
Error: rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File: hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier: s7+FHDPBBG5Eyzf4bj1iRuCusfo3FLqfLZhuOCGUaEM=
Subject key identifier: 45:1F:5E:BF:56:14:5B:1F:B7:0F:68:C9:FA:BF:69:F9:9A:EF:3A:B8
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 0636
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number: 062B
Signing time: Tue 03 Nov 2026 02:56:56 +0000
Manifest this update: Tue 03 Nov 2026 02:56:55 +0000
Manifest next update: Thu 05 Nov 2026 02:56:55 +0000
Files and hashes: 1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: GRUHPg0iuhaeirUFpgsoOH9PK9mfw0CYyhM6fShxG20=)
2: 9F55A6088FCA11F1B30815C9CE1D38B0.roa (hash: +CWFxBF1PZN6OniJBdhYOvm7KqNNXKgvRCDZ4zqYgWk=)
3: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
4: DD559FC68FCF11F18B5977E7CE1D38B0.roa (hash: 88ReSMVzJ4BF1wDmtrF0G+NRMvDEU2WgJwfRanfSMO4=)
5: 50BE21588FCC11F1B4CB3AD1CE1D38B0.roa (hash: jehT4w4l4yjlEklCE/woHJl77Wd5+kKmPfYLjQCak+U=)
6: EB0E6C0E8FCC11F1AFB13AD5CE1D38B0.roa (hash: OR4CeWr7z50WI0avP9UMn/SEpC0E+MmNgu0hAqXKawg=)
7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Nov 3 02:56:55 2026 GMT
Not After : Nov 5 02:56:55 2026 GMT
Subject: CN=6ae94d78-e2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:ef:d5:51:ab:c0:63:dd:8d:39:cd:bd:9f:
64:75:af:92:a9:aa:8c:f6:2f:3b:58:8b:9d:83:b8:
3d:83:8f:f6:7e:18:51:0f:c2:8c:39:8a:95:c8:45:
66:d5:04:14:e5:ac:73:3c:ee:f7:07:b2:05:69:c6:
e9:17:76:a7:0f:a0:d3:06:13:44:3f:63:76:b0:ca:
03:9c:55:48:87:bd:63:35:a4:05:29:a7:50:18:98:
a3:5f:a7:1b:46:37:ea:72:4d:e3:f9:32:a6:2a:69:
43:4a:6e:ae:6a:88:a0:41:a6:77:4d:4f:aa:ea:4a:
0f:ce:61:24:92:de:dd:a2:ba:12:97:10:64:fd:a1:
0b:0c:7c:f3:09:03:53:22:7e:48:8f:68:ab:25:d6:
89:62:8c:bd:ab:c4:6d:4c:1c:1e:51:63:1f:f5:e3:
2e:95:2a:d0:e3:21:ee:72:13:f8:66:64:4e:9d:3d:
40:46:aa:bf:9c:b1:71:89:c5:c8:a1:84:01:b5:9a:
64:84:0e:1a:0d:c8:d3:2f:b5:9a:0d:05:d5:e5:b7:
c3:0e:c7:a9:cd:5c:c7:4c:d9:63:dd:a6:58:9c:1a:
19:cb:ef:c8:14:f3:f5:6f:51:fc:9d:35:67:77:c3:
c3:f4:89:b8:55:18:7d:a7:2a:d2:6d:00:6e:a8:c4:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:5E:BF:56:14:5B:1F:B7:0F:68:C9:FA:BF:69:F9:9A:EF:3A:B8
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d9:0a:3e:5e:26:5f:89:b4:b4:a1:f6:8f:4a:93:32:b4:b8:
a3:3b:7b:cf:ec:e3:2e:b7:84:ba:d4:28:fa:a2:bd:64:36:2d:
f7:ad:f2:05:4e:8d:30:e4:3b:1c:02:31:03:bc:30:fe:ec:77:
86:f5:94:3d:6d:41:02:99:92:46:91:8f:89:fc:be:a7:a4:02:
68:f7:dc:78:14:8b:5c:86:03:8b:26:18:6a:07:cc:ac:48:bb:
83:ef:f1:db:3a:20:8a:ac:9f:46:c4:73:ee:32:c7:b8:47:37:
2c:48:0d:e5:e5:53:6d:d0:d0:ef:ba:fd:ae:b5:e8:db:7a:e1:
9d:56:59:48:31:ad:14:c1:88:73:28:f3:75:d0:24:e3:c4:59:
dc:22:4a:3b:40:d9:4c:6a:18:90:0a:98:38:9c:5f:39:b3:30:
c8:db:23:b5:5c:13:31:67:82:9d:66:a0:6f:54:a7:88:d2:b9:
41:b0:be:d4:44:ff:0c:84:29:56:8a:1e:0f:96:33:1f:2b:35:
54:60:3c:f5:73:cc:b0:bc:5b:c6:62:5c:9c:4c:2d:1d:f3:3c:
58:1e:86:3f:25:56:38:18:e7:d3:c9:63:19:c3:09:3d:61:bd:
c4:e6:07:15:e5:2d:e6:74:37:a7:31:22:7c:4f:4d:d2:06:5d:
ab:cc:80:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNjExMDMwMjU2NTVaFw0yNjExMDUwMjU2NTVaMBgxFjAU
BgNVBAMTDTZhZTk0ZDc4LWUyZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJAu/VUavAY92NOc29n2R1r5Kpqoz2LztYi52DuD2Dj/Z+GFEPwow5ipXI
RWbVBBTlrHM87vcHsgVpxukXdqcPoNMGE0Q/Y3awygOcVUiHvWM1pAUpp1AYmKNf
pxtGN+pyTeP5MqYqaUNKbq5qiKBBpndNT6rqSg/OYSSS3t2iuhKXEGT9oQsMfPMJ
A1MifkiPaKsl1olijL2rxG1MHB5RYx/14y6VKtDjIe5yE/hmZE6dPUBGqr+csXGJ
xcihhAG1mmSEDhoNyNMvtZoNBdXlt8MOx6nNXMdM2WPdplicGhnL78gU8/VvUfyd
NWd3w8P0ibhVGH2nKtJtAG6oxMvhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURR9e
v1YUWx+3D2jJ+r9p+ZrvOrgwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEy
MjI0NjgvaEx3aW9VdTEtSW04RUtJczhYeWNHYlVac29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCo2Qo+XiZfibS0ofaPSpMytLijO3vP
7OMut4S61Cj6or1kNi33rfIFTo0w5DscAjEDvDD+7HeG9ZQ9bUECmZJGkY+J/L6n
pAJo99x4FItchgOLJhhqB8ysSLuD7/HbOiCKrJ9GxHPuMse4RzcsSA3l5VNt0NDv
uv2utejbeuGdVllIMa0UwYhzKPN10CTjxFncIko7QNlMahiQCpg4nF85szDI2yO1
XBMxZ4KdZqBvVKeI0rlBsL7URP8MhClWih4PljMfKzVUYDz1c8ywvFvGYlycTC0d
8zxYHoY/JVY4GOfTyWMZwwk9Yb3E5gcV5S3mdDenMSJ8T03SBl2rzIAC
-----END CERTIFICATE-----
Generated at Tue Nov 3 18:40:09 2026 by rpki-client