
Error: rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
File: i-zANBYqduTT-3Ze7KfFkL_PiHU.mft (raw, json)
Hash identifier: NpmcoYgduTbXwbLO/Y5kAzz0xsY/PIP5F3id7KoL1JI=
Subject key identifier: FF:B7:CB:46:21:85:1F:7A:76:42:24:07:13:33:B1:8B:31:BF:CD:C2
Authority key identifier: 8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
Certificate issuer: /CN=F36AD6A0AF/serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Certificate serial: 01CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
Manifest number: 01CA
Signing time: Wed 04 Nov 2026 05:03:55 +0000
Manifest this update: Wed 04 Nov 2026 05:03:54 +0000
Manifest next update: Fri 06 Nov 2026 05:03:54 +0000
Files and hashes: 1: i-zANBYqduTT-3Ze7KfFkL_PiHU.crl (hash: JiIOT3eV2m6bfAvbD5l8ZWFMgFmXt8jGBLpulXasvvQ=)
2: 45A9EBAC776E11F0986637CDDAE4EC9C.roa (hash: 5DzDp+6CZ7DSXgCRfb2nrU32DuFDeMShxoaruyg5+fI=)
3: 2A440418B0E011F19CEFAAF7CE1D38B0.roa (hash: /fpYhKfar7+zP0PxTOQf1oRuU9OGmO6wuPcf7iHYbKA=)
4: 28EA7144776E11F0AA3B2ECDDAE4EC9C.roa (hash: z8x4zegua5aDN/K6PnuCdH+nQv873VD50NfZxOF1vT0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 05:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AD6A0AF, serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Validity
Not Before: Nov 4 05:03:54 2026 GMT
Not After : Nov 6 05:03:54 2026 GMT
Subject: CN=6aeabcbb-8a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:ad:60:32:33:94:f0:c9:2e:3f:49:b3:f9:
c9:ef:65:27:4b:ef:54:95:32:66:e5:7f:da:3b:df:
48:8f:1d:45:fc:74:3a:58:e6:09:5b:cb:fa:14:27:
cc:8f:e5:d8:3e:c2:57:85:49:69:2c:7f:e5:ed:32:
08:65:b8:13:f4:1c:a7:ac:ba:ac:82:30:52:f9:0f:
44:b4:67:ed:16:0c:d1:03:f1:c0:53:b7:85:6c:7f:
fd:95:28:61:ca:40:8b:29:90:06:4f:56:4a:37:34:
78:92:50:66:be:1e:24:8d:b5:2c:5c:7e:38:64:4f:
d6:8d:87:15:6b:a3:47:5c:28:e0:b6:f2:12:d5:da:
46:98:ec:2f:f2:7f:a8:2e:1c:d9:61:7d:99:d9:49:
2c:ce:89:e3:a7:96:aa:4b:6c:9c:57:cc:04:5a:a2:
18:75:25:18:fc:fa:a1:2e:f7:53:eb:d6:f7:03:5c:
86:8a:8c:0b:71:49:ee:a9:22:ec:10:cb:66:8c:19:
a9:f9:d0:44:cc:6d:1e:e1:4a:c6:de:dc:aa:bc:a2:
ad:84:5e:d4:cd:f4:dc:ac:2b:67:90:1a:ef:83:66:
f7:c8:8f:4b:05:84:2c:f7:b0:fa:aa:6b:ee:f1:03:
36:11:9c:55:03:cd:c5:dc:ae:88:4e:47:36:72:4f:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B7:CB:46:21:85:1F:7A:76:42:24:07:13:33:B1:8B:31:BF:CD:C2
X509v3 Authority Key Identifier:
keyid:8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:35:c6:25:7d:b7:e1:45:d7:b6:3d:d2:70:80:25:b7:69:
de:29:f0:fc:40:5a:29:e1:79:43:da:1e:e3:43:88:de:b9:5b:
54:ea:c0:54:cb:a0:fe:8d:57:d1:ae:56:d8:c2:0e:fc:76:85:
02:80:51:8e:5b:8c:98:46:bb:44:ea:b9:53:ee:e4:51:04:68:
c6:f4:6e:a2:83:e5:73:09:f7:1d:4e:19:9c:ca:31:ad:79:73:
50:31:47:97:4b:91:1d:69:bb:e6:00:a0:4d:98:a8:e3:9a:a0:
67:13:1b:d3:63:85:d6:11:0a:4b:ea:e0:8d:da:e1:fc:e1:41:
c0:72:d6:7c:c2:29:05:00:18:14:09:f2:41:b3:da:2d:1c:fc:
46:17:a0:bf:d5:79:d6:6f:b7:3b:d2:97:76:52:d9:f9:a8:be:
f8:28:b0:be:09:6f:b7:22:3c:fd:d0:9d:a5:64:a1:e3:53:a0:
9d:30:54:65:e6:23:1c:ba:37:73:cb:90:89:94:02:b9:0f:18:
78:da:d7:57:9a:67:34:ab:eb:8e:11:4f:a6:f9:b6:90:06:e4:
fc:0c:fd:da:fa:3d:15:c4:17:45:e9:d5:16:90:b5:8c:f3:b5:
82:e1:05:c6:44:c4:3d:97:2f:28:c7:fd:7f:b5:06:40:8c:a2:
5c:20:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:28:26 2026 by rpki-client