
Error: rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
File: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json)
Hash identifier: Lz6bMG6GHuXZytzXoTwJmtHX13dZyfwF6BOngf1KpYk=
Subject key identifier: A9:5C:B4:3D:68:54:DA:CC:3C:CF:B2:B1:7F:81:4C:5B:47:72:D0:CB
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 0AEA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
Manifest number: 0AD8
Signing time: Sun 11 Oct 2026 01:28:15 +0000
Manifest this update: Sun 11 Oct 2026 01:28:14 +0000
Manifest next update: Tue 13 Oct 2026 01:28:14 +0000
Files and hashes: 1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: lNu8FRGQcY2DxnEC8tM79u8cv5T7DKP8oPRY9RBS3xY=)
2: B75C7E906EE411F1BFC0C5F8CE1D38B0.roa (hash: yxSUyn7Yk5ZGWHG0/FHM9bfxbuiVZMuC4aOCNZye1hU=)
3: 6C92F8926EE111F1BE935CE6CE1D38B0.roa (hash: 4lwcOgnzLzEB/E9hUs2QzeevDs6EAMCI/rEoNCniIAc=)
4: EDEF3E0C6EE411F19B54C6FACE1D38B0.roa (hash: BU4bFgjRPGM2my9qgXl9GWzjnVJcxAn8h0IPdvk7Tg4=)
5: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=)
6: C99074A86EE511F1A0B7BA00CF1D38B0.roa (hash: TMRCyfSKOW6QLRSeFIMaerdug4mgiwMN7tQz4PORojM=)
7: 2C657F88958811F19565AA04CF1D38B0.roa (hash: D87TM0giV+0DWOAmJ22pHAEcl9l7JcZYRoDDL9i+LNg=)
8: F4F37FFCB7D111F1BD1A89C4CE1D38B0.roa (hash: e7xMBKMTAeroe6V+KIuKWf5P+NchJblhR16sOfvrzDU=)
9: 297034DCB7D211F1B54802C5CE1D38B0.roa (hash: rXWVQT892VCrJK5vdICYklgxuIZ5tALpLCItsAt6RW8=)
10: A84E555A6EE311F1897E5EF4CE1D38B0.roa (hash: t4D6hIFY0p5ZMnItN5GrDjfqPD9JxuqJaTYlOHaS5Lc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF, serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Oct 11 01:28:14 2026 GMT
Not After : Oct 13 01:28:14 2026 GMT
Subject: CN=6acae62f-5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:0a:36:fd:35:3f:c5:1d:39:a9:8f:c2:7e:
e5:84:9d:6e:92:69:3b:97:a1:98:14:4d:7a:ad:85:
27:b8:fa:2b:c9:19:c2:d4:e9:08:0b:17:3b:b9:8d:
4c:ef:85:0a:df:ba:69:86:ce:91:ef:65:29:76:f2:
31:a1:69:6d:35:79:96:0b:f0:af:12:f7:c6:96:97:
bb:e1:38:f3:ba:2c:62:fe:ad:19:ee:cb:71:3b:28:
5b:0a:bc:96:f4:37:1e:02:13:f1:33:c9:15:21:d2:
8b:14:ee:38:68:10:31:30:b7:75:25:77:5a:5c:8f:
0a:9b:58:de:20:b8:24:23:a7:41:92:c3:f1:bf:a4:
cd:a7:4e:b1:42:e2:dc:6a:af:97:fa:5a:c8:0d:d4:
4f:81:e8:71:01:96:76:d8:df:3f:19:a2:5b:7a:7b:
46:09:aa:a8:d2:96:b0:18:db:49:54:f5:82:e0:76:
a4:f4:c8:b0:43:48:1a:17:01:4a:0a:0e:07:5c:0a:
66:5e:a7:2b:99:c1:22:58:7b:55:96:09:45:96:17:
b5:8d:2a:ae:56:32:88:53:59:84:c2:16:ed:98:e4:
5d:05:3d:f1:db:aa:49:ec:31:dd:20:ae:5f:cc:e1:
9e:52:4b:04:e8:0c:aa:9e:96:56:5e:77:2b:10:4b:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5C:B4:3D:68:54:DA:CC:3C:CF:B2:B1:7F:81:4C:5B:47:72:D0:CB
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:8f:74:fb:d8:e7:f5:90:e1:01:f0:c4:6f:de:60:a0:9b:05:
4d:c3:a7:e9:2b:d0:1c:9c:00:e2:63:0a:3d:a1:1b:a3:66:54:
d2:e1:9d:87:6c:c6:db:6c:14:b1:cc:dc:fe:66:31:3f:de:0a:
64:f5:26:28:8c:98:ac:04:e8:72:33:82:43:83:72:1d:7d:62:
3d:a7:01:18:13:27:6f:c4:72:ba:dd:00:73:07:6e:cf:71:52:
26:d4:ed:cf:3d:6f:c4:67:16:8e:b7:49:d0:4f:19:c6:3e:29:
63:7c:6a:59:de:dc:a0:4a:98:10:05:98:23:3e:2a:e0:e2:f8:
aa:54:97:f2:da:a6:a6:a0:d3:44:eb:81:b3:62:8f:30:cb:f5:
2a:b2:07:25:25:89:da:94:06:af:42:33:e9:70:0c:4c:ee:b9:
f1:c5:0a:9f:4a:8b:6d:ad:08:21:8f:35:ef:19:65:fd:09:ed:
29:d0:1c:66:e4:ae:9d:7c:b2:ff:e1:c4:61:75:cd:c5:1c:1e:
9f:73:03:ec:54:01:73:86:65:20:1b:1e:c2:95:65:07:79:e3:
85:b2:c8:bc:cc:b7:07:22:bc:94:91:e0:f3:34:31:bc:5c:14:
61:65:96:e7:6c:86:c1:f6:a7:a6:0f:ab:a4:bc:a1:7a:b8:f7:
4e:8d:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:21:38 2026 by rpki-client