
Error: rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
File: xYb26TczxMU16L1GqjLQQkgHmvs.mft (raw, json)
Hash identifier: bfuxrKSVpsLPjirw0NNzwmRVAqPlSv42Dvj/muQmXj0=
Subject key identifier: 60:41:FC:D1:15:A8:2C:4C:21:42:B7:F1:00:4B:2B:3E:7D:A7:FB:B8
Authority key identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
Certificate issuer: /CN=F36FE07FAF/serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Certificate serial: 01C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
Manifest number: 01C7
Signing time: Tue 03 Nov 2026 05:05:24 +0000
Manifest this update: Tue 03 Nov 2026 05:05:23 +0000
Manifest next update: Thu 05 Nov 2026 05:05:23 +0000
Files and hashes: 1: xYb26TczxMU16L1GqjLQQkgHmvs.crl (hash: kllzVNA1hNRvz6t+1zpWchRXPSwKFofLn7hRIUt5p0k=)
2: 9E3CAFAC776E11F0A592D2CDDAE4EC9C.roa (hash: Jc6KQs8Me0jhZ9OqwSsYuwFuhZ8DtWTSRWigp2Gfn4Q=)
3: B8172A60776E11F0A4ED07CEDAE4EC9C.roa (hash: 466vNS7TytKtCpeQ9MYAdiBIOqEB2l2FatTpRe5swnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FE07FAF, serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Validity
Not Before: Nov 3 05:05:23 2026 GMT
Not After : Nov 5 05:05:23 2026 GMT
Subject: CN=6ae96b94-8d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:85:99:46:f4:d4:26:00:db:a2:95:68:1e:
b1:b3:af:76:f9:0b:f0:5f:24:75:6d:5f:1b:88:94:
9c:27:a3:93:1c:09:d2:4e:f4:37:fc:36:da:fa:92:
b2:f9:ee:e1:1d:41:ec:71:e8:d2:53:96:1f:01:d8:
a6:7b:79:a9:cc:5b:db:df:58:43:eb:d4:c0:51:67:
17:fc:ac:dd:6c:4e:24:e4:c4:54:29:27:be:ab:1c:
37:dc:01:30:ea:4d:47:ba:ba:e4:5b:36:04:d2:3c:
dc:c7:28:a3:27:b1:05:9c:44:ee:fd:3b:44:2c:75:
14:14:a6:22:12:11:97:9c:36:ce:b1:a5:ba:a8:22:
bd:d7:d4:8f:f8:7c:da:fc:b7:fb:af:ec:8e:d5:fc:
d1:e0:db:fa:5b:b6:ac:b1:11:61:cd:b8:1d:3b:be:
ae:c7:a5:86:cc:e7:d0:41:1d:dd:c4:20:7b:7b:3c:
ed:f9:d4:39:bb:97:53:b0:ce:7c:65:77:83:7f:ec:
8c:cc:95:ef:4e:cb:be:b5:cf:11:85:ad:43:75:24:
95:78:47:a3:7d:8f:e6:c1:45:f8:a7:2a:00:9a:59:
ef:f7:69:88:d5:9a:63:28:29:be:d6:fb:7d:d5:40:
bb:e7:bc:7f:69:cb:a1:f3:e4:4f:0d:d7:a1:b8:89:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:FC:D1:15:A8:2C:4C:21:42:B7:F1:00:4B:2B:3E:7D:A7:FB:B8
X509v3 Authority Key Identifier:
keyid:C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:52:7b:f4:a8:30:45:26:a4:3a:5a:73:65:1d:94:90:35:
53:90:c5:24:d1:c8:6f:b9:c3:98:88:61:76:d9:0f:b0:cd:10:
08:7a:0f:60:a5:fd:61:24:40:85:72:95:5a:74:80:36:ef:ae:
58:a7:c6:ef:90:3a:5c:83:e9:28:80:c6:b9:a6:3b:48:f8:e2:
6f:13:6c:1d:62:06:2f:34:6d:af:14:67:52:96:e6:30:81:69:
41:04:28:4d:68:3b:47:fd:23:c0:9a:65:79:da:10:b5:59:98:
c0:e1:01:09:3e:97:da:cd:94:de:a6:9e:91:04:52:d9:d4:69:
1d:90:2d:07:fe:b4:f8:a9:9b:03:32:c7:02:4c:50:9b:f8:ba:
20:19:b4:67:36:d2:9d:51:3c:eb:33:a0:20:bf:e8:ab:36:8b:
86:38:5a:92:9e:74:19:c7:a8:ac:b3:43:c6:31:2d:74:e4:42:
6a:cf:fc:16:e8:37:6c:3b:38:d2:9b:99:52:bb:51:a9:2d:f4:
26:8d:60:3c:9a:21:4d:d8:ef:e1:3f:e9:a9:a4:45:4b:7d:be:
8a:ed:8e:b0:86:fe:dc:90:63:ae:e0:20:cc:41:7d:9b:4b:44:
52:23:ef:fa:36:20:47:3f:f5:71:c8:41:88:be:94:e8:26:1d:
75:a8:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:44:03 2026 by rpki-client