
Error: rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
File: Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft (raw, json)
Hash identifier: acGTKd1ugifpR4kJjH8k1qcDI91Kjig3t5w+9kuzAss=
Subject key identifier: 34:BA:2A:81:76:3D:2F:6B:11:8A:77:3C:82:BF:AE:D4:8C:09:75:9D
Authority key identifier: 56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
Certificate issuer: /CN=F36BF1B7AF/serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Certificate serial: 0BA0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
Manifest number: 0B9C
Signing time: Wed 04 Nov 2026 01:16:16 +0000
Manifest this update: Wed 04 Nov 2026 01:16:15 +0000
Manifest next update: Fri 06 Nov 2026 01:16:15 +0000
Files and hashes: 1: Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl (hash: LEUvvUh58UkVRvzOtm8G5696g9Ilg0OcNH5IqjzW5mg=)
2: 3622D1AAEEA211E89867905FF8AEA228.roa (hash: QDmUgaFX7YS3buOBowBMA1u32zvhujbAZ2pZ6j/6DXM=)
3: 9C7FCA94847B11F1A3AC5DBBCE1D38B0.roa (hash: CDg6sixtxLLYq53qAACfV1YNKuHXTop88xuaWBI25Nc=)
4: 3B78D754847B11F1A500B6B7CE1D38B0.roa (hash: pvmPFAS+cuIJr6wNm8N+udknD9ftXiZh97mVDPera3k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 01:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2976 (0xba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF1B7AF, serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Validity
Not Before: Nov 4 01:16:15 2026 GMT
Not After : Nov 6 01:16:15 2026 GMT
Subject: CN=6aea875f-cc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:60:1c:b5:47:a6:2e:ee:b5:fb:6c:85:8a:
8c:c3:3c:a6:85:a7:22:fb:53:80:b3:67:21:cf:9d:
7a:1b:50:eb:a8:6d:cd:1a:ef:44:ad:bf:29:45:45:
9b:7a:5b:66:da:0b:a1:01:5c:61:0c:e2:9d:1f:8a:
17:6d:91:a8:5b:6d:c6:13:76:f7:ff:59:7d:94:d5:
1c:9b:36:c6:18:de:ab:ef:75:cf:67:b8:f3:26:a9:
b1:6f:4b:40:96:b3:77:ee:b5:f1:fe:62:74:68:15:
ed:eb:4e:9d:dc:01:48:6c:e8:e4:18:fd:f9:57:53:
58:04:8b:c7:30:67:9e:62:42:ae:3c:be:72:fc:c6:
37:c3:25:23:a1:c3:6c:76:7d:09:ba:44:4a:91:97:
e0:a4:cd:59:fd:15:1e:51:37:6e:05:33:93:7d:29:
6c:22:ef:fc:f5:93:35:d5:38:c3:68:98:1d:4b:a6:
b7:f8:c4:61:10:22:3e:5a:2b:f8:35:81:ce:8c:cb:
fd:0b:76:7f:ec:9c:6e:f6:ad:ab:a9:05:fd:c0:2e:
7a:f5:4c:92:41:29:d0:58:a5:e9:f6:04:a5:3b:a2:
ba:15:3c:a3:5e:d8:b7:94:a4:3e:33:0f:b4:53:e9:
4b:5a:72:d6:a8:2e:61:ab:5b:32:00:d9:37:3b:0d:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:2A:81:76:3D:2F:6B:11:8A:77:3C:82:BF:AE:D4:8C:09:75:9D
X509v3 Authority Key Identifier:
keyid:56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:8e:76:9f:1a:13:9f:b8:76:50:d6:18:eb:b6:fb:9f:ef:79:
f2:ce:27:92:9a:1f:82:f1:44:2f:bf:cb:48:ed:a9:d8:6a:3f:
10:ce:bc:a8:ca:72:a9:1d:00:55:1c:ed:e9:04:55:f7:a1:89:
96:fa:db:fa:e4:7b:33:2a:14:9f:87:f2:1f:77:85:23:9e:d7:
8a:78:b7:4b:47:b4:61:55:ab:40:01:c3:e9:39:24:4c:1a:e5:
95:94:92:17:98:04:d3:93:50:47:8f:e1:3a:9d:f7:8f:57:38:
f7:6f:2e:5a:e1:2b:08:fd:54:9a:4a:a2:49:74:69:44:3c:52:
c3:c3:c0:bf:c1:71:27:81:9b:c2:27:ac:76:f0:4a:27:84:2c:
86:88:c1:22:e4:9f:de:20:5b:f7:9f:6e:f8:24:c3:5d:ff:8a:
92:82:c1:5e:78:de:78:d6:cc:55:9d:29:01:a2:5c:47:a9:e7:
57:d6:17:ad:f4:2f:9f:9e:0c:ae:ae:37:68:a0:cd:d7:0b:b4:
44:dc:05:a6:bc:23:d7:a3:c8:7a:3e:69:6c:ab:65:53:1c:63:
3c:55:2e:35:e4:47:b1:68:3c:e2:7f:d2:36:82:d1:8b:96:11:
cf:a8:28:85:08:72:03:ea:84:44:55:ee:08:c8:f7:dc:60:3d:
02:6c:ac:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:38:19 2026 by rpki-client