
Error: rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File: Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier: OeoX6f7fi6G+iIdCellBOY1quFDrdDOzG6+t9ZoDYME=
Subject key identifier: 49:FC:ED:15:65:E7:4F:07:5C:BC:A4:FD:8A:27:3A:65:5D:3E:C6:21
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 06A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number: 069D
Signing time: Fri 04 Sep 2026 02:43:33 +0000
Manifest this update: Fri 04 Sep 2026 02:43:32 +0000
Manifest next update: Sun 06 Sep 2026 02:43:32 +0000
Files and hashes: 1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: YC5OxpBFDBHsLTSWMUML/XQoIlYHYTh4zcc0j6vyfOE=)
2: B483DD5260AD11F186FE20D2CE1D38B0.roa (hash: N08HMzaJrPQG98yF1dW42tjXRI8KTIgg1jSIS0yuaAc=)
3: 139A49B660AE11F1B99DE7D5CE1D38B0.roa (hash: rarFIEocrc0sUeZ7yyVNoX9GlR16ogXiHgAmgUr4kRc=)
4: 50EB151660AE11F1946459D6CE1D38B0.roa (hash: 3jYVZX446QMMMo1B09+QFtsPNpHJUqVfEGEWSu2C7qM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 02:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Sep 4 02:43:32 2026 GMT
Not After : Sep 6 02:43:32 2026 GMT
Subject: CN=6a9a3055-179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:e0:a6:ff:e0:c6:66:1e:7e:46:a4:64:e3:
ee:19:07:d2:6c:13:a6:7b:ae:04:94:22:02:2d:16:
a3:ff:4f:e9:0d:17:4a:48:94:cf:98:7a:4a:55:c3:
58:19:23:74:24:ad:14:9f:73:36:56:23:cb:7c:ed:
9c:b4:7d:02:db:62:66:c8:f6:78:65:c0:bc:05:f6:
e5:a3:4f:1c:de:43:9e:01:a7:59:20:14:6a:43:48:
a9:2f:87:a2:6a:9a:08:37:86:25:c4:0f:d7:0e:9e:
89:82:aa:7e:84:94:44:a5:ac:ec:56:a4:47:43:63:
97:a0:2c:e5:6e:2c:ff:cd:b4:58:8b:68:95:8b:7a:
12:44:f7:46:af:0d:96:46:b4:20:8f:e4:19:35:85:
17:5a:43:16:ae:1b:a6:c0:92:59:ac:a8:d4:06:6e:
5f:6f:47:32:fe:69:6d:74:98:9a:29:30:67:c8:a3:
37:a7:37:ef:04:76:f7:28:47:1f:92:0c:f8:a3:9b:
3f:83:1b:9c:5f:53:5d:f3:24:15:28:8e:91:3c:3c:
45:2e:aa:7b:c6:18:64:7d:8c:5f:a3:bf:2b:0e:6a:
f8:66:16:5a:09:16:6d:bc:64:82:ba:51:00:92:f2:
33:ea:10:75:bd:c8:d5:f4:5f:db:81:74:74:62:44:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:ED:15:65:E7:4F:07:5C:BC:A4:FD:8A:27:3A:65:5D:3E:C6:21
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:f2:bd:0f:13:e6:1e:06:3a:93:20:1e:6b:1f:7b:95:fe:
50:34:f1:55:3f:a8:2e:0c:2c:1b:6e:b4:f9:c8:2e:1e:c8:1e:
ae:87:3e:b1:f0:58:d7:8a:84:23:f0:60:75:9b:50:1b:24:b3:
a9:8e:58:f1:32:d6:a8:48:0b:19:01:2c:8e:c1:17:d0:46:b1:
f0:c0:22:7d:9a:6d:49:6e:f4:08:39:7d:2e:0c:ad:17:26:d8:
5e:ff:1f:ed:47:e4:dd:a2:56:3e:76:16:27:0c:a9:31:f3:09:
04:5f:30:39:83:44:b0:26:04:1b:bd:07:75:c5:a3:97:16:a0:
61:f4:b8:42:20:79:b2:05:f0:72:6c:7d:0d:53:da:2e:7c:b5:
31:cc:f7:38:d4:cc:4c:c5:c4:6a:1f:e1:88:7a:75:ef:a1:9f:
7b:a9:e1:cf:9c:9f:be:d6:d3:f5:38:7b:f5:1a:6f:d8:34:5c:
43:a7:e9:f3:fb:21:dc:ce:6a:6e:e4:5e:32:69:75:93:a6:ce:
0e:29:69:b1:09:9e:f7:2a:5d:e0:36:07:34:a9:88:18:44:3b:
66:c1:c4:c8:6c:eb:f7:35:14:c7:02:d3:71:d2:23:6e:aa:9c:
c1:b3:54:9d:a5:0d:94:8a:8d:9d:55:58:80:71:66:32:a6:b7:
98:da:1c:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDM5MzBBRjExMC8GA1UEBRMoMzVDRjA2N0RDMjZFRTQ4OTVGNEIxNkFEOUJEMzAw
RkVBQkMzQTM1MzAeFw0yNjA5MDQwMjQzMzJaFw0yNjA5MDYwMjQzMzJaMBgxFjAU
BgNVBAMTDTZhOWEzMDU1LTE3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO0uCm/+DGZh5+RqRk4+4ZB9JsE6Z7rgSUIgItFqP/T+kNF0pIlM+YekpV
w1gZI3QkrRSfczZWI8t87Zy0fQLbYmbI9nhlwLwF9uWjTxzeQ54Bp1kgFGpDSKkv
h6Jqmgg3hiXED9cOnomCqn6ElESlrOxWpEdDY5egLOVuLP/NtFiLaJWLehJE90av
DZZGtCCP5Bk1hRdaQxauG6bAklmsqNQGbl9vRzL+aW10mJopMGfIozenN+8Edvco
Rx+SDPijmz+DG5xfU13zJBUojpE8PEUuqnvGGGR9jF+jvysOavhmFloJFm28ZIK6
UQCS8jPqEHW9yNX0X9uBdHRiRISTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSfzt
FWXnTwdcvKT9iic6ZV0+xiEwHwYDVR0jBBgwFoAUNc8GfcJu5IlfSxatm9MA/qvD
o1MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQzOTMwLzYzQzQ2RUM4QTBGMzExRUM5NDZFREE5NDVBNDBENTc3L05jOEdm
Y0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05jOEdmY0p1NUlsZlN4YXRtOU1BX3F2RG8xTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDM5MzAvNjNDNDZFQzhBMEYzMTFFQzk0NkVEQTk0NUE0
MEQ1NzcvTmM4R2ZjSnU1SWxmU3hhdG05TUFfcXZEbzFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATavK9DxPmHgY6kyAeax97lf5QNPFV
P6guDCwbbrT5yC4eyB6uhz6x8FjXioQj8GB1m1AbJLOpjljxMtaoSAsZASyOwRfQ
RrHwwCJ9mm1JbvQIOX0uDK0XJthe/x/tR+TdolY+dhYnDKkx8wkEXzA5g0SwJgQb
vQd1xaOXFqBh9LhCIHmyBfBybH0NU9oufLUxzPc41MxMxcRqH+GIenXvoZ97qeHP
nJ++1tP1OHv1Gm/YNFxDp+nz+yHczmpu5F4yaXWTps4OKWmxCZ73Kl3gNgc0qYgY
RDtmwcTIbOv3NRTHAtNx0iNuqpzBs1SdpQ2Uio2dVViAcWYypreY2hzz
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:09:23 2026 by rpki-client