
Error: rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier: f/bGbVcMSgvD/kRyli932HPvrR3XH2hFWDxp5viY5Qo=
Subject key identifier: D1:BF:BE:77:12:78:08:65:40:8A:39:B0:04:5D:07:47:5F:88:BE:15
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer: /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial: 077C
Authority info access: rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number: 0770
Signing time: Tue 03 Nov 2026 02:30:01 +0000
Manifest this update: Tue 03 Nov 2026 02:30:01 +0000
Manifest next update: Thu 05 Nov 2026 02:30:01 +0000
Files and hashes: 1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: aAxcjgM+GI2eaW2NJUrNcYdlTHcTQ9kPvmu7SSf6mCI=)
2: BEEEF1CAD21B11F19581B216CF1D38B0.roa (hash: eYKIXwTHUXfvLU8SLEnE0me5LRRJMnZ2uMrS513ipwc=)
3: F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa (hash: nJMw0jDhfUQ9MIEZ9B8cpiQCrvIR1zCE9zeLYVXhPUk=)
4: AC8F656ED1FD11F18F864FD8CE1D38B0.roa (hash: yctHS4Zz1hfDDHV29RTCYyyPbaqDq/2/LwZbhhW3868=)
5: 1136047ACBDA11F1B347B101CF1D38B0.roa (hash: moxdxcUELpu7elLC6Ukvw99IdBHL0GM1+0nuhlj22bQ=)
6: C2F6D0F2D21C11F195C5611BCF1D38B0.roa (hash: DCMdobBGCX/mUl3B+OdT4HpWLhOwMbAEXxWixxY+U+s=)
7: 8CD7C5EED21C11F1A9F30C1BCF1D38B0.roa (hash: mF/oUeygnWUlpCjb3QbQWPwGCW/S+VGcBKt15q61vTA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916 (0x77c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Validity
Not Before: Nov 3 02:30:01 2026 GMT
Not After : Nov 5 02:30:01 2026 GMT
Subject: CN=6ae94729-eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:59:29:86:07:72:1a:a5:46:1c:21:67:a4:
5f:47:43:94:fa:13:ef:d8:4b:50:6d:4d:5c:67:eb:
34:a3:1b:15:42:7b:fa:77:f3:79:06:9f:44:6b:33:
73:85:77:9d:0f:eb:93:c6:0c:02:30:a5:d0:50:c8:
13:bb:c8:7d:29:18:5b:3a:04:59:e3:22:80:d2:bf:
0e:1c:67:7b:37:7b:dd:50:b7:08:20:aa:b8:f9:e1:
15:40:8a:b7:be:c4:42:8d:0d:3a:fb:2b:06:21:df:
68:54:d0:76:1c:15:1f:85:c9:7a:66:0d:00:55:0a:
87:e1:e0:3f:51:37:7d:83:1f:8c:60:99:25:2d:be:
58:4a:64:03:c1:b3:76:b1:af:b3:00:75:24:ad:b1:
23:da:01:32:4a:d6:1e:e4:15:ab:5b:9e:b9:c4:20:
9e:0a:5b:b8:f7:ab:df:e7:e3:1d:b2:8d:d4:66:8a:
a1:1b:93:00:6c:e4:83:1a:1b:15:d7:99:af:43:33:
14:39:87:99:1e:0e:af:f4:e3:dc:87:24:ff:5d:88:
a4:d0:0e:d2:61:08:e8:14:59:3b:91:20:fd:bd:48:
91:07:24:95:c9:bc:b8:7f:04:cb:dc:f2:86:90:fb:
71:d1:56:5f:76:68:cb:4f:96:d2:08:1f:f0:a8:77:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BF:BE:77:12:78:08:65:40:8A:39:B0:04:5D:07:47:5F:88:BE:15
X509v3 Authority Key Identifier:
keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:57:da:e5:a9:81:27:27:5d:8a:07:02:7b:c1:ea:de:00:6b:
12:7f:8d:aa:b0:fd:39:fa:b5:0c:b5:b7:84:83:f0:9e:b6:30:
7e:d9:d4:0a:05:a8:43:95:30:78:47:60:b7:e2:08:33:c4:c2:
62:a7:81:5e:e0:ea:9e:b4:3c:e2:6a:49:cc:55:68:dd:6c:af:
bc:32:96:46:f0:99:87:7c:3a:43:31:60:d4:b9:ab:f2:c6:a2:
f4:b4:f7:76:93:fe:75:d0:3d:88:76:a5:5d:f7:07:b1:ac:78:
48:c5:90:c6:2c:f8:5b:a4:c2:1d:89:b6:79:66:df:7f:53:5b:
cb:56:5b:cd:e8:cf:5d:dd:d4:bf:45:28:f4:c4:45:e9:12:66:
73:2a:f3:02:e8:ac:f7:c8:bc:f9:5b:90:8f:8c:fc:f0:1e:14:
68:2b:6d:49:df:99:d2:d5:b0:bf:d5:fe:29:60:85:3e:e9:a9:
68:e0:7f:44:1a:e8:5a:15:50:6f:c8:35:19:08:4e:32:53:e4:
22:6d:27:c8:c7:03:04:8a:ad:3b:0b:db:f8:ef:e9:6a:14:c2:
db:7c:af:24:1e:da:50:a5:5c:18:a8:7a:c5:ea:cb:dc:a8:25:
33:fd:22:e3:cb:2f:c5:f1:79:11:26:c5:ac:38:b4:68:c2:09:
fe:dc:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:44:11 2026 by rpki-client