
Error: rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier: 7TbUF8J536TnUpXa4YhJ9bNmRMd0ceVZaBw1J2In6gs=
Subject key identifier: 5F:DD:01:96:76:8D:74:36:A5:D0:09:9C:AE:A5:F1:42:10:0B:32:A7
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer: /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial: 01A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number: 019D
Signing time: Sun 25 Oct 2026 05:09:41 +0000
Manifest this update: Sun 25 Oct 2026 05:09:40 +0000
Manifest next update: Tue 27 Oct 2026 05:09:40 +0000
Files and hashes: 1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: BBojiYvI2OPvHjVZHwx+Upk7b9drCfQWUI+IV3zxQ+E=)
2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 05:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Validity
Not Before: Oct 25 05:09:40 2026 GMT
Not After : Oct 27 05:09:40 2026 GMT
Subject: CN=6add8f14-f150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:d7:9b:07:41:5a:ab:14:9d:3d:d4:77:20:
d5:8e:2e:3e:37:87:87:f4:50:05:bf:c8:9d:39:92:
3b:d1:f4:24:87:3e:48:64:96:0e:ad:33:da:6c:b5:
31:29:64:d5:b5:03:4e:b7:53:b8:6c:4d:b1:4f:76:
00:fa:eb:73:0c:9c:77:30:03:6d:7e:69:fa:58:42:
f6:41:e6:b5:29:ed:81:41:43:9a:d0:a4:e1:f7:d7:
23:93:6f:9c:32:b2:48:15:9a:98:74:a6:c8:f7:73:
86:29:41:75:29:64:1f:48:31:8d:80:96:84:ce:51:
19:7c:fd:64:a2:65:c6:4f:03:c3:12:c9:e5:d7:27:
e5:da:d4:ff:9d:ff:4a:9e:35:9e:1f:84:a7:77:df:
bc:01:81:9f:87:73:52:a8:d8:bd:24:49:56:aa:dd:
33:25:6a:33:b3:fd:9e:f8:48:87:d9:af:e3:52:86:
a1:7a:af:ae:0d:48:18:d5:f0:9a:c6:f0:a6:f0:75:
35:3e:c9:b7:aa:51:27:ab:83:e8:27:bd:b8:7f:5b:
16:d9:ee:0c:c7:7f:5d:79:08:52:fd:07:64:bb:33:
6e:7c:1f:08:dd:e5:43:86:88:c4:82:61:b4:9a:f4:
a2:cc:06:31:e9:a8:c7:7d:be:fe:64:f9:34:70:29:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:01:96:76:8D:74:36:A5:D0:09:9C:AE:A5:F1:42:10:0B:32:A7
X509v3 Authority Key Identifier:
keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:69:9d:c6:18:fe:7c:49:17:df:6b:40:51:37:9d:54:29:
80:01:07:88:8d:6c:92:1f:4d:5d:32:70:88:58:09:f6:79:0e:
bb:17:26:2b:ef:e1:5a:1c:0c:fe:52:73:08:0c:ee:ea:8a:6e:
3f:df:1e:cd:57:9d:22:ce:71:5f:6c:18:2d:a4:b0:c5:ad:4c:
cd:ae:d5:2f:52:93:1c:a9:d7:91:52:7c:08:ea:f0:db:62:78:
0d:40:f7:de:90:25:0f:c5:c8:29:de:25:c1:9a:9f:9f:cb:74:
2c:3d:ba:76:9b:b8:1b:3d:08:0e:70:d2:84:89:ae:ea:2e:07:
3d:54:dc:6d:fc:63:57:c3:ed:32:cb:8a:13:7e:ef:4a:a1:5b:
33:c6:6c:ad:41:9b:38:11:6d:58:31:f3:3d:06:dc:91:88:28:
8a:ad:b5:c8:7f:a9:23:64:79:0d:e0:14:de:99:56:fa:f6:55:
a2:10:bd:23:ed:ae:c2:4b:51:56:94:6b:b4:c5:1e:a0:2b:31:
57:50:9d:41:fc:20:05:81:98:ac:a5:05:62:0d:01:a0:b5:1a:
03:b7:cf:bd:f0:bf:05:09:12:d4:6c:dc:7c:21:07:e7:d4:fa:
60:22:6f:ae:67:b4:87:30:86:15:32:bc:77:4d:33:1e:f1:d3:
a2:a2:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:48:38 2026 by rpki-client