
Error: rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File: lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier: m6X7/WAx0mdTdiKqJrYoqBJV1KjViPbfbRuEvNowWuk=
Subject key identifier: 88:54:F4:D7:99:EE:53:C7:7E:5D:3D:EA:FD:76:57:D5:D0:AE:1E:AF
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 0AC5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number: 0AC1
Signing time: Sun 25 Oct 2026 01:30:18 +0000
Manifest this update: Sun 25 Oct 2026 01:30:17 +0000
Manifest next update: Tue 27 Oct 2026 01:30:17 +0000
Files and hashes: 1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: +4Z5f1jCf61Rg1U3Vg1N+1MjCp0y96QRS2hQPpOKVaU=)
2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2757 (0xac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Oct 25 01:30:17 2026 GMT
Not After : Oct 27 01:30:17 2026 GMT
Subject: CN=6add5baa-2e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:45:3b:41:d3:3d:f6:fe:f5:2a:ed:5e:39:
8a:1d:9e:02:c5:9e:d2:39:d2:93:34:cb:1e:b4:8a:
af:05:9e:7f:38:d6:20:62:b7:5a:78:09:df:8d:d6:
06:09:d5:23:23:5d:fa:79:27:2b:e6:1e:80:38:fd:
3b:5f:aa:cb:eb:27:ec:49:fa:56:f5:4c:61:93:9d:
3d:2c:d6:6a:8d:43:ea:1a:e0:ed:80:1b:76:09:7b:
cb:b8:ac:ea:f2:f2:d1:1b:69:2a:03:da:51:aa:2e:
18:81:8b:6c:35:21:e2:f7:b7:cf:75:bf:e4:7c:1c:
15:a8:3b:ef:d1:15:06:b2:67:d5:ab:49:22:5a:e4:
aa:59:8d:40:6f:46:4e:32:32:1c:fc:0e:d2:1d:75:
0b:9a:e5:bb:98:d2:05:d2:be:5c:4a:18:82:11:5d:
3a:6b:b0:62:27:ff:3e:de:bc:29:17:da:fb:47:4f:
2b:17:e9:6a:6c:86:01:7f:28:55:5d:ba:73:96:1f:
f6:4e:c1:86:e3:34:37:a8:8c:be:ac:fd:ce:5e:2c:
a2:46:33:bd:bc:56:2e:8e:d9:76:fa:b4:50:92:a8:
87:25:ee:6d:06:f4:20:b0:60:66:18:ff:86:64:d7:
f2:1c:4c:a4:26:e5:1d:a5:c5:a6:61:84:a0:51:20:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:F4:D7:99:EE:53:C7:7E:5D:3D:EA:FD:76:57:D5:D0:AE:1E:AF
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:93:0a:24:b8:fb:1e:cd:02:b6:d2:f3:3d:ee:42:a9:45:
92:19:35:89:27:a4:d8:c2:eb:59:06:54:ec:a6:ea:12:e2:ea:
49:e9:34:a6:74:9c:5b:61:49:b3:b1:82:4a:a0:86:63:89:dc:
f6:1a:19:bd:1e:9d:ed:af:2f:d8:1f:33:42:f1:d7:16:87:69:
d0:d1:79:ab:ba:35:3f:3f:88:7d:01:fe:04:f1:6e:f2:2f:c1:
dd:25:03:20:a9:b2:81:c8:25:71:be:fc:9d:f2:ca:64:ec:b8:
bb:23:fc:56:81:cd:9f:56:24:f3:45:3b:5b:89:ce:e9:bf:27:
bd:8d:1d:b8:26:35:7d:c0:f7:54:8a:d2:58:81:2e:07:3c:b6:
ba:07:0d:01:f6:ad:b7:c6:04:0b:07:ef:ea:13:aa:d6:af:42:
1a:5a:c4:fc:d0:02:eb:f7:b3:dc:ce:20:e5:0a:59:9a:69:fa:
cf:21:7e:6a:0d:a2:8d:29:8d:27:86:64:4c:54:29:7f:15:f9:
71:87:87:dd:2e:5e:d6:80:58:15:5a:06:8f:70:fb:f2:e6:44:
96:38:ef:0a:a5:07:05:dc:49:7f:7d:2e:1f:76:55:8c:37:0d:
5d:ed:2e:80:0d:4d:d4:e6:1c:95:eb:8b:24:cb:5c:b9:57:77:
e4:23:b3:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBRjExMC8GA1UEBRMoOTU0QUI4OEFFNDk0OEE5Qjc1MTc3REVFNjU3RkFC
NEU2RTBDNTc4QTAeFw0yNjEwMjUwMTMwMTdaFw0yNjEwMjcwMTMwMTdaMBgxFjAU
BgNVBAMTDTZhZGQ1YmFhLTJlNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcoEU7QdM99v71Ku1eOYodngLFntI50pM0yx60iq8Fnn841iBit1p4Cd+N
1gYJ1SMjXfp5JyvmHoA4/TtfqsvrJ+xJ+lb1TGGTnT0s1mqNQ+oa4O2AG3YJe8u4
rOry8tEbaSoD2lGqLhiBi2w1IeL3t891v+R8HBWoO+/RFQayZ9WrSSJa5KpZjUBv
Rk4yMhz8DtIddQua5buY0gXSvlxKGIIRXTprsGIn/z7evCkX2vtHTysX6WpshgF/
KFVdunOWH/ZOwYbjNDeojL6s/c5eLKJGM728Vi6O2Xb6tFCSqIcl7m0G9CCwYGYY
/4Zk1/IcTKQm5R2lxaZhhKBRINpvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiFT0
15nuU8d+XT3q/XZX1dCuHq8wHwYDVR0jBBgwFoAUlUq4iuSUipt1F33uZX+rTm4M
V4owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4QUVBMjI4L2xVcTRp
dVNVaXB0MUYzM3VaWC1yVG00TVY0by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xVcTRpdVNVaXB0MUYzM3VaWC1yVG00TVY0by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk1QzQvRDYwMzk5MDQ5MUVEMTFFOTg0MUQ1QTdERjhB
RUEyMjgvbFVxNGl1U1VpcHQxRjMzdVpYLXJUbTRNVjRvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxsZMKJLj7Hs0CttLzPe5CqUWSGTWJ
J6TYwutZBlTspuoS4upJ6TSmdJxbYUmzsYJKoIZjidz2Ghm9Hp3try/YHzNC8dcW
h2nQ0XmrujU/P4h9Af4E8W7yL8HdJQMgqbKByCVxvvyd8spk7Li7I/xWgc2fViTz
RTtbic7pvye9jR24JjV9wPdUitJYgS4HPLa6Bw0B9q23xgQLB+/qE6rWr0IaWsT8
0ALr97PcziDlClmaafrPIX5qDaKNKY0nhmRMVCl/Fflxh4fdLl7WgFgVWgaPcPvy
5kSWOO8KpQcF3El/fS4fdlWMNw1d7S6ADU3U5hyV64sky1y5V3fkI7Pg
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:16:11 2026 by rpki-client