
Error: rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
File: biQiwqfj3wfM4NH9AdFG21Z40ds.mft (raw, json)
Hash identifier: eLpcoF7LkxWAJmbyGfrGM8GYTS9iyLAfvRTMLZeeuXM=
Subject key identifier: DC:95:CB:DC:09:6F:11:98:5F:F9:DD:24:57:54:05:06:A5:73:D4:97
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Certificate issuer: /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial: 60
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
Manifest number: 57
Signing time: Tue 03 Nov 2026 05:51:14 +0000
Manifest this update: Tue 03 Nov 2026 05:51:13 +0000
Manifest next update: Thu 05 Nov 2026 05:51:13 +0000
Files and hashes: 1: biQiwqfj3wfM4NH9AdFG21Z40ds.crl (hash: SFfi8tNz8LBwzIOc5QcTXgnr5Mew7PuGjEXPSO5ujNk=)
2: 2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa (hash: xVwAUnrViwTntUveNDo6qYXWSRccSSgDlFmKIFO0HSM=)
3: 6C7FD260B2D611F193C51DC7CE1D38B0.roa (hash: +KcH4KSDhfgOgrPgucsOz0T5Y9dgTuxMI1/ms+27xx4=)
4: E2095C86B2D611F182DB22CBCE1D38B0.roa (hash: 0QotgG4JTFYIzqDDSEaZjrPBe1AsQnW20uL0HP117RM=)
5: 8EB514929BA411F18359831DCF1D38B0.roa (hash: HIgQE1FkAEHLt9W55ZyAHjmOCHWt9l42BG52dMjKpNM=)
6: 2721414EB2D711F19D7933CBCE1D38B0.roa (hash: L1RNC7+I9L1V3kn3iAD4GkwCCWlSqZzac+IyOHlw4BY=)
7: 0745CDAEB2D711F187AA27CBCE1D38B0.roa (hash: DV4zcMkbFgzhtFkdO2oTjhaIbbAWHRM/lgDhjMjNUhc=)
8: C53660ACB2D311F19EF6E7B6CE1D38B0.roa (hash: 5Dj/UiotHDT3B1x2BeMhtWpFuhLdGfHWKGcnmB6uC1c=)
9: 974C140EB2D611F1A4B778C7CE1D38B0.roa (hash: /3CPs8bAIpaxY0a9SbOCMe+TpsRY6Oe9DBQBTqL2Q24=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 05:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Validity
Not Before: Nov 3 05:51:13 2026 GMT
Not After : Nov 5 05:51:13 2026 GMT
Subject: CN=6ae97652-3955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:c0:c4:08:f1:95:e0:83:da:a3:cf:00:6c:
90:f3:30:1a:f8:c1:3a:96:13:64:ce:87:2a:18:a7:
ce:97:55:88:b8:6a:ca:a3:94:40:ca:ff:0c:5f:91:
3b:7a:9b:23:8e:0f:7d:f7:43:ab:d8:af:e2:1a:3d:
3e:e8:6e:a9:47:c5:71:54:78:a6:aa:55:b6:58:9d:
1e:f2:82:99:c0:5a:cf:02:4c:48:e3:f5:ee:6d:c0:
15:63:18:0d:5a:64:ab:97:cf:fb:ce:4d:91:50:ee:
67:85:fe:94:d5:35:06:34:45:fc:58:4c:55:2b:68:
07:12:28:19:1a:15:fa:9d:68:e9:53:00:5b:13:06:
8d:e2:67:f4:0f:17:e7:25:bf:9e:87:9b:fd:d2:64:
3c:79:88:4b:8b:18:cc:33:c2:c3:03:e2:d8:33:a6:
4b:c3:ed:c6:21:89:49:b4:ac:97:3b:8d:d7:ef:0c:
ef:f8:3c:b4:5b:60:3b:30:a9:fa:19:75:71:1f:c9:
a1:64:3f:bd:3b:fa:7c:5f:74:60:ad:86:cb:d3:42:
26:07:44:e6:c8:ab:a2:52:80:88:cb:04:23:5f:18:
43:63:f3:20:4f:70:54:8b:cc:6b:e9:b1:bf:7c:7f:
86:73:4c:83:1f:fb:a9:6a:f2:67:07:95:54:3d:28:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:95:CB:DC:09:6F:11:98:5F:F9:DD:24:57:54:05:06:A5:73:D4:97
X509v3 Authority Key Identifier:
keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:41:75:7b:cc:26:59:2e:90:d3:db:bb:c9:db:94:6b:71:4a:
b2:dc:6a:68:0c:48:5d:6a:53:c1:c3:f6:e2:08:7b:27:d9:cc:
93:69:29:70:47:9d:ca:ed:4d:f0:9a:36:96:09:1f:42:eb:e5:
2d:e2:05:9f:bd:26:d1:e0:fb:c6:04:62:fa:c5:c2:e2:8e:69:
7c:26:88:1a:bb:5f:5d:39:cd:ce:34:5f:8f:6d:ec:97:47:a4:
4b:36:7d:7a:4a:d9:ba:8c:5c:da:9f:3a:ff:38:04:15:88:ae:
f5:8b:ca:a9:81:78:00:50:03:e5:05:ff:a8:e3:c9:55:e6:a8:
5f:df:4e:83:78:97:ba:fe:d0:65:81:94:02:3a:ec:f7:54:b2:
6e:d4:f3:aa:c8:c5:9e:ac:d3:40:a9:58:b8:41:b8:42:ae:cf:
98:ef:01:0a:d3:b7:ed:b1:82:f0:ac:f1:49:54:95:fc:19:77:
a4:3a:74:12:7e:8b:68:0e:21:bf:2d:7e:68:46:fb:9a:46:7d:
1c:fb:61:48:d0:5c:7a:15:a7:44:ab:7a:b2:f7:e7:f0:7b:70:
f1:cf:88:d4:8a:5d:bf:32:c1:a4:0a:a3:27:55:cb:48:4e:6a:
b0:d1:5d:01:27:b8:63:64:88:28:65:3c:d0:29:fd:92:2f:19:
c9:e5:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:51:41 2026 by rpki-client