
Error: rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
File: YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft (raw, json)
Hash identifier: TNcncbRRvdv2pTNlagp57aPb0+K+9LrF8zvKuDhYiEs=
Subject key identifier: 0D:B7:15:09:26:50:8D:8C:4C:29:DF:F6:21:D8:FD:04:50:61:A5:F9
Authority key identifier: 60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
Certificate issuer: /CN=F36426B7AF/serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Certificate serial: 0223
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
Manifest number: 0221
Signing time: Wed 28 Oct 2026 04:51:29 +0000
Manifest this update: Wed 28 Oct 2026 04:51:28 +0000
Manifest next update: Fri 30 Oct 2026 04:51:28 +0000
Files and hashes: 1: YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl (hash: AazN8kqOU5GPGUOKUvw0JH4CHj8MSls3VHIhv3bQyKs=)
2: B4A0F8A6520711F1BF72BDA6CE1D38B0.roa (hash: oRF4h5IZqjsI7CIR7BIVA64gPDt3TUtVrtZGjoTOFL8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36426B7AF, serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Validity
Not Before: Oct 28 04:51:28 2026 GMT
Not After : Oct 30 04:51:28 2026 GMT
Subject: CN=6ae17f51-0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:93:a6:77:78:6a:8f:3a:de:9a:19:2f:ab:
9f:b6:85:b4:4d:f1:9e:3d:3b:d3:82:ad:03:bd:bd:
56:cf:7a:13:1f:10:89:73:a7:0f:53:f3:53:97:f2:
95:d7:51:82:b1:b3:d9:bb:99:58:b0:6c:e1:c8:95:
43:cd:73:5a:d3:cd:4e:74:5b:2f:4f:0e:09:0d:9e:
bc:42:a3:44:0f:37:a5:ac:21:d8:7f:11:22:75:74:
98:f8:ad:ef:44:00:93:6d:f9:9c:f3:e5:c3:60:ab:
ef:3d:82:42:42:71:06:4a:a9:f0:f0:11:90:53:33:
20:eb:7c:3f:59:c7:a3:7b:e9:e5:ce:ed:8e:d5:53:
25:0a:c1:80:88:51:bd:cc:28:94:42:32:66:e3:59:
db:cb:10:76:1d:9b:61:d3:46:ed:f6:d8:ac:5f:2e:
58:e7:20:73:4c:df:ef:f5:7d:51:ea:7a:6e:41:74:
dc:ca:b2:ec:10:0b:16:e7:53:90:c5:4f:ed:42:6a:
64:90:14:81:5b:25:e0:b2:9d:ac:5e:22:55:0b:86:
3f:85:8f:f0:39:fa:c5:cf:de:69:27:99:61:2c:07:
d4:cd:22:e3:b4:eb:6f:cc:04:ea:2c:0c:48:87:cc:
83:2e:3e:e5:34:41:66:4a:12:18:48:0e:86:8c:e0:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:15:09:26:50:8D:8C:4C:29:DF:F6:21:D8:FD:04:50:61:A5:F9
X509v3 Authority Key Identifier:
keyid:60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:18:67:65:1e:46:f0:24:cb:8a:4b:f3:b2:82:57:a2:d0:
aa:7e:ce:74:8b:4b:67:64:86:9d:cc:dc:0e:bc:41:e0:57:af:
33:1b:84:d2:d0:ff:78:be:26:36:75:d5:b1:21:ec:fc:01:27:
78:b6:25:84:1c:44:1e:48:e7:1a:91:40:c4:15:ba:3c:4d:7a:
a3:9e:6c:8d:cc:28:54:4b:a1:86:9d:da:84:76:c9:b1:11:8c:
ef:a3:c8:7f:ad:6f:0e:5e:2f:f7:75:8d:ba:39:c4:40:ef:d7:
f2:6d:a6:c5:44:29:4d:bc:3a:49:85:24:6f:5f:f2:ed:c2:56:
e7:81:91:74:83:38:e4:1d:23:c8:e5:dc:4d:bb:89:f8:81:a7:
31:53:c7:38:94:6f:3c:74:9f:34:ac:bf:04:fd:76:a7:b8:16:
a4:dc:77:82:46:78:0b:97:10:c5:6a:0b:5b:dc:06:d8:ed:77:
ae:a6:23:07:bf:c7:20:c7:b6:03:38:fe:91:53:73:80:fd:6e:
23:93:de:4a:4f:7e:4e:66:85:bf:2b:13:43:3b:07:96:39:8a:
1a:85:21:12:da:7a:cb:1d:74:09:a2:5f:30:48:37:e5:ae:25:
27:dd:08:89:e5:a8:34:64:19:9f:ce:30:7b:fe:c1:2e:ff:74:
1c:b4:61:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI2QjdBRjExMC8GA1UEBRMoNjA2RjVBQjg4MEJGMjU5RDREQ0I2NkEwNjFFMTUz
RUNDOEVENTZCQzAeFw0yNjEwMjgwNDUxMjhaFw0yNjEwMzAwNDUxMjhaMBgxFjAU
BgNVBAMTDTZhZTE3ZjUxLTA1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC73pOmd3hqjzremhkvq5+2hbRN8Z49O9OCrQO9vVbPehMfEIlzpw9T81OX
8pXXUYKxs9m7mViwbOHIlUPNc1rTzU50Wy9PDgkNnrxCo0QPN6WsIdh/ESJ1dJj4
re9EAJNt+Zzz5cNgq+89gkJCcQZKqfDwEZBTMyDrfD9Zx6N76eXO7Y7VUyUKwYCI
Ub3MKJRCMmbjWdvLEHYdm2HTRu322KxfLljnIHNM3+/1fVHqem5BdNzKsuwQCxbn
U5DFT+1CamSQFIFbJeCynaxeIlULhj+Fj/A5+sXP3mknmWEsB9TNIuO062/MBOos
DEiHzIMuPuU0QWZKEhhIDoaM4DsRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDbcV
CSZQjYxMKd/2Idj9BFBhpfkwHwYDVR0jBBgwFoAUYG9auIC/JZ1Ny2agYeFT7Mjt
VrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyNkI3Lzg2MkU4RjI4MkZCRDExRjBCNjM3RkZFMURBRTRFQzlDL1lHOWF1
SUNfSloxTnkyYWdZZUZUN01qdFZydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lHOWF1SUNfSloxTnkyYWdZZUZUN01qdFZydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI2QjcvODYyRThGMjgyRkJEMTFGMEI2MzdGRkUxREFF
NEVDOUMvWUc5YXVJQ19KWjFOeTJhZ1llRlQ3TWp0VnJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfkBhnZR5G8CTLikvzsoJXotCqfs50
i0tnZIadzNwOvEHgV68zG4TS0P94viY2ddWxIez8ASd4tiWEHEQeSOcakUDEFbo8
TXqjnmyNzChUS6GGndqEdsmxEYzvo8h/rW8OXi/3dY26OcRA79fybabFRClNvDpJ
hSRvX/LtwlbngZF0gzjkHSPI5dxNu4n4gacxU8c4lG88dJ80rL8E/XanuBak3HeC
RngLlxDFagtb3AbY7XeupiMHv8cgx7YDOP6RU3OA/W4jk95KT35OZoW/KxNDOweW
OYoahSES2nrLHXQJol8wSDflriUn3QiJ5ag0ZBmfzjB7/sEu/3QctGFg
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:11:46 2026 by rpki-client