
Error: rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File: qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier: vGKk0/iduekItr+Mpen6FGCNhOSKF1GPyweXD2WDOoI=
Subject key identifier: 3A:1F:46:43:F9:EE:2A:23:68:A7:B7:B6:C1:C8:FE:E2:E0:5F:D7:2E
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer: /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial: 06F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number: 06ED
Signing time: Mon 26 Oct 2026 02:35:52 +0000
Manifest this update: Mon 26 Oct 2026 02:35:51 +0000
Manifest next update: Wed 28 Oct 2026 02:35:51 +0000
Files and hashes: 1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: PCJKUPOZXzsyTbEJN25Ht0L4u7vpBLxntjxSIsiSAqk=)
2: 7171857C898A11F1975FC0A7CE1D38B0.roa (hash: aIWaULOciWlOFlIItS1L2/uFnskyMEc00BLY1a7EVWk=)
3: B4CDDFBA096511F09EE29CA4762E951A.roa (hash: AGjlXws4tctUuB4WUyHecSclAJY+HCC3k/CqmlHphvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628E9AF, serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Validity
Not Before: Oct 26 02:35:51 2026 GMT
Not After : Oct 28 02:35:51 2026 GMT
Subject: CN=6adebc88-a4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:7d:9c:8a:3f:fb:06:a9:04:cf:6d:6a:59:
c0:58:49:00:dd:6c:d5:0c:85:40:b9:65:03:a0:38:
5a:fb:70:f4:bd:8f:d8:b3:5c:39:65:5f:5b:9b:e2:
6a:e4:94:be:4c:4b:93:96:8b:ae:ee:00:c3:75:be:
5f:3f:34:98:ea:33:9b:aa:50:02:97:0e:f8:bc:f1:
e6:1f:ff:4f:bf:92:b1:8f:82:81:35:5e:3f:ef:3d:
54:3d:dd:5a:a7:d6:6d:1b:36:7d:7a:de:19:62:4c:
ac:28:99:fa:92:50:c8:7d:4f:c8:68:af:59:c1:a0:
2a:3d:a6:da:9b:b0:43:40:df:ac:50:81:97:5c:42:
08:91:94:7b:0b:02:01:fa:3f:bc:f2:49:5f:57:db:
cd:cc:ca:8d:ee:51:11:d8:a2:6e:15:a7:b6:be:c2:
3e:bf:da:16:fd:cd:7b:f3:9f:0e:b3:01:4d:ac:1a:
fa:58:9f:22:6a:63:3e:50:7b:f5:94:15:a8:2f:36:
c2:2f:df:f2:58:cc:0f:7a:25:9d:a3:d4:a1:76:77:
df:46:41:90:28:d1:e0:82:b8:11:0c:44:2d:bf:84:
79:a7:49:03:d6:7e:9a:53:91:eb:ca:f7:d7:4f:86:
66:da:d2:f7:8b:a4:2a:9f:83:d2:56:6f:6a:19:78:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:46:43:F9:EE:2A:23:68:A7:B7:B6:C1:C8:FE:E2:E0:5F:D7:2E
X509v3 Authority Key Identifier:
keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b9:06:22:f0:fb:69:99:39:60:78:f5:4f:ac:18:cf:f3:53:
84:f6:34:b7:1c:39:a2:6a:73:47:3f:2f:3b:f0:80:46:d4:7f:
ac:43:ee:7d:b6:3c:a5:cd:24:b1:56:11:47:fc:5b:a0:f1:a2:
13:80:75:c8:5b:39:d9:85:d0:e4:ae:85:81:1c:bb:ae:f6:00:
17:3d:68:60:7a:09:18:e7:71:2d:bf:5a:50:79:91:cd:1f:e8:
87:f2:bf:2e:fb:dc:10:69:bd:e0:34:4e:69:2d:04:18:11:79:
94:b2:84:6f:c0:2a:a2:1f:c0:80:d2:11:ee:f8:3a:b0:d8:77:
5c:d1:f2:2e:94:3a:76:fc:2a:f8:d0:6c:71:77:61:d5:db:7b:
6f:ff:47:93:db:ce:2d:2f:7e:8a:ae:d8:49:38:ec:c0:24:52:
b7:2e:82:b2:e7:47:42:d4:7f:94:3c:06:ad:50:71:b4:e8:29:
83:2d:72:11:dc:41:e5:6c:5e:f5:7c:a3:07:ce:52:e3:59:81:
b0:5c:04:ef:05:a5:6f:c3:f7:0e:4f:70:80:44:cf:f0:f5:4b:
8a:d0:99:f8:6a:25:c2:cb:f9:29:55:17:d9:5c:1e:0b:f9:5d:
59:81:b7:8a:1a:97:47:57:3e:e2:45:05:b5:30:49:54:0e:28:
9f:d5:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:05:09 2026 by rpki-client