
Error: rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
File: C5G8ukaa9TvPni5WJ16WVLSy1G4.mft (raw, json)
Hash identifier: mzn7WfG5XYzWgypsnLB8iA/52AinVx+5vJEQ2dPTsrM=
Subject key identifier: 1D:AE:27:C4:15:29:89:03:7E:23:B2:0A:28:36:38:39:45:ED:D7:25
Authority key identifier: 0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E
Certificate issuer: /CN=F36EADB9AF/serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
Certificate serial: 4F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
Manifest number: 4E
Signing time: Wed 04 Nov 2026 05:50:16 +0000
Manifest this update: Wed 04 Nov 2026 05:50:15 +0000
Manifest next update: Fri 06 Nov 2026 05:50:15 +0000
Files and hashes: 1: C5G8ukaa9TvPni5WJ16WVLSy1G4.crl (hash: sD7oM0rLxJV7wBrWw3xa7F0lrJDCh3jotCiRs4mPP/U=)
2: 7A3F78BE9C9D11F18683E8FACE1D38B0.roa (hash: A3e8zbZAElAeLly1ySrC7Jgdi/mDLTG30Wvzb/zQ158=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 05:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB9AF, serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
Validity
Not Before: Nov 4 05:50:15 2026 GMT
Not After : Nov 6 05:50:15 2026 GMT
Subject: CN=6aeac798-2460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:0d:ca:83:90:d1:b0:bc:c3:e7:bd:ec:fc:
92:00:9d:e3:36:5c:b6:60:6d:b5:5b:7b:b6:ad:88:
a7:09:9a:9d:7c:ff:2f:aa:f0:fd:5a:aa:e4:9c:5d:
36:ad:45:73:4d:6d:75:2f:34:9d:e6:ce:34:ec:c4:
ee:51:53:e0:43:24:6a:58:ed:2b:52:29:cb:fe:80:
35:2d:dd:4f:db:1d:de:7d:40:84:87:07:58:fd:0e:
f5:a9:41:76:44:23:02:5d:29:ce:85:5e:d4:7a:cf:
d9:eb:dd:5b:c7:88:ae:28:3f:6a:39:32:8f:b9:3a:
f5:1b:0f:d9:e0:d9:b1:fc:13:c9:75:ff:fd:e0:25:
b2:61:dc:5a:95:a7:33:7f:ad:a1:68:2a:03:50:bd:
12:63:ee:7a:68:7d:a3:97:2e:c0:22:67:ef:2d:d7:
a4:7c:08:23:6b:d2:b0:fd:58:2f:c2:20:ae:a9:c3:
e7:e2:35:20:4c:47:7e:12:02:c8:d5:ed:1f:2b:ec:
29:d8:e4:e2:b9:07:b3:b1:71:37:88:df:4a:b6:8e:
4b:18:a9:ac:95:e9:e1:30:94:6f:5c:57:d3:51:e7:
80:76:da:2c:47:4b:72:34:6a:69:60:0a:f8:3a:7e:
b1:91:0f:bf:3e:19:b8:53:b4:3a:25:ae:c2:4c:6a:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:27:C4:15:29:89:03:7E:23:B2:0A:28:36:38:39:45:ED:D7:25
X509v3 Authority Key Identifier:
keyid:0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:76:55:f0:54:93:e6:ce:c6:e8:60:84:d2:e3:0b:26:e1:e2:
42:ab:f8:52:81:21:55:44:ca:63:6c:10:d3:ef:a9:c7:aa:99:
7d:1c:5b:93:ef:24:6a:37:47:c2:dc:3e:40:07:7f:d7:ba:3f:
62:00:a1:a3:9d:b5:ff:88:36:3e:ff:72:f5:28:6c:e2:0b:80:
06:0a:fc:75:04:66:22:52:04:a5:24:3d:aa:df:9d:78:75:41:
85:ef:19:ff:16:55:d9:22:a7:b2:19:eb:27:15:a0:db:75:2a:
c0:86:56:59:62:70:15:5f:73:10:c3:42:81:50:d3:dc:c2:55:
5e:7c:7a:fd:81:e3:28:ef:bc:99:f5:ff:2a:72:6f:19:0a:d2:
3e:54:7c:1a:6a:14:cb:af:39:08:88:33:dc:af:fd:58:93:73:
6d:a7:16:b7:fe:37:24:47:db:f5:c4:e2:64:9c:3e:a3:45:d2:
d2:c0:db:22:47:a6:2f:00:3e:18:02:8c:b3:48:74:47:a4:6c:
71:82:35:c2:68:33:f3:e9:de:29:19:35:c9:e5:0d:f4:7b:75:
05:72:c5:f2:31:6f:18:79:00:59:21:31:e7:3c:a8:66:13:65:
40:4c:ac:09:7d:c8:0a:15:28:25:7e:7f:0a:7f:e3:0b:b5:13:
27:96:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:58:49 2026 by rpki-client