
Error: rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
File: 0uDwPq7oAqkBwlcRKP55pj80aSw.mft (raw, json)
Hash identifier: q48Vb/8aU51OAxaVVJ3BtSAi8D+jWW2NRYdmAgzLU2g=
Subject key identifier: 1C:34:8E:F5:33:2D:54:33:2C:55:4B:38:0C:EF:45:B9:82:7A:CF:4C
Authority key identifier: D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
Certificate issuer: /CN=F36858D5AF/serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Certificate serial: 04A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
Manifest number: 04A3
Signing time: Sun 25 Oct 2026 03:40:05 +0000
Manifest this update: Sun 25 Oct 2026 03:40:04 +0000
Manifest next update: Tue 27 Oct 2026 03:40:04 +0000
Files and hashes: 1: 0uDwPq7oAqkBwlcRKP55pj80aSw.crl (hash: w0K9LqLCgpYz8i4hRom5qOzjx7Op5FAuBoWSF4QzwGg=)
2: 6C083968730911EEB676D5174AD9E6FC.roa (hash: GPazHsxOeA8iw549I//PnsuiDjidxxug1DVogvWrQ6I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36858D5AF, serialNumber=D2E0F03EAEE802A901C2571128FE79A63F34692C
Validity
Not Before: Oct 25 03:40:04 2026 GMT
Not After : Oct 27 03:40:04 2026 GMT
Subject: CN=6add7a15-4e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:30:a0:05:71:ee:a5:38:65:b9:90:bc:d2:
39:03:65:bd:3e:76:86:ce:c9:04:97:55:48:3c:c3:
4a:ef:d2:d8:d6:07:2d:46:1e:0c:a9:15:cb:c5:a9:
e0:d1:99:cb:da:9a:db:16:81:54:92:91:0e:21:c2:
c4:89:76:18:6b:84:c1:2a:bc:9e:73:ff:61:f5:23:
85:60:cd:c2:98:86:02:a5:8d:6f:f4:72:d1:17:a3:
01:5a:4d:7b:ff:12:b4:2c:32:3a:34:cb:95:75:ad:
ad:79:b4:8c:a7:e6:7a:84:87:6a:b5:b7:f5:81:bc:
5e:8b:81:c6:bb:af:30:23:f0:04:09:5c:da:75:c3:
fe:95:df:da:8c:91:0a:ff:f8:ff:f7:a7:4e:e3:10:
8e:53:64:34:11:af:9f:d9:00:6a:b8:d0:b7:05:b9:
65:7c:b6:64:14:dd:96:d9:e1:bb:e3:55:6d:09:37:
d2:a9:2e:0f:b9:d3:29:04:b4:82:68:2a:a8:eb:e3:
df:8e:41:dd:42:74:5c:f8:0f:22:e9:d7:0b:e4:21:
23:56:93:48:ad:11:41:ba:e9:ff:95:3a:e5:c3:53:
b6:3b:9f:62:ec:50:66:a6:ff:61:53:09:ba:ac:ac:
ef:85:ab:5e:9b:68:82:9b:5a:e7:95:e3:4b:2b:5b:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:8E:F5:33:2D:54:33:2C:55:4B:38:0C:EF:45:B9:82:7A:CF:4C
X509v3 Authority Key Identifier:
keyid:D2:E0:F0:3E:AE:E8:02:A9:01:C2:57:11:28:FE:79:A6:3F:34:69:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0uDwPq7oAqkBwlcRKP55pj80aSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36858D5/CE72EFB840B311EEB99A38154AD9E6FC/0uDwPq7oAqkBwlcRKP55pj80aSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:cf:04:7e:a0:97:70:8d:cd:f1:42:cd:80:ac:1d:f0:ae:
88:ff:6b:b5:c8:4f:b9:04:f4:07:17:a9:49:b4:43:8b:8a:45:
0e:28:4d:06:19:6d:76:01:8b:c5:fb:26:20:37:85:d3:f6:79:
1e:4b:36:2d:5d:ce:12:86:48:34:d3:c2:9e:91:fa:39:62:c6:
4c:e5:53:95:30:cc:9b:c0:6b:65:30:7c:45:0a:7b:45:0d:f0:
09:77:f1:97:48:c1:67:cd:22:37:cb:cc:b4:7f:b9:87:2d:a5:
2c:f0:ef:96:4b:e0:ec:e8:4d:02:58:65:3f:82:58:e7:45:e1:
bf:de:f3:9e:de:5f:c1:f6:41:6b:52:fc:10:31:e1:b2:5d:7a:
30:6e:54:d7:07:55:c4:63:69:84:22:5d:cb:d0:45:a3:c2:9a:
8a:cc:c4:08:5b:bc:e7:26:c0:1c:09:10:b3:ed:ab:c7:59:6a:
e2:9b:14:21:45:c5:37:a9:3c:e3:da:34:a8:75:f7:63:7a:8f:
3b:5e:92:cc:90:2b:3c:58:f3:31:8d:42:07:0e:13:88:40:83:
5a:3a:44:ec:31:71:7c:e1:b5:9e:c8:5f:6c:ad:10:62:d6:bc:
5d:52:96:da:9c:61:4e:f6:29:70:d2:16:da:4c:0e:02:09:95:
35:68:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:59:14 2026 by rpki-client