
Error: rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File: kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier: P+5SBCBEoTWTiSvuW91yWpTnOid+YI1iwmiTSlrq2QA=
Subject key identifier: FE:8E:F7:95:85:D7:79:29:AE:CF:AD:85:22:2C:12:F4:C9:97:45:0A
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer: /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial: 03FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number: 03FC
Signing time: Sun 25 Oct 2026 03:58:43 +0000
Manifest this update: Sun 25 Oct 2026 03:58:42 +0000
Manifest next update: Tue 27 Oct 2026 03:58:42 +0000
Files and hashes: 1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: S7z2Jgc2cYYivo1lqYvv4018ITi+KpU2gKs+q6JKj20=)
2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Validity
Not Before: Oct 25 03:58:42 2026 GMT
Not After : Oct 27 03:58:42 2026 GMT
Subject: CN=6add7e73-bd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:64:85:03:2f:08:cf:52:20:46:e9:2e:2d:
79:3e:96:06:9b:08:3a:59:eb:46:02:77:11:c7:52:
e0:8d:a6:b8:a6:50:7a:99:36:0e:43:25:48:4d:21:
8d:99:0c:63:69:96:7f:95:26:03:40:87:61:8b:ee:
cc:a0:b0:4a:17:17:fa:37:86:3a:47:2a:fd:43:ee:
27:2b:f1:87:e0:a8:9e:70:3b:1f:99:bc:06:b3:b9:
9a:c6:95:4d:20:14:20:9d:e3:a0:c4:06:6d:e0:fb:
5c:01:59:dd:f6:bd:b0:2a:be:a6:16:26:ea:b0:fc:
4f:59:fe:56:25:a4:ee:9f:64:76:d1:43:55:e3:f5:
01:83:ff:75:39:f8:1a:1f:f0:6f:ef:dd:9d:8c:ed:
c6:8c:9a:2a:16:31:ae:c9:cc:85:be:e8:53:5b:fb:
ca:29:03:e5:c6:59:98:fa:0f:17:d2:65:1d:da:ba:
8c:e0:fb:6b:b6:fe:4f:e3:3a:87:e4:98:aa:e5:0c:
b8:db:33:03:21:b4:97:c2:a1:50:cb:cb:7b:c5:db:
89:b0:f6:d8:34:fb:78:43:c8:31:ee:9d:a9:3f:77:
3b:d8:a7:65:46:0b:ba:50:fb:cb:56:ef:31:3e:06:
4d:30:4a:8c:13:55:39:d9:83:72:ff:dc:5a:42:0f:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:F7:95:85:D7:79:29:AE:CF:AD:85:22:2C:12:F4:C9:97:45:0A
X509v3 Authority Key Identifier:
keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:3b:33:b5:fb:64:a0:4d:75:37:c5:6d:9b:99:ae:e0:2d:43:
5d:02:d4:01:77:37:c3:78:69:a5:82:21:ce:bd:88:cd:df:8f:
2c:a9:a1:7a:8a:ac:43:bf:11:b1:a3:81:6c:0d:5e:85:92:36:
59:cc:3a:b9:10:1c:d0:3f:52:68:57:cc:3f:74:d0:0d:3b:04:
dc:47:ef:03:93:56:61:b1:17:f6:6d:88:57:28:e3:ea:9d:24:
cc:76:77:e0:5d:31:ab:cb:92:16:4c:e1:6a:d5:11:0e:b9:8f:
b0:8e:88:37:03:4b:9e:fc:3e:a7:c1:f9:b5:35:2d:fc:b2:45:
c2:e5:59:1c:fc:b7:df:f6:14:3b:36:f4:99:26:8d:5b:f4:dc:
76:e3:5a:01:20:57:ab:2a:16:fc:10:ee:c9:9b:20:3c:e7:34:
74:61:04:73:90:05:3d:0a:ff:7d:81:69:22:ea:ed:b7:51:ab:
f0:7f:be:a5:f9:ea:78:3c:f8:f6:29:34:1e:2b:a6:f2:f7:d6:
5d:aa:a0:73:1a:d6:b2:0a:b4:d7:31:d5:4a:b8:5e:c4:ab:49:
cf:18:a2:06:db:d9:b4:92:a4:60:00:57:8f:03:34:92:2c:e2:
e5:d0:6b:36:47:b1:dd:6c:2b:36:60:a7:cb:be:09:44:54:44:
05:68:28:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkU2MkJBRjExMC8GA1UEBRMoOTI5RjhDQjcyMjQyREMwM0YxMTc2OEM3RkYxNjVD
NjgzMkI3NTNCNTAeFw0yNjEwMjUwMzU4NDJaFw0yNjEwMjcwMzU4NDJaMBgxFjAU
BgNVBAMTDTZhZGQ3ZTczLWJkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuCGSFAy8Iz1IgRukuLXk+lgabCDpZ60YCdxHHUuCNprimUHqZNg5DJUhN
IY2ZDGNpln+VJgNAh2GL7sygsEoXF/o3hjpHKv1D7icr8YfgqJ5wOx+ZvAazuZrG
lU0gFCCd46DEBm3g+1wBWd32vbAqvqYWJuqw/E9Z/lYlpO6fZHbRQ1Xj9QGD/3U5
+Bof8G/v3Z2M7caMmioWMa7JzIW+6FNb+8opA+XGWZj6DxfSZR3auozg+2u2/k/j
OofkmKrlDLjbMwMhtJfCoVDLy3vF24mw9tg0+3hDyDHunak/dzvYp2VGC7pQ+8tW
7zE+Bk0wSowTVTnZg3L/3FpCD6OBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/o73
lYXXeSmuz62FIiwS9MmXRQowHwYDVR0jBBgwFoAUkp+MtyJC3APxF2jH/xZcaDK3
U7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZFNjJCL0I5MUQ5NTE4QkU5MDExRUVBNzBGMzM5Mzc3NTQxMkU2L2twLU10
eUpDM0FQeEYyakhfeFpjYURLM1U3VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2twLU10eUpDM0FQeEYyakhfeFpjYURLM1U3VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkU2MkIvQjkxRDk1MThCRTkwMTFFRUE3MEYzMzkzNzc1
NDEyRTYva3AtTXR5SkMzQVB4RjJqSF94WmNhREszVTdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTOzO1+2SgTXU3xW2bma7gLUNdAtQB
dzfDeGmlgiHOvYjN348sqaF6iqxDvxGxo4FsDV6FkjZZzDq5EBzQP1JoV8w/dNAN
OwTcR+8Dk1ZhsRf2bYhXKOPqnSTMdnfgXTGry5IWTOFq1REOuY+wjog3A0ue/D6n
wfm1NS38skXC5Vkc/Lff9hQ7NvSZJo1b9Nx241oBIFerKhb8EO7JmyA85zR0YQRz
kAU9Cv99gWki6u23Uavwf76l+ep4PPj2KTQeK6by99ZdqqBzGtayCrTXMdVKuF7E
q0nPGKIG29m0kqRgAFePAzSSLOLl0Gs2R7HdbCs2YKfLvglEVEQFaChP
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:44 2026 by rpki-client