
Error: rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
File: BrHYy0U_06Fn6NMS7FHliT3ZldY.mft (raw, json)
Hash identifier: 94XQ+9yNXg/1jSAx/SAbmC/Lj6XU2rtRJVRQ65lrTsM=
Subject key identifier: 7E:24:BB:11:00:66:33:D5:CF:1A:77:6A:20:50:DA:FB:D6:DD:25:99
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Certificate issuer: /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial: D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
Manifest number: CC
Signing time: Mon 26 Oct 2026 05:36:01 +0000
Manifest this update: Mon 26 Oct 2026 05:36:01 +0000
Manifest next update: Wed 28 Oct 2026 05:36:01 +0000
Files and hashes: 1: BrHYy0U_06Fn6NMS7FHliT3ZldY.crl (hash: fYhmdtQgB9KXSYwe/L+I4kiNNRZhPnGlCjPOkbEQMpk=)
2: 4FCC04223A6811F1A30B30AACE1D38B0.roa (hash: kWGqFsDRkG7kv8ZBBDntu5jcnDPJI4Lk8Rn5mfMvSuc=)
3: E4A196DE6D3511F190F679C4CE1D38B0.roa (hash: DqqNtCv2J0m/YTmVgx1Zji0Sq7WVGYRU6ErfG4VCz8s=)
4: 477F59F8926B11F1A92F96AECE1D38B0.roa (hash: uQVq7Gjo93FvXWyjzsIebyIBSq67/k5Da2HjlS8In2E=)
5: 52A93FF2930F11F19CAE3214CF1D38B0.roa (hash: TJ6vhlA0WJoMlCTnSsE4i/vZ7IFEuMO0aOPBkm+ThW8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 05:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Validity
Not Before: Oct 26 05:36:01 2026 GMT
Not After : Oct 28 05:36:01 2026 GMT
Subject: CN=6adee6c1-8868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:29:b8:b4:8d:91:6f:98:40:47:ad:02:81:
dc:c9:80:b0:94:e7:74:6f:77:0d:bc:7a:76:4a:7a:
14:08:b1:88:5f:d4:74:ae:77:ca:6a:98:8d:aa:cc:
a1:89:0b:c2:7c:23:20:e2:f5:88:1f:2e:82:ba:67:
df:02:20:6e:91:67:1b:bf:e2:ad:c9:aa:03:55:0a:
a3:b9:54:e2:3c:3b:81:bc:88:a0:3d:cc:38:85:d9:
6f:bc:68:55:00:dc:c1:35:ab:0b:97:d8:c1:68:38:
93:16:38:44:e2:b3:71:f6:5f:f5:ad:f3:d3:99:32:
d8:f7:10:98:41:53:0d:69:7a:3b:6a:4d:9d:a2:9c:
8f:5d:11:f4:13:35:c1:13:12:d1:f9:10:54:30:a8:
93:de:9e:85:a9:2d:6f:81:c1:59:c7:16:c6:25:f8:
07:aa:d4:12:fb:bc:2d:27:79:6c:a9:71:95:3f:f4:
95:8b:fa:c8:ed:28:6f:a1:60:2b:17:7c:26:4b:c5:
53:a4:39:15:12:a1:0b:e7:4c:ca:6c:f0:1b:dd:d5:
0a:63:ab:09:84:7e:73:64:e0:8f:c9:51:7e:e5:a4:
67:64:99:4b:56:39:13:ad:5f:96:4d:a9:7b:1f:e8:
6a:cd:fb:98:ed:0b:0c:d7:f9:ee:bb:a5:80:d0:53:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:BB:11:00:66:33:D5:CF:1A:77:6A:20:50:DA:FB:D6:DD:25:99
X509v3 Authority Key Identifier:
keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:1b:27:f1:77:2f:76:3c:b7:45:ac:14:67:af:7f:b8:83:83:
67:a7:29:57:54:57:b0:e5:52:d2:f5:37:4a:ba:5f:f3:dc:8d:
b4:bf:70:9a:fb:4e:0c:bc:c1:c8:2e:d4:d9:98:49:aa:27:4a:
7b:d8:1e:6c:1a:21:c4:6c:27:3d:23:39:80:f8:d8:9e:65:f8:
0b:36:36:df:86:0f:38:7a:bf:1a:a2:85:f5:98:c7:1a:ea:d0:
32:e5:95:ae:12:e3:53:94:f8:23:37:49:f1:3b:18:45:80:a1:
f3:67:0c:06:0e:76:46:51:e9:16:c2:e3:08:d3:8e:1d:44:b6:
bf:4c:92:f7:31:b7:fa:63:61:11:31:41:c5:51:2c:54:82:be:
7f:5f:7e:6d:95:62:13:bb:8f:f3:b3:d0:58:93:d3:b2:06:83:
91:2b:96:8a:76:87:69:e4:45:87:f2:4d:e7:62:40:da:4e:45:
cc:e9:b2:35:a6:91:f2:77:9d:d4:d2:52:ba:e6:d6:f3:d4:55:
f3:42:b7:3b:d5:f9:fa:6e:25:52:e3:80:81:83:d9:a9:17:81:
99:19:90:bd:85:72:65:b1:8b:fe:02:e7:92:5f:bd:61:53:38:
22:7f:d3:35:8f:44:58:ac:a6:b4:4f:ac:a7:63:46:c1:1a:8e:
9c:3f:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:13:45 2026 by rpki-client