
Error: rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft
File: PGqyIv-r9zy6Jf7DcasHFToVxII.mft (raw, json)
Hash identifier: 1BbEnsvVqvTfCg+jt/nopDsWxSF2VGB3uH5doTDuMo4=
Subject key identifier: 10:D9:FE:7E:27:27:A8:75:1C:18:AF:B6:8B:D1:69:75:FC:06:E1:C4
Authority key identifier: 3C:6A:B2:22:FF:AB:F7:3C:BA:25:FE:C3:71:AB:07:15:3A:15:C4:82
Certificate issuer: /CN=F363A60BAF/serialNumber=3C6AB222FFABF73CBA25FEC371AB07153A15C482
Certificate serial: 24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft
Manifest number: 22
Signing time: Sun 25 Oct 2026 05:57:29 +0000
Manifest this update: Sun 25 Oct 2026 05:57:28 +0000
Manifest next update: Tue 27 Oct 2026 05:57:28 +0000
Files and hashes: 1: PGqyIv-r9zy6Jf7DcasHFToVxII.crl (hash: lVvMnhNQYfSSOLrl/5ZV8QamR71mrNbGMFpyEGg2Frc=)
2: C83F89ACB81B11F1BE59F5A2CE1D38B0.roa (hash: 4ThPF4knPIyxVu4KoLhz1isz9wEsw9oGZY3lAKliRzI=)
3: 15A51482B81C11F1AE1731A5CE1D38B0.roa (hash: T2wwwn8+41/rkFD40r8o+MS7FjshlLRYKMPhiEVx5DE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft
rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A60BAF, serialNumber=3C6AB222FFABF73CBA25FEC371AB07153A15C482
Validity
Not Before: Oct 25 05:57:28 2026 GMT
Not After : Oct 27 05:57:28 2026 GMT
Subject: CN=6add9a49-e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:2f:e6:aa:ca:cd:4e:76:56:3a:b6:a4:07:
18:64:0b:b8:8d:d1:9f:0a:c6:de:89:d0:4a:9f:7f:
bc:c2:99:fb:23:4b:f9:f5:f7:97:19:70:a3:51:74:
35:04:9c:05:c1:f5:f7:ca:b6:b3:25:ff:33:30:13:
f7:c9:22:c0:b4:3b:f9:15:d0:ec:0c:38:22:c0:ef:
c0:11:06:d0:d4:db:a1:c6:9d:95:8e:c7:71:85:48:
98:59:6d:d5:fe:97:72:34:32:5b:e0:70:20:7d:fc:
d8:3e:0b:85:49:ba:7a:4d:8d:e1:e1:28:6c:2d:2e:
ce:dc:8b:89:62:ad:cd:20:c3:98:41:f9:d9:ea:c9:
bb:4d:64:0b:85:ad:0c:a6:c8:01:39:a0:20:13:e9:
7f:bd:98:bf:53:46:81:fa:d7:03:49:bb:6d:1d:33:
bb:d4:52:7d:e1:55:8b:ac:e2:ae:54:03:90:2b:0a:
af:d0:83:3c:a5:cf:ee:92:3a:78:47:c0:9a:80:2d:
8e:a4:1f:59:32:6a:1b:81:42:de:9a:7f:d2:be:59:
3e:1d:97:ca:99:3d:17:2b:96:d5:2c:07:5d:c0:8b:
30:b7:a6:ac:e6:bb:90:64:eb:33:e0:18:e5:d1:93:
80:eb:6c:f1:aa:ed:d4:35:f6:6c:69:fc:51:a1:10:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:FE:7E:27:27:A8:75:1C:18:AF:B6:8B:D1:69:75:FC:06:E1:C4
X509v3 Authority Key Identifier:
keyid:3C:6A:B2:22:FF:AB:F7:3C:BA:25:FE:C3:71:AB:07:15:3A:15:C4:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PGqyIv-r9zy6Jf7DcasHFToVxII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A60B/2C1C5274B7FF11F1BEEBDDECCE1D38B0/PGqyIv-r9zy6Jf7DcasHFToVxII.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:38:b7:35:aa:74:ff:84:3b:d1:8c:ab:c0:1a:40:46:e3:
1a:3f:cf:b0:d8:d3:62:7f:47:32:39:23:22:3e:08:b9:e9:12:
f0:d9:ef:3a:7e:08:b2:6a:f0:92:16:19:2f:a0:23:12:12:67:
9c:c4:ff:4c:8d:b5:0b:39:57:11:51:10:21:df:77:aa:71:3d:
bc:31:0c:16:b2:84:f0:6f:d1:45:c9:dc:3b:b2:25:fe:b7:95:
85:93:3d:1e:06:75:dd:23:fe:2c:e6:8a:a6:4e:22:fa:ca:17:
43:3a:3e:9d:50:5b:73:03:0c:b7:2f:ff:1c:17:08:fa:a2:5c:
8b:09:56:e0:c4:dc:3d:76:46:ff:fa:fe:fa:14:31:8e:35:2a:
8d:0a:e0:ce:bb:bd:8b:88:5d:3c:f9:b9:91:ae:19:24:16:b4:
8f:f0:d0:08:0b:eb:8e:6e:5b:cb:59:94:81:78:d7:c5:28:b5:
b6:29:b0:e7:37:7c:d7:bc:62:12:b2:dd:66:08:d3:03:0d:69:
1a:46:8d:06:0c:d6:a9:e5:68:4c:a5:65:d7:68:89:9c:52:24:
e1:a3:d9:74:86:84:9e:49:4f:75:ea:4a:cb:96:ec:9a:7d:12:
3a:3e:84:2f:aa:7e:24:d3:d5:7b:c0:dd:a0:07:61:38:6e:63:
ee:40:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:58 2026 by rpki-client