
Error: rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
File: U1CfTDp0tZI7cnx9NJqBzzFftis.mft (raw, json)
Hash identifier: 3q+3QocleeuU5gPQBIwghpQ4IqPDXeqr0gdm9UO6F84=
Subject key identifier: 45:CD:FF:FF:73:BC:F1:7B:82:E3:52:B5:03:EE:79:0A:96:B1:23:CD
Authority key identifier: 53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
Certificate issuer: /CN=F36B7F24AF/serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Certificate serial: 5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
Manifest number: 5A
Signing time: Tue 03 Nov 2026 05:50:02 +0000
Manifest this update: Tue 03 Nov 2026 05:50:01 +0000
Manifest next update: Thu 05 Nov 2026 05:50:01 +0000
Files and hashes: 1: U1CfTDp0tZI7cnx9NJqBzzFftis.crl (hash: /jpOjR2De9pj3BkBEPx7o/WDEikkDag0+qINjmk47B8=)
2: 12A1149A940C11F18B624505CF1D38B0.roa (hash: 8mLLCndnzMbQ2nyrvyzBRBW70YFateeTW3IJydAjH4k=)
3: FCC8A5EEAF6711F1A22EAA0BCF1D38B0.roa (hash: H9dfCQysmouTEaUEeYveL3U37VaeWoFn81c3+Rr0znk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 05:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B7F24AF, serialNumber=53509F4C3A74B5923B727C7D349A81CF315FB62B
Validity
Not Before: Nov 3 05:50:01 2026 GMT
Not After : Nov 5 05:50:01 2026 GMT
Subject: CN=6ae9760a-de3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:70:ef:c0:94:9c:1f:f3:23:c5:8b:8a:c2:
cc:50:a5:7d:b0:1c:d7:4a:7d:81:ed:6a:b4:29:c2:
ef:0e:de:8c:e7:7e:10:e0:85:c0:82:42:71:69:74:
f7:ed:eb:b3:75:7e:66:3f:e4:30:1a:c1:6d:be:5e:
3f:18:30:10:06:bb:7c:a5:6e:84:aa:33:b1:89:9b:
b9:3a:be:c1:26:72:00:84:a8:95:fa:e2:39:67:b7:
de:0e:00:0e:98:ab:f8:3c:b1:17:02:60:f8:28:18:
7f:df:81:be:e5:64:93:00:af:d3:c8:7d:f7:94:01:
69:0d:22:7f:ac:24:a1:26:05:5c:39:73:ec:f3:6d:
fd:42:8c:31:12:23:8c:28:ba:78:6b:c3:da:14:4f:
1c:22:66:7f:33:b3:8e:49:35:68:89:45:3b:27:fc:
0c:6d:f6:49:e5:2d:d0:6d:41:22:a8:a7:c2:7d:91:
e7:28:37:46:0f:cf:f4:6f:0d:e0:57:04:55:ad:fd:
56:8b:64:40:a9:c7:3c:2f:52:de:11:15:d5:51:f5:
2a:9b:af:92:d6:c1:b3:cc:00:5a:c3:99:87:98:29:
29:91:75:4a:97:27:39:35:c0:e4:b9:0f:5c:bd:73:
ce:f2:57:9f:60:2c:b0:eb:92:20:be:5d:3b:c3:14:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:FF:FF:73:BC:F1:7B:82:E3:52:B5:03:EE:79:0A:96:B1:23:CD
X509v3 Authority Key Identifier:
keyid:53:50:9F:4C:3A:74:B5:92:3B:72:7C:7D:34:9A:81:CF:31:5F:B6:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U1CfTDp0tZI7cnx9NJqBzzFftis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7F24/7363D6B8940811F1B22253EFCE1D38B0/U1CfTDp0tZI7cnx9NJqBzzFftis.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:e4:99:4d:12:7e:89:5c:55:96:02:4a:08:e1:4f:c8:b1:77:
73:ee:44:e0:e1:c3:5e:33:8c:b0:f5:52:4d:2b:af:51:3c:01:
13:9f:78:e6:ac:f7:c8:1e:21:b1:e9:de:f7:ca:c0:b2:c3:c9:
48:47:b9:fe:b8:af:ac:b9:26:13:ab:33:4f:ee:51:49:54:20:
6a:14:9e:21:20:ef:d9:01:2c:6c:e2:1a:05:1a:f7:d7:d1:9e:
f9:08:dc:35:85:d0:94:0c:f1:fa:11:87:99:84:63:08:57:74:
8d:87:54:36:15:95:f2:b3:df:88:45:13:49:ba:f9:b8:68:0d:
5a:f7:45:1f:3b:f4:35:d4:d8:33:97:0b:0e:2d:fd:b8:4f:dd:
23:1a:79:5a:f4:22:7d:18:10:71:86:e3:e1:29:4e:ea:7d:32:
89:bd:4b:d2:9b:0b:35:94:9c:e8:78:57:c3:b7:f3:32:08:e1:
06:1a:67:9e:1e:cb:e7:eb:6e:f2:e7:b8:db:76:5e:7c:5a:04:
a0:34:05:01:16:fa:dc:5a:52:51:80:62:72:78:32:0c:43:bd:
78:b1:c0:6b:b5:3f:29:72:6d:88:4d:d2:74:72:15:ed:3b:b9:
db:2e:3f:c7:31:0a:a8:74:0d:39:78:44:6f:6d:84:6b:5f:0d:
31:f8:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:48:12 2026 by rpki-client