
Error: rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
File: kOmId5HPLZYFAfiu3iSiM0q6VAM.mft (raw, json)
Hash identifier: B8GNvhEe1sSKLaSjIsll89tORCnLtppDz/ILafBYrwU=
Subject key identifier: 09:66:E4:D9:6D:09:2A:4E:48:A0:01:E1:DC:47:FE:07:73:96:60:BD
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0BC4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
Manifest number: 0BB7
Signing time: Fri 30 Oct 2026 01:16:00 +0000
Manifest this update: Fri 30 Oct 2026 01:15:59 +0000
Manifest next update: Sun 01 Nov 2026 01:15:59 +0000
Files and hashes: 1: kOmId5HPLZYFAfiu3iSiM0q6VAM.crl (hash: jiCAEdzPD9fLHqSx5KcEXd5XgYxGWLMQxuDbNpbhcAA=)
2: F3EC743C187C11F1A4A99A8EDAE4EC9C.roa (hash: 4VygvVhLx7+KOSC9EeJup6TPuBSZ6sqghpeBeI1rIHk=)
3: 2A74C5F4187D11F1A465C48EDAE4EC9C.roa (hash: fnDGmywkfDEXEdGHYgR/8XMMZSz71Qb9+HbIEmEaRmc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 01 Nov 2026 00:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Oct 30 01:15:59 2026 GMT
Not After : Nov 1 01:15:59 2026 GMT
Subject: CN=6ae3efd0-c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:8d:d7:b5:95:0c:d6:80:c5:0b:88:33:30:
ac:4f:50:bf:bc:6f:9c:a5:32:52:4e:7f:83:4a:e9:
b7:99:cf:f9:65:a1:1d:39:35:82:5c:7f:e8:93:e4:
90:52:64:38:ba:8f:a3:52:05:1e:cd:ce:f4:fb:6f:
4a:8b:5b:a3:e0:cf:6c:d9:2c:e2:99:26:b6:b8:de:
4f:f1:e4:5b:33:65:5f:84:51:dd:74:c7:ac:00:f6:
09:c8:b7:a7:6d:97:c3:44:e2:76:48:42:ae:2c:b0:
d6:82:08:24:5f:08:51:b2:42:35:b5:2d:fc:4d:7f:
fe:6f:78:25:94:cb:05:29:71:d2:62:b6:e9:b4:4b:
05:85:4d:ec:17:bb:77:46:72:eb:38:de:58:9f:1d:
71:c2:dc:40:df:c7:6f:4b:d8:64:f6:eb:b1:ed:5e:
63:17:44:dd:2a:ac:71:05:be:fc:f7:7b:5e:69:ce:
d1:88:ab:4e:d9:de:e9:af:c6:6a:ce:d9:01:85:57:
80:7b:34:7d:35:c6:3c:91:cf:db:5f:7f:23:2a:a3:
4c:50:3e:f4:45:63:e8:06:1d:e8:b8:75:18:27:4b:
8b:fc:0f:ba:e9:4a:5d:26:5d:a5:5d:4e:48:87:b2:
4c:33:53:f5:f8:fd:16:05:9e:8c:3b:78:4e:a3:97:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:E4:D9:6D:09:2A:4E:48:A0:01:E1:DC:47:FE:07:73:96:60:BD
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:df:f1:99:e4:b3:7f:9f:7a:59:96:ee:cd:a3:a3:8a:9f:
75:16:4f:0b:d6:82:3a:62:cd:fd:c3:b9:be:8b:80:51:cf:e0:
59:48:4f:d4:8a:00:ed:83:2d:7e:84:87:5b:f0:71:40:bc:3b:
44:bb:05:1e:a5:0e:2f:e8:ec:8c:69:83:c4:e4:e0:74:cb:35:
9f:d0:b0:f0:00:20:61:46:c1:e2:3f:e1:2c:d4:e7:3e:5a:dc:
bd:f8:36:bc:da:d1:f5:5a:32:8a:ce:47:6d:7e:d5:29:22:d0:
22:9d:70:72:a8:87:1e:4d:07:a1:04:e0:af:75:0a:78:73:c3:
59:98:8e:68:c1:8b:8e:1a:1c:6e:dc:eb:89:16:5c:59:87:43:
20:eb:dc:e9:51:45:06:05:ab:56:d8:3b:f8:f4:33:b1:c3:40:
ef:0b:ae:db:cd:ea:3f:2e:82:bb:75:8d:84:bf:ce:f3:18:ea:
3d:35:7d:5b:50:7e:63:15:bb:f5:f4:63:df:88:41:13:9b:9d:
8b:b4:cc:cc:27:1c:92:00:1d:b4:80:4c:6b:66:9b:74:45:9f:
ed:28:3a:96:e5:ce:64:46:90:0e:f0:72:c5:de:4c:1e:db:9e:
6c:e9:43:f8:19:db:69:a2:3a:6e:6b:13:45:00:18:2d:d3:07:
cb:41:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:08:45 2026 by rpki-client