
Error: rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File: DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier: AIQTK6DMT89TstctMDeKVtyJlRpWO8iXXQd5JwoUZ1c=
Subject key identifier: 66:A7:7E:37:85:D7:74:76:49:AB:F8:78:CB:4E:A4:DB:3F:7F:8F:50
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer: /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial: 0DB3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number: 0DB1
Signing time: Sat 03 Oct 2026 01:07:51 +0000
Manifest this update: Sat 03 Oct 2026 01:07:50 +0000
Manifest next update: Mon 05 Oct 2026 01:07:50 +0000
Files and hashes: 1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: jmDt85Nt19mUhS7BQlWTqiT+zPaIjyoc5CYQHzN5eII=)
2: D7D7B3EA872311F189EC9403CF1D38B0.roa (hash: RwRZLPSGgelwelMUJAdNlv4rmTCGxyEsRVulPRLdE+I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3507 (0xdb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB628AF, serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Validity
Not Before: Oct 3 01:07:50 2026 GMT
Not After : Oct 5 01:07:50 2026 GMT
Subject: CN=6ac05567-84d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:ae:41:03:0c:83:3b:f4:ff:4a:b4:9c:ab:
e2:b6:0e:06:75:0a:27:1d:c1:c9:0f:75:48:5e:30:
e4:c8:4f:bc:0a:06:98:9f:b7:48:f1:90:a9:3b:ee:
dc:2c:70:7f:8a:4e:ff:78:4b:bf:12:19:ff:f7:42:
70:1b:da:02:ba:da:ba:83:8c:6f:37:6d:b4:4b:13:
a6:ec:6c:9c:3c:fb:05:4f:a2:4a:e3:eb:4d:e4:8f:
85:87:2e:a2:42:8f:57:76:e0:71:5e:ec:86:98:ab:
d5:f3:f6:14:81:c5:5e:e8:55:98:4e:f9:4a:02:88:
c2:fb:7d:92:2e:15:62:66:9a:ee:3a:15:70:5a:e3:
95:5e:28:22:44:e2:dd:30:d6:9b:7e:f2:52:cf:6b:
12:57:9a:c8:06:3c:02:65:f3:e8:18:90:56:92:d7:
66:23:44:17:03:af:76:34:ca:b6:78:73:b3:43:24:
01:e0:fa:05:4b:29:46:6e:b0:34:b9:0c:59:8a:72:
a6:44:eb:bf:43:e7:fa:62:49:31:99:0b:9f:96:d0:
88:fa:a6:ec:81:7a:0c:a2:ca:ad:1b:05:81:e3:e3:
70:75:ed:0e:ca:60:35:7c:a8:3c:6b:cd:29:e3:2d:
6a:aa:53:bf:ef:7a:3a:8b:4d:15:52:f3:ba:f4:68:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:7E:37:85:D7:74:76:49:AB:F8:78:CB:4E:A4:DB:3F:7F:8F:50
X509v3 Authority Key Identifier:
keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:4d:4b:28:04:6a:e6:f7:fa:fc:46:72:d8:3a:7d:c0:7c:bf:
cc:b3:bd:a6:e4:8b:65:32:fb:45:76:65:16:a3:15:4e:82:f6:
32:db:6c:96:77:5d:92:c4:a0:37:41:14:85:44:c6:40:bd:5a:
2e:17:94:26:d0:26:5a:e0:29:20:18:0b:59:15:12:e3:f3:c7:
5c:45:37:98:66:3f:42:20:50:89:16:51:fd:80:c4:8b:97:5f:
1b:c1:7a:f6:0e:2e:87:2b:a3:30:5b:e9:fe:c1:ec:f3:b9:3a:
d5:3f:48:fc:d4:9d:0f:51:a7:b7:f4:28:7b:05:64:2e:34:a9:
3e:2f:5b:f3:43:b1:6e:0b:d3:90:c1:bf:a8:5c:f8:fa:ae:55:
2f:3b:31:63:fd:ce:11:b9:f5:85:62:81:9a:e6:4f:38:c3:db:
4f:26:8c:31:aa:ba:52:0d:62:46:28:57:c4:85:9a:f0:e8:f7:
14:90:b0:16:7c:0e:97:4c:3b:ac:26:3c:89:28:ca:4d:1d:0a:
80:0a:89:33:c0:05:ea:fd:f9:68:fa:52:c9:05:86:43:6b:90:
f9:de:8b:8a:f8:2c:27:51:57:f7:05:73:42:b8:da:87:d2:1b:
71:c6:3c:d8:53:70:32:79:91:d4:e0:2c:b8:87:ba:6a:6d:62:
af:a6:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:52:46 2026 by rpki-client