
Error: rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
File: ZlRSFtT_yAOJ2hnLMhrgeor169w.mft (raw, json)
Hash identifier: zABKvhbOVaH2f9T6JwTwi9XSEjpB3Ne9sWFFfGSOjoY=
Subject key identifier: C7:8E:E4:42:9F:18:0C:09:59:53:E4:95:B9:0A:32:2D:99:15:63:CF
Authority key identifier: 66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC
Certificate issuer: /CN=F3610D4EAF/serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
Certificate serial: 4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
Manifest number: 4A
Signing time: Tue 03 Nov 2026 05:52:02 +0000
Manifest this update: Tue 03 Nov 2026 05:52:01 +0000
Manifest next update: Thu 05 Nov 2026 05:52:01 +0000
Files and hashes: 1: ZlRSFtT_yAOJ2hnLMhrgeor169w.crl (hash: BQvwVOdx/t+i9+nYz9GACU+bDvIvMsq46EaaMh5SJ1s=)
2: 572B0E1EBB3411F1A64B7DD3CE1D38B0.roa (hash: oIs4yuXi4euWEmBdHXaTivtw8E4cUSC8hVVNBIEfAp8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 05:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610D4EAF, serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
Validity
Not Before: Nov 3 05:52:01 2026 GMT
Not After : Nov 5 05:52:01 2026 GMT
Subject: CN=6ae97682-59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:51:61:bf:26:de:52:03:09:36:f1:f0:49:
45:56:cd:e4:1c:ac:b4:ae:e1:39:38:be:05:25:c9:
9a:4c:60:91:76:6e:10:12:aa:cd:21:a5:4c:a4:5a:
b9:9d:21:c5:5a:fb:13:7a:02:7f:60:d1:59:2e:ea:
5d:de:d7:80:f1:c3:a8:25:5a:76:e5:5b:7b:19:d1:
f0:b4:f3:1f:4c:98:5a:94:40:76:a8:f5:ea:85:6c:
9e:43:0e:8b:10:3a:a2:b9:e7:1b:0e:08:f3:ee:d4:
e6:d0:97:c0:63:3f:2f:74:be:3e:9c:2b:21:34:09:
31:c7:5d:54:42:20:98:68:a8:f9:a7:f7:02:be:89:
59:e6:ec:f8:0b:53:64:27:6d:b8:4b:13:17:f2:dc:
65:c7:ee:62:d0:e6:df:e7:51:73:ac:63:aa:71:34:
1a:d0:3b:04:4d:b3:8f:a0:57:5c:e6:c0:46:12:5e:
ca:7c:79:52:22:b5:a3:c9:42:55:dc:24:31:b0:5a:
64:9d:ac:24:24:0b:ec:e9:0c:32:ce:03:68:c7:71:
f3:0d:62:31:9b:e8:2a:f0:0a:d2:af:9e:6f:47:bd:
31:e4:49:5f:4d:37:73:d7:0e:20:3c:24:a2:d1:2d:
1c:0b:74:e0:c5:ae:2f:9b:b0:06:c2:10:d4:98:64:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:E4:42:9F:18:0C:09:59:53:E4:95:B9:0A:32:2D:99:15:63:CF
X509v3 Authority Key Identifier:
keyid:66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:e6:93:fa:64:04:fe:02:69:f7:2f:f2:7f:1e:4d:3c:72:
67:2b:ce:85:a4:fb:42:76:a8:3a:d2:62:ab:a0:20:48:61:2c:
02:3e:95:4d:f6:ae:da:f7:2f:06:7a:9f:40:7a:99:f7:ba:35:
96:d6:6c:d6:f6:3b:dc:cd:e8:19:1e:d0:8e:7d:07:e2:27:6b:
6a:04:9b:1b:1a:29:bb:74:a0:4f:59:c8:08:7b:04:c2:41:2b:
6e:b7:08:c0:f3:09:07:35:26:ba:04:74:5b:96:a2:81:f2:1c:
84:f1:f7:79:18:17:76:ed:07:44:1d:e8:be:c0:2c:a0:4c:ac:
94:1c:51:ba:eb:4b:b3:23:8b:5b:ff:c9:ff:af:bd:87:a1:04:
1e:35:21:cd:b5:e5:3b:31:e8:70:4a:a6:08:84:cb:4e:51:ba:
f2:a2:e3:85:c2:ce:f6:2b:c6:b9:bd:6d:89:f1:1d:ce:5a:6a:
b4:ef:44:fc:8a:4c:cf:6b:2f:a3:6b:fa:7d:6b:28:7c:b9:28:
a9:c8:74:e9:9f:45:55:cb:7a:fd:52:a3:36:ef:60:88:b6:36:
78:41:2f:6c:52:b5:4a:1e:6c:63:ad:f6:6e:b1:ec:f8:63:c8:
c4:45:15:18:c6:41:37:e5:f4:4b:02:c7:78:c6:27:9b:50:ae:
63:8b:a4:75
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBSzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MEQ0RUFGMTEwLwYDVQQFEyg2NjU0NTIxNkQ0RkZDODAzODlEQTE5Q0IzMjFBRTA3
QThBRjVFQkRDMB4XDTI2MTEwMzA1NTIwMVoXDTI2MTEwNTA1NTIwMVowGDEWMBQG
A1UEAxMNNmFlOTc2ODItNTlkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzfUWG/Jt5SAwk28fBJRVbN5BystK7hOTi+BSXJmkxgkXZuEBKqzSGlTKRa
uZ0hxVr7E3oCf2DRWS7qXd7XgPHDqCVaduVbexnR8LTzH0yYWpRAdqj16oVsnkMO
ixA6ornnGw4I8+7U5tCXwGM/L3S+PpwrITQJMcddVEIgmGio+af3Ar6JWebs+AtT
ZCdtuEsTF/LcZcfuYtDm3+dRc6xjqnE0GtA7BE2zj6BXXObARhJeynx5UiK1o8lC
VdwkMbBaZJ2sJCQL7OkMMs4DaMdx8w1iMZvoKvAK0q+eb0e9MeRJX003c9cOIDwk
otEtHAt04MWuL5uwBsIQ1Jhk4/0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTHjuRC
nxgMCVlT5JW5CjItmRVjzzAfBgNVHSMEGDAWgBRmVFIW1P/IA4naGcsyGuB6ivXr
3DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTBENEUvMEI2QzRCQUU5RkE2MTFGMTlFMkVGNzFEQ0YxRDM4QjAvWmxSU0Z0
VF95QU9KMmhuTE1ocmdlb3IxNjl3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWmxSU0Z0VF95QU9KMmhuTE1ocmdlb3IxNjl3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMEQ0RS8wQjZDNEJBRTlGQTYxMUYxOUUyRUY3MURDRjFE
MzhCMC9abFJTRnRUX3lBT0oyaG5MTWhyZ2VvcjE2OXcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEeX5pP6ZAT+Amn3L/J/Hk08cmcrzoWk
+0J2qDrSYqugIEhhLAI+lU32rtr3LwZ6n0B6mfe6NZbWbNb2O9zN6Bke0I59B+In
a2oEmxsaKbt0oE9ZyAh7BMJBK263CMDzCQc1JroEdFuWooHyHITx93kYF3btB0Qd
6L7ALKBMrJQcUbrrS7Mji1v/yf+vvYehBB41Ic215Tsx6HBKpgiEy05RuvKi44XC
zvYrxrm9bYnxHc5aarTvRPyKTM9rL6Nr+n1rKHy5KKnIdOmfRVXLev1SozbvYIi2
NnhBL2xStUoebGOt9m6x7PhjyMRFFRjGQTfl9EsCx3jGJ5tQrmOLpHU=
-----END CERTIFICATE-----
Generated at Wed Nov 4 06:00:04 2026 by rpki-client