
Error: rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: lDhbHLH7u5ciRqvfqGHrFZK6qeQwgtiRHldMWwLD008=
Subject key identifier: 82:37:17:86:88:E2:63:88:88:2E:33:E5:68:09:59:77:E6:E2:F3:56
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 07E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 07E3
Signing time: Mon 26 Oct 2026 02:12:45 +0000
Manifest this update: Mon 26 Oct 2026 02:12:44 +0000
Manifest next update: Wed 28 Oct 2026 02:12:44 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: KSCJaSvdxariPFqZrm5RYC/R0FOAJfg7EmIxsjCnoXg=)
2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Oct 26 02:12:44 2026 GMT
Not After : Oct 28 02:12:44 2026 GMT
Subject: CN=6adeb71d-8489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:6a:ac:70:05:36:b5:51:a3:f1:9e:fb:32:
30:60:78:21:e1:8e:b8:82:e5:93:9b:0f:66:8f:4a:
bc:82:3a:b2:b8:b1:f8:1a:a2:65:ca:e4:ec:77:3a:
06:89:44:d1:43:d2:0e:bd:8e:ca:7e:0f:60:54:5e:
bb:b5:6f:65:e5:b5:55:89:70:97:73:f5:99:a0:0e:
10:29:75:cf:2a:ac:76:8b:e3:81:52:32:e5:38:9d:
70:08:79:fd:37:28:1d:4f:47:26:e7:a7:4c:24:23:
25:7f:9a:90:da:2d:4a:13:1e:30:4d:2f:51:00:09:
45:d9:ea:cd:18:d3:72:cc:d1:9b:ab:02:3b:7f:66:
5f:5d:83:d2:bb:0a:7c:24:ab:4e:ba:36:b8:d4:3f:
ee:98:db:77:1e:e6:63:07:41:bb:3c:3d:a2:0b:9d:
5a:5b:a1:28:9d:83:c7:78:7d:a0:72:87:ae:7e:75:
2c:ed:e8:2d:b9:2f:e0:02:2d:93:c0:e5:d6:be:64:
ee:fe:78:9f:34:d8:d2:00:f4:7a:73:5d:37:e3:d1:
5d:9f:65:d7:1a:fb:04:c5:55:4c:42:68:c2:31:95:
36:0b:16:0f:b9:93:08:6c:ed:3e:35:f3:8e:e1:77:
45:c8:99:dd:dd:d9:61:10:f9:02:e9:04:7f:63:93:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:17:86:88:E2:63:88:88:2E:33:E5:68:09:59:77:E6:E2:F3:56
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:07:07:4a:5a:c1:a2:cd:b3:d4:8f:2d:bd:ff:75:23:1b:44:
33:c6:b0:0c:19:f8:39:d4:f9:15:53:7a:14:9a:04:9e:2e:06:
de:77:a5:6b:8b:9f:e8:32:f7:92:b2:4f:07:85:97:60:7a:63:
33:e9:d7:81:5f:35:c6:df:5d:ec:6e:b5:41:ca:8f:4d:26:7f:
0e:fb:06:ef:38:90:ea:bb:80:14:e5:d4:45:a4:d7:2d:2e:f0:
e5:95:f3:a7:ad:f2:0f:c3:09:e1:b3:60:4e:df:2a:6d:60:e1:
98:93:4f:50:41:3d:cb:6b:e3:bc:2e:eb:b1:1c:a2:32:21:87:
d2:c8:23:42:07:c0:d2:3e:56:a0:b9:c6:1d:9b:26:e1:95:86:
5a:c0:e3:7b:c5:d0:e3:6d:ca:3f:24:ff:83:54:81:d7:3e:22:
f9:d5:b8:9f:48:e0:f2:6e:3a:89:14:50:15:f7:d2:09:7b:65:
f7:ef:53:bc:c2:cf:a1:95:6d:4e:c6:74:0b:bd:9d:7c:a9:93:
02:d2:1b:59:ab:37:b7:e6:a0:68:3f:80:6c:f3:ca:a9:82:1f:
f9:2d:8f:54:f5:3a:1b:fd:da:fc:4a:35:81:a6:c1:42:2b:69:
e6:9c:b7:0f:dd:d7:14:6b:4a:f5:ea:d6:ee:5b:f7:06:1d:72:
3c:29:2d:cd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUVENjNBRjExMC8GA1UEBRMoMzgyNEFDNUVFMDA0MzlFRURBMjFBMUExMDEwOUU4
QkY3NkU0RkFCODAeFw0yNjEwMjYwMjEyNDRaFw0yNjEwMjgwMjEyNDRaMBgxFjAU
BgNVBAMTDTZhZGViNzFkLTg0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYvGqscAU2tVGj8Z77MjBgeCHhjriC5ZObD2aPSryCOrK4sfgaomXK5Ox3
OgaJRNFD0g69jsp+D2BUXru1b2XltVWJcJdz9ZmgDhApdc8qrHaL44FSMuU4nXAI
ef03KB1PRybnp0wkIyV/mpDaLUoTHjBNL1EACUXZ6s0Y03LM0ZurAjt/Zl9dg9K7
Cnwkq066NrjUP+6Y23ce5mMHQbs8PaILnVpboSidg8d4faByh65+dSzt6C25L+AC
LZPA5da+ZO7+eJ802NIA9HpzXTfj0V2fZdca+wTFVUxCaMIxlTYLFg+5kwhs7T41
847hd0XImd3d2WEQ+QLpBH9jk2STAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgjcX
hojiY4iILjPlaAlZd+bi81YwHwYDVR0jBBgwFoAUOCSsXuAEOe7aIaGhAQnov3bk
+rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4QUVBMjI4L09DU3NY
dUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09DU3NYdUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUVENjMvQkM3MkQ2QjZDQUE0MTFFQjlDMkE0QTUyRjhB
RUEyMjgvT0NTc1h1QUVPZTdhSWFHaEFRbm92M2JrLXJnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDfBwdKWsGizbPUjy29/3UjG0QzxrAM
Gfg51PkVU3oUmgSeLgbed6Vri5/oMveSsk8HhZdgemMz6deBXzXG313sbrVByo9N
Jn8O+wbvOJDqu4AU5dRFpNctLvDllfOnrfIPwwnhs2BO3yptYOGYk09QQT3La+O8
LuuxHKIyIYfSyCNCB8DSPlagucYdmybhlYZawON7xdDjbco/JP+DVIHXPiL51bif
SODybjqJFFAV99IJe2X371O8ws+hlW1OxnQLvZ18qZMC0htZqze35qBoP4Bs88qp
gh/5LY9U9Tob/dr8SjWBpsFCK2nmnLcP3dcUa0r16tbuW/cGHXI8KS3N
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:14:23 2026 by rpki-client