3e:72:a9:22:53:6a:4d:09:e5:ec:fe:6a:
08:25:fa:cb:4f:6d:ad:86:8b:e6:44:62:42:62:5d:
3b:a8:50:b4:46:ec:d8:16:e5:48:ac:04:eb:03:ed:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:00:5D:55:42:96:CD:AF:DC:B7:07:AC:94:70:8F:AE:07:84:9B
X509v3 Authority Key Identifier:
keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:dd:51:36:c9:76:8e:5a:56:37:50:5d:72:34:68:f5:29:
a1:2a:77:07:20:a9:43:c2:6a:bb:66:8a:a0:da:f9:8f:2f:8a:
cd:2e:63:28:b6:ce:d0:50:9b:e1:77:05:3a:7b:1d:74:52:70:
b2:7b:c4:7d:72:1b:58:8d:cc:a6:4f:25:75:de:d3:5b:c5:1f:
af:dc:da:fe:4c:0f:a9:60:a7:e2:16:75:f8:44:dd:5d:73:43:
c1:45:8c:4c:cd:ac:07:57:4a:56:ce:d5:22:64:03:13:5b:b6:
b5:8a:75:11:1f:4c:78:36:5a:92:a0:e4:f6:5b:a6:75:20:5d:
fe:25:85:cb:f7:bf:8d:6d:49:3c:65:ea:0b:38:11:12:b9:9b:
1c:72:30:ed:c0:40:c3:c5:5e:95:fa:bd:bb:23:a1:63:09:45:
f0:7d:8a:92:ea:51:dd:42:45:dd:a5:2c:86:a3:08:d9:46:6c:
c7:1d:e4:45:8f:ef:6a:4c:a6:d4:4d:fb:74:d7:22:23:74:87:
83:2c:c2:20:a1:96:2b:ff:b3:5c:94:c6:24:30:aa:2a:9d:67:
ac:52:87:bc:7f:21:c3:eb:8d:da:fa:82:5f:3a:3c:24:06:2c:
8b:a6:02:ee:48:2e:cc:ca:89:36:6b:50:b3:38:a8:53:d3:ec:
e6:e6:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:34:40 2026 by rpki-client