
Error: rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: fXMSZhPVHGDtDNx9jxoP+K34WWO9krSw8OuIZ0S+Hss=
Subject key identifier: 67:B4:B8:4D:55:14:C6:CC:FC:57:22:9E:FF:78:8B:6C:A3:D0:F3:EE
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 03BF
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 03BD
Signing time: Tue 03 Nov 2026 04:07:48 +0000
Manifest this update: Tue 03 Nov 2026 04:07:47 +0000
Manifest next update: Thu 05 Nov 2026 04:07:47 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: lyjiM1MysEAuQqQgvaXyXnqY/mlxUwQ4v9LJRJK2GZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Nov 3 04:07:47 2026 GMT
Not After : Nov 5 04:07:47 2026 GMT
Subject: CN=6ae95e14-2b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:15:67:2a:97:f2:81:f0:44:63:61:f1:3e:
f8:88:0d:35:ea:18:cc:64:3c:61:8b:7e:9f:ab:38:
e9:fd:e9:8b:b1:03:89:89:af:4e:19:50:9a:22:bc:
28:01:d4:85:0d:7a:d0:11:fe:98:69:5f:f4:44:60:
36:24:a7:72:66:05:2b:10:5a:b8:26:97:dc:09:ac:
36:e2:f9:58:ea:cd:5a:8b:46:fb:15:8d:54:25:e1:
f2:f6:8e:58:36:88:1f:63:a5:55:4a:ca:a2:eb:7a:
57:df:a0:3b:91:8f:4a:94:53:2a:88:ae:6f:0b:6b:
28:16:8c:68:e1:24:bb:94:c4:78:19:a6:8d:5f:5e:
34:86:64:3f:cd:cd:11:da:32:8c:1c:4f:98:c9:22:
1e:e3:38:b6:15:12:a1:5d:ca:e9:fb:6c:7d:06:de:
df:14:7c:62:ca:b6:64:06:19:f2:f4:31:0d:2e:f2:
73:96:58:62:9f:e9:60:9b:d3:93:78:a6:ab:69:a6:
e6:dd:d1:de:0a:a9:ae:93:c0:9f:3d:e3:7f:89:23:
ff:98:e9:d0:31:0f:a0:25:9a:2f:b7:95:56:7f:19:
b2:a4:1d:67:33:53:cf:b1:bb:73:94:f4:70:49:95:
c9:f3:fe:67:54:b6:2f:b5:c3:40:da:4b:ad:ee:47:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B4:B8:4D:55:14:C6:CC:FC:57:22:9E:FF:78:8B:6C:A3:D0:F3:EE
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:9e:12:bc:b2:59:85:7c:66:e2:ed:66:c1:79:51:80:9b:
d5:07:5e:3e:58:d5:b8:85:bf:2b:e2:4e:37:14:04:e3:03:d3:
df:28:e6:0a:20:08:e6:04:f0:60:e7:57:44:c0:04:89:58:3e:
d9:0d:4d:2c:1f:b7:6a:3c:13:6e:30:1f:0e:fa:4f:b7:91:48:
fa:06:4a:a3:b2:ab:9a:a6:d3:d3:db:48:5a:3a:25:e1:24:91:
61:b7:d4:be:27:62:5d:7e:4d:3d:9e:2d:32:b8:8b:ec:a7:e3:
7b:de:d5:a2:81:e3:ed:f4:7b:6a:e9:29:40:b4:6b:0a:1f:8e:
37:97:fc:47:e4:ec:4c:4e:4a:d4:92:51:d7:87:64:85:aa:fa:
2d:c1:df:35:dd:a4:56:f8:90:82:9d:c0:d9:ea:23:f8:f8:5c:
a1:9d:f6:26:46:ef:03:01:ef:7c:54:d4:31:dc:b8:1b:7a:16:
e1:ee:9c:c2:20:d6:18:a5:81:e3:a2:8c:6e:1f:f6:62:19:a2:
3b:b8:b2:c6:4d:04:d3:da:e9:b8:68:75:8e:40:c5:c1:52:79:
e0:b0:89:5d:c1:a5:48:d6:9a:da:4c:48:81:ce:57:60:df:d0:
d2:6b:a7:e4:fa:ae:6a:e4:1d:0c:fe:4f:2a:04:b8:3a:9d:a4:
b1:f1:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:04:46 2026 by rpki-client