
Error: rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
File: bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft (raw, json)
Hash identifier: wn9O932B+nTD1c8tyztnsH1MK7ULGmFpwIgd7M9A91A=
Subject key identifier: 39:7C:23:C1:79:92:38:44:F6:2B:34:A7:56:3A:FA:BD:67:D5:EC:7F
Authority key identifier: 6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Certificate issuer: /CN=F36432B6AR/serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Certificate serial: 0531
Authority info access: rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
Manifest number: 0530
Signing time: Thu 10 Sep 2026 03:15:35 +0000
Manifest this update: Thu 10 Sep 2026 03:15:35 +0000
Manifest next update: Sat 12 Sep 2026 03:15:35 +0000
Files and hashes: 1: bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl (hash: vvdxi1rIzQ6j1nKFqjKCHeKu8jkx1kMbKeTzshZFK5U=)
2: 32C56C048AA611F183809FE4CE1D38B0.roa (hash: 05NOZTIQSGIxosBWg5s1k2e5173s+rKsv547cl8cIvw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36432B6AR, serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Validity
Not Before: Sep 10 03:15:35 2026 GMT
Not After : Sep 12 03:15:35 2026 GMT
Subject: CN=6aa220d7-b006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:38:7e:84:e1:13:65:83:04:77:ee:3c:95:
7c:6a:18:13:0e:23:41:d4:c2:14:90:d8:27:02:c5:
1f:d0:15:28:d5:b3:dc:19:bf:1a:a3:68:f9:05:88:
5f:2d:c4:00:ae:07:12:57:c3:43:72:12:26:03:b2:
33:58:9c:38:e5:60:be:dd:43:a4:69:ca:90:5a:4a:
0c:21:bc:c8:56:de:af:bf:fa:04:03:81:b3:f9:6d:
f5:f0:c1:d5:8d:ac:e2:24:42:39:ac:5b:45:26:ed:
78:96:37:e9:d2:9e:f7:6b:99:73:f7:7c:d4:ab:f7:
64:8f:c2:24:46:15:1c:42:b2:e2:48:c9:73:c7:6c:
ba:8b:71:94:1c:9b:eb:b2:09:26:12:43:8e:4a:41:
b5:c4:e6:7e:80:cf:cb:29:38:06:a7:ed:f1:af:25:
27:2c:75:8e:43:69:23:85:39:32:83:83:63:b7:ae:
a6:82:79:7f:54:6a:9e:02:46:22:86:42:4c:c1:09:
e1:81:a7:71:a4:6c:ea:a7:5b:28:57:1a:0f:07:e5:
f4:76:f0:0f:cf:cb:1f:45:d3:c6:bb:74:cc:c1:1e:
28:c3:a6:f6:13:f6:9e:2f:4e:f7:b3:86:42:a7:35:
15:de:58:02:50:32:34:6b:fd:6c:37:c8:1f:63:72:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:23:C1:79:92:38:44:F6:2B:34:A7:56:3A:FA:BD:67:D5:EC:7F
X509v3 Authority Key Identifier:
keyid:6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:20:40:a8:50:60:bc:b8:aa:c7:48:3c:90:5b:82:66:df:
f0:4c:8c:80:eb:55:20:5f:35:70:e1:67:a0:16:fa:8c:9c:66:
0c:d4:ec:81:98:a0:e5:6d:a9:ff:84:3f:09:b3:75:5f:fa:22:
9d:69:27:92:ae:1e:48:20:45:d2:b0:30:5a:f4:7e:15:26:1b:
2b:89:65:6b:b0:aa:b5:54:24:17:8f:95:1c:8a:18:3e:e7:ff:
c4:c6:cb:f5:12:08:a2:b4:ff:cb:59:40:2f:89:87:8b:52:05:
fb:29:13:62:3a:b0:95:73:37:a6:70:e5:4e:e5:15:25:af:17:
33:f2:a9:4e:17:55:41:18:8a:b2:8f:5e:ea:cf:9e:7b:0c:d3:
19:58:cd:fd:5a:0e:52:92:b6:67:7a:56:b9:5d:e7:ec:df:b2:
f6:11:b9:ab:14:fa:35:d7:c2:77:c0:82:4c:85:6b:9f:4e:5a:
e8:de:e9:a9:da:d5:7c:db:85:fa:4a:57:b2:96:b7:19:7f:53:
f6:40:fa:44:60:7d:9f:31:9c:16:77:29:64:92:5f:94:48:88:
23:c4:6a:b5:77:cc:0b:b8:b2:66:64:3b:6f:0f:3b:5c:93:7c:
f5:b7:21:14:04:c4:8b:43:58:ec:8a:d0:c5:e1:3e:d4:76:40:
36:ef:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:19 2026 by rpki-client