
Error: rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
File: zkYtttkR7mTZxEy4EI0T4DxaZNU.mft (raw, json)
Hash identifier: sSRrJ8HU2X+KVRmUWOx3+6hzFwtL++YGVSP/VXxxbrk=
Subject key identifier: 21:99:FE:4A:A7:1A:22:56:A1:05:E5:BF:83:0B:53:B6:EE:58:D5:47
Authority key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5
Certificate issuer: /CN=F3679532AF/serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
Certificate serial: 0163
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
Manifest number: 0160
Signing time: Tue 27 Oct 2026 05:14:29 +0000
Manifest this update: Tue 27 Oct 2026 05:14:28 +0000
Manifest next update: Thu 29 Oct 2026 05:14:28 +0000
Files and hashes: 1: zkYtttkR7mTZxEy4EI0T4DxaZNU.crl (hash: AQ9z0YLsIf4xleeqaG09PrGxVPxXeoaW/LCHeUUX8/U=)
2: FDA59DF2C38E11F08B1F0FCADAE4EC9C.roa (hash: tqnDn2eXksrwnPyVC4DoYDlm3A+bfBcINzKFdaoCNAE=)
3: 86AD3B68C39511F0A59F00F2DAE4EC9C.roa (hash: HAj/QCJbUqOlCpJTAgH7nxk05+9O2sEd5ZgoEE+jkL0=)
4: 4416D8561D5211F1B09D5DBBDAE4EC9C.roa (hash: bnSYCKQteOzcDcNEFoo+uV3o4TGvuGUdVsiVEGgqdbo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 05:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
Validity
Not Before: Oct 27 05:14:28 2026 GMT
Not After : Oct 29 05:14:28 2026 GMT
Subject: CN=6ae03335-315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:05:00:c3:35:15:5b:c7:48:94:c6:40:d5:7c:
9d:b5:55:34:1b:46:6e:eb:e8:b8:a5:cb:ed:a5:c9:
34:0e:16:b7:15:e1:53:fe:38:07:a0:68:91:31:8e:
17:13:97:9e:32:df:74:bf:1d:cd:bd:bc:aa:a1:27:
d2:a0:c4:5b:11:13:ff:a4:ca:bd:2c:d3:b7:57:6e:
e6:59:a9:5c:4f:a1:8c:f4:ff:03:20:bf:a8:d7:07:
59:d5:83:a1:37:43:bc:92:27:57:41:6a:5c:97:32:
7e:21:db:f0:30:6f:d9:cb:c9:86:7f:c6:f0:c8:e8:
9b:d1:1b:bd:13:0c:b9:98:e5:8f:64:64:b4:e9:68:
ff:b4:af:55:21:e2:99:7e:05:af:17:23:35:70:53:
d6:5c:5a:15:ab:6a:9b:c8:fc:0d:50:a2:03:0e:52:
09:99:6d:ab:9e:85:ca:09:4b:44:e1:28:f5:87:82:
8b:cd:31:1e:ef:04:d6:d6:99:2e:a4:83:7f:46:9a:
15:67:7f:e9:9a:8d:5c:c2:32:14:29:bf:83:0e:ed:
38:ed:ef:d7:2e:cf:3a:1a:4a:41:78:8c:5f:b1:2d:
93:44:76:70:34:c1:48:8f:8e:16:c0:c2:56:81:90:
dc:fc:3d:52:71:12:b7:d7:74:bf:bd:a0:26:e0:f1:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:FE:4A:A7:1A:22:56:A1:05:E5:BF:83:0B:53:B6:EE:58:D5:47
X509v3 Authority Key Identifier:
keyid:CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:8a:49:bf:f9:96:0e:6d:09:90:74:61:d2:8b:40:b4:e4:
00:74:91:a1:8e:c0:b2:c6:ff:0e:af:13:08:80:d0:70:61:4d:
fa:77:ba:90:ce:ae:c8:3d:a0:8c:86:dc:76:38:94:bf:8f:91:
d0:b6:fd:5a:15:d7:5f:40:c7:4c:48:ce:4e:52:11:3f:4d:51:
8d:c6:9e:98:d3:88:1c:07:cf:d1:40:4f:d0:54:4f:e3:e4:b1:
77:fb:e8:24:da:27:90:2f:23:26:09:32:14:67:2a:9e:cd:82:
52:93:92:d1:2f:d6:09:38:69:be:57:ec:5e:4a:99:92:24:5b:
68:a6:54:80:00:46:b7:21:0e:6c:a2:92:5c:43:40:50:cf:4a:
2e:1b:28:00:9b:32:49:64:52:80:db:14:1f:a5:fb:6c:14:78:
9d:56:38:57:60:f1:f6:ec:e8:fc:39:79:8b:19:3b:2d:74:5c:
71:bf:f8:18:d8:be:30:05:45:7b:37:fa:be:dc:5f:72:26:0d:
e9:15:6c:c8:40:71:d6:70:37:c3:bb:e3:17:24:8a:95:2e:f8:
5f:0c:f2:ec:4a:5f:81:a1:99:21:65:4f:38:6d:97:dc:5a:3f:
ec:bd:36:d8:cb:91:ee:00:81:41:ad:de:92:ef:6c:f6:2d:37:
4a:6b:88:10
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1MzJBRjExMC8GA1UEBRMoQ0U0NjJEQjZEOTExRUU2NEQ5QzQ0Q0I4MTA4RDEz
RTAzQzVBNjRENTAeFw0yNjEwMjcwNTE0MjhaFw0yNjEwMjkwNTE0MjhaMBgxFjAU
BgNVBAMTDTZhZTAzMzM1LTMxNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD3BQDDNRVbx0iUxkDVfJ21VTQbRm7r6Lily+2lyTQOFrcV4VP+OAegaJEx
jhcTl54y33S/Hc29vKqhJ9KgxFsRE/+kyr0s07dXbuZZqVxPoYz0/wMgv6jXB1nV
g6E3Q7ySJ1dBalyXMn4h2/Awb9nLyYZ/xvDI6JvRG70TDLmY5Y9kZLTpaP+0r1Uh
4pl+Ba8XIzVwU9ZcWhWrapvI/A1QogMOUgmZbauehcoJS0ThKPWHgovNMR7vBNbW
mS6kg39GmhVnf+majVzCMhQpv4MO7Tjt79cuzzoaSkF4jF+xLZNEdnA0wUiPjhbA
wlaBkNz8PVJxErfXdL+9oCbg8WenAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIZn+
SqcaIlahBeW/gwtTtu5Y1UcwHwYDVR0jBBgwFoAUzkYtttkR7mTZxEy4EI0T4Dxa
ZNUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NTMyLzdERDQ1NjA0QzM4RTExRjA4QkY2QjNDN0RBRTRFQzlDL3prWXR0
dGtSN21UWnhFeTRFSTBUNER4YVpOVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3prWXR0dGtSN21UWnhFeTRFSTBUNER4YVpOVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk1MzIvN0RENDU2MDRDMzhFMTFGMDhCRjZCM0M3REFF
NEVDOUMvemtZdHR0a1I3bVRaeEV5NEVJMFQ0RHhhWk5VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt84pJv/mWDm0JkHRh0otAtOQAdJGh
jsCyxv8OrxMIgNBwYU36d7qQzq7IPaCMhtx2OJS/j5HQtv1aFddfQMdMSM5OUhE/
TVGNxp6Y04gcB8/RQE/QVE/j5LF3++gk2ieQLyMmCTIUZyqezYJSk5LRL9YJOGm+
V+xeSpmSJFtoplSAAEa3IQ5sopJcQ0BQz0ouGygAmzJJZFKA2xQfpftsFHidVjhX
YPH27Oj8OXmLGTstdFxxv/gY2L4wBUV7N/q+3F9yJg3pFWzIQHHWcDfDu+MXJIqV
LvhfDPLsSl+BoZkhZU84bZfcWj/svTbYy5HuAIFBrd6S72z2LTdKa4gQ
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:14 2026 by rpki-client