
Error: rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: Q7Y6T9k0XKGlvkX9HPkICLCG1JrHFFBBauwS9xtlvU0=
Subject key identifier: E6:5D:34:B8:1F:2A:76:94:C7:B9:91:D2:3D:4C:FB:88:16:26:AC:F8
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 1053
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 1051
Signing time: Wed 14 Oct 2026 00:52:53 +0000
Manifest this update: Wed 14 Oct 2026 00:52:52 +0000
Manifest next update: Fri 16 Oct 2026 00:52:52 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: z4FTwymJFk4tqsjhsNDOYFF03TEKOyRF/PabINaGBT0=)
2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 00:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Oct 14 00:52:52 2026 GMT
Not After : Oct 16 00:52:52 2026 GMT
Subject: CN=6aced265-a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:84:1b:8c:54:ac:d0:c5:9f:f9:87:0b:dc:
39:01:3c:e3:5b:40:2d:f7:eb:5a:fb:6d:2a:3a:1f:
66:88:38:ec:2a:63:74:fd:2a:26:04:aa:6e:ba:aa:
c0:3b:0e:8e:89:f0:f1:98:04:87:ad:ba:42:4a:0c:
67:1e:25:24:77:61:1e:b3:4c:5e:f6:5b:ee:a1:b0:
d0:e9:d8:49:df:cf:7f:8c:ba:7b:63:ee:c7:6d:09:
34:cf:79:25:63:6a:f1:bf:96:7b:c0:b2:1b:ad:ca:
b8:28:26:6f:60:68:7d:e9:42:93:89:68:89:78:67:
cb:92:50:8c:f8:61:d4:a3:68:72:8b:3d:03:96:fe:
f4:39:9d:ea:e9:dc:9c:b9:28:c9:cf:53:bd:23:45:
c6:a4:bf:e5:cd:17:f0:94:26:ff:d2:54:c4:d9:0d:
77:c0:e8:f1:e1:94:df:a4:9c:dd:b8:7f:3d:79:7f:
63:31:87:a5:5f:35:d8:0d:d3:ed:ce:1d:09:45:e8:
38:af:14:7e:39:12:c4:f6:e6:8c:82:9d:e6:eb:f7:
43:3d:f1:99:7f:d9:f7:cf:55:7d:fa:e6:a3:c2:e6:
5d:30:dd:27:02:94:1f:cb:38:e2:34:c3:d4:74:7d:
ba:8c:b6:c9:91:48:d1:69:16:84:bb:81:1d:63:72:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:34:B8:1F:2A:76:94:C7:B9:91:D2:3D:4C:FB:88:16:26:AC:F8
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:6b:a3:0b:8c:00:18:11:25:50:ea:92:2f:7d:b6:b2:58:
ed:3b:ae:6f:a6:07:ad:b6:3f:17:d0:bd:2f:3a:a1:b6:bf:17:
ed:d1:8a:60:46:32:0b:d7:b0:3e:e4:42:e4:65:85:dd:d2:f0:
b4:f3:18:1e:df:88:7d:81:bb:24:26:b9:08:2d:09:a2:f3:be:
23:8d:a8:45:c9:03:18:14:07:3e:37:ee:69:e0:3a:9d:5f:6b:
81:0a:30:1a:42:bc:90:47:56:71:6f:cc:b8:1f:b1:93:3c:6a:
ba:59:74:a5:6d:74:ea:0d:e0:f5:7a:7a:33:0b:eb:0d:9e:b0:
06:71:fd:44:22:cf:f4:b3:c3:0b:f5:b1:d9:c5:44:a4:30:3f:
c7:73:72:12:05:93:57:30:9b:d3:2b:41:82:1d:1e:fd:a2:be:
70:29:ae:f2:16:c3:a7:28:ae:b0:5e:66:b9:d3:86:21:a6:1b:
bc:00:c8:30:f9:07:98:20:0a:61:d2:9e:b7:fa:1e:b4:7c:60:
98:a0:7b:25:43:d5:f3:0f:75:4c:b7:d2:2c:88:d0:41:55:a2:
4d:ed:98:fc:3b:a5:6f:de:3c:3e:9c:ec:78:ba:ad:9a:76:f0:
fd:5a:67:dc:16:83:75:e4:77:a5:e2:d2:a9:b1:91:b3:41:f1:
a8:a3:e8:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEFMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkZEMUVBRjExMC8GA1UEBRMoNDEyRDE5RjlBNEUxN0EwNEQwOUJBREM5MDJBQjBC
MDkwODI0RUFENzAeFw0yNjEwMTQwMDUyNTJaFw0yNjEwMTYwMDUyNTJaMBgxFjAU
BgNVBAMTDTZhY2VkMjY1LWE3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFl4QbjFSs0MWf+YcL3DkBPONbQC3361r7bSo6H2aIOOwqY3T9KiYEqm66
qsA7Do6J8PGYBIetukJKDGceJSR3YR6zTF72W+6hsNDp2Enfz3+Muntj7sdtCTTP
eSVjavG/lnvAshutyrgoJm9gaH3pQpOJaIl4Z8uSUIz4YdSjaHKLPQOW/vQ5nerp
3Jy5KMnPU70jRcakv+XNF/CUJv/SVMTZDXfA6PHhlN+knN24fz15f2Mxh6VfNdgN
0+3OHQlF6DivFH45EsT25oyCnebr90M98Zl/2ffPVX365qPC5l0w3ScClB/LOOI0
w9R0fbqMtsmRSNFpFoS7gR1jchoPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5l00
uB8qdpTHuZHSPUz7iBYmrPgwHwYDVR0jBBgwFoAUQS0Z+aThegTQm63JAqsLCQgk
6tcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZGRDFFLzFBQUUyNjBDMzE2NTExRTVBRTY2NjA2N0Y4QUVBMjI4L1FTMFot
YVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FTMFotYVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkZEMUUvMUFBRTI2MEMzMTY1MTFFNUFFNjY2MDY3RjhB
RUEyMjgvUVMwWi1hVGhlZ1RRbTYzSkFxc0xDUWdrNnRjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBw72ujC4wAGBElUOqSL322sljtO65v
pgettj8X0L0vOqG2vxft0YpgRjIL17A+5ELkZYXd0vC08xge34h9gbskJrkILQmi
874jjahFyQMYFAc+N+5p4DqdX2uBCjAaQryQR1Zxb8y4H7GTPGq6WXSlbXTqDeD1
enozC+sNnrAGcf1EIs/0s8ML9bHZxUSkMD/Hc3ISBZNXMJvTK0GCHR79or5wKa7y
FsOnKK6wXma504Yhphu8AMgw+QeYIAph0p63+h60fGCYoHslQ9XzD3VMt9IsiNBB
VaJN7Zj8O6Vv3jw+nOx4uq2advD9WmfcFoN15Hel4tKpsZGzQfGoo+iX
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:26:07 2026 by rpki-client