
Error: rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
File: KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft (raw, json)
Hash identifier: /v+RxRko9qaAWe3c6nwnjg93Teg8o3Y7E36RJEj0bcE=
Subject key identifier: B3:38:94:92:37:40:F7:62:B1:9C:78:16:6B:9C:1F:EA:40:77:7E:7F
Authority key identifier: 29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Certificate issuer: /CN=F36389A7AF/serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Certificate serial: BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
Manifest number: BB
Signing time: Sat 24 Oct 2026 05:36:34 +0000
Manifest this update: Sat 24 Oct 2026 05:36:33 +0000
Manifest next update: Mon 26 Oct 2026 05:36:33 +0000
Files and hashes: 1: KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl (hash: uTp3S3E2YQBEh4ns1L7hO7B0JEgbFBlhjUo+keT75n8=)
2: 7E30C2D43F0A11F19414901BCF1D38B0.roa (hash: a3fLxBrz8eR53/R7V1Vq4Dtsvla7z1WL/GBJqhWYWag=)
3: CCFE35183F0A11F181E5E91BCF1D38B0.roa (hash: E47585gvu1JN7Cv2RL9H7/HF9eVQoG0TjloqbMPCF0I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 05:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Validity
Not Before: Oct 24 05:36:33 2026 GMT
Not After : Oct 26 05:36:33 2026 GMT
Subject: CN=6adc43e2-5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:fd:1c:2c:21:ae:48:aa:71:4c:70:5f:9f:
92:0d:30:37:dd:fc:8e:a0:7c:04:86:97:81:7d:4f:
75:26:4f:af:74:55:6e:78:eb:0c:1d:58:f9:cd:af:
72:e3:2d:f8:06:39:92:d4:81:b1:cc:66:32:f0:23:
11:6e:9a:a9:f2:0a:c6:11:1a:fc:04:86:ef:90:99:
f2:9a:84:80:84:e4:1c:77:07:fa:01:ef:7a:7d:5b:
15:af:07:36:e3:68:64:bd:af:76:c0:a6:95:4a:8b:
ed:e6:b4:f9:28:c6:0b:b4:51:77:05:f1:c7:42:20:
98:d7:44:9a:1f:36:10:63:cb:e4:62:7b:19:92:fe:
6f:9a:4e:3d:0f:a6:5a:8c:5d:5a:95:61:b2:1d:e9:
8c:22:7f:8a:ac:fc:01:8a:11:4d:32:4e:c1:2a:2c:
4b:15:53:c6:a0:0d:01:a9:f8:5d:9f:24:c3:5a:53:
eb:f4:17:4f:38:0e:b5:9c:f9:1b:d5:b1:3b:3c:87:
04:d4:a2:83:9e:ad:79:ed:97:88:2e:ce:43:f5:b2:
25:e8:a0:54:c6:ca:62:b8:8f:d9:82:9b:0c:45:76:
8f:74:6d:fc:08:d2:27:98:ad:e3:e9:3d:b8:92:0c:
99:ab:83:0a:fb:23:8e:9b:fd:46:d3:13:02:86:ec:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:94:92:37:40:F7:62:B1:9C:78:16:6B:9C:1F:EA:40:77:7E:7F
X509v3 Authority Key Identifier:
keyid:29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0b:de:01:8e:9f:6e:de:9d:f4:31:31:1b:a5:5d:2e:23:ac:
21:67:78:14:d9:78:87:43:55:7f:7f:75:2a:55:80:86:8f:cb:
f6:f5:6d:f9:18:5c:dc:46:a7:28:1b:f0:1f:21:80:5c:05:63:
aa:80:67:d6:3f:f5:8c:1f:8d:26:ae:5e:66:d0:a1:7c:d4:f8:
f8:63:41:c4:ef:b3:97:83:13:5f:3a:1f:f4:4d:97:eb:7f:c1:
f6:b0:e4:4c:2f:00:80:31:e3:53:f6:d7:1e:b4:08:5b:3d:2f:
f4:e1:99:e8:52:e9:78:b7:9b:7e:f3:ab:30:0d:b5:77:67:0c:
25:11:07:68:25:26:5b:bb:ea:bd:79:69:cf:af:a8:33:07:c6:
bc:8c:d7:06:09:c1:4c:79:3d:99:ac:1a:e6:a5:d2:8b:02:50:
ea:43:a5:cf:93:d2:bc:0f:05:48:fe:1d:57:dd:31:7d:1b:a3:
03:92:2f:07:83:64:36:88:fb:14:4e:57:11:ba:e1:73:a7:26:
c5:10:74:fd:cd:78:ab:37:b6:28:26:56:1d:96:b2:22:58:c4:
cb:86:ec:77:18:9f:a3:f4:26:93:6d:b8:3a:54:0b:8d:c3:fb:
eb:50:b5:9a:7e:5b:b6:2c:9a:18:bc:56:c0:cb:87:63:1d:d7:
4f:fc:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:21 2026 by rpki-client