
Error: rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File: 0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier: DAA6ynNDa0o9w7di1HaFAGD8MHJhmOPto7umGiaFgsU=
Subject key identifier: 9D:DB:FF:A7:7B:74:43:39:C9:06:44:36:EE:BC:AD:94:1B:66:AD:13
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 077B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number: 0774
Signing time: Tue 27 Oct 2026 02:24:41 +0000
Manifest this update: Tue 27 Oct 2026 02:24:40 +0000
Manifest next update: Thu 29 Oct 2026 02:24:40 +0000
Files and hashes: 1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: QLwstN6iqNjRw30pBtSv4aB+DznE2pqbB9NqG1DyB+8=)
2: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
3: 9E1E04DAC42A11F195A36CD8CE1D38B0.roa (hash: N2Ari3VqP125GfUVmY/HdUpQCynCdIpetGzSelUfNiY=)
4: FACAEE98703B11F186502B13CF1D38B0.roa (hash: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: Oct 27 02:24:40 2026 GMT
Not After : Oct 29 02:24:40 2026 GMT
Subject: CN=6ae00b69-e02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e1:e9:7f:da:fd:92:13:e4:f1:6e:a4:de:02:
25:c2:29:80:be:41:89:2b:84:5b:1d:57:34:c4:42:
5e:37:00:f7:2b:28:e9:83:c4:1e:44:6e:f1:ad:e6:
b3:d8:98:28:6c:ca:14:3e:17:2e:7e:19:03:50:fc:
c4:11:01:0b:d2:3c:21:49:2c:88:d6:8a:25:45:6e:
4b:9b:8d:94:95:56:85:24:1b:6c:1d:4b:6a:bd:7b:
58:8b:cf:15:28:94:86:87:60:cf:7b:0f:a8:dd:a7:
dc:a3:4c:b9:44:2e:b2:5e:d7:da:e0:a4:b2:92:97:
6d:c6:c7:3a:cb:7c:c7:6e:22:a3:68:7f:23:1e:40:
d1:45:0d:58:d3:e3:4a:ec:f8:95:82:fd:b7:d7:2c:
8d:64:d3:65:41:ca:22:f5:ce:10:d3:60:5d:11:4e:
2a:78:42:ab:f8:6a:c8:4a:2f:d6:49:73:3c:25:1f:
42:58:99:eb:4b:da:93:16:ba:b1:3c:ae:d3:41:14:
b3:94:cd:c7:04:58:35:f0:b8:90:1b:7a:f9:40:a5:
3d:e5:01:f3:66:a2:ae:37:95:94:28:7b:31:e9:89:
6d:81:4d:5c:b9:87:78:ea:30:99:ea:15:a1:e8:d4:
3d:6f:b0:99:e9:f6:cd:c7:10:23:19:6e:32:52:5d:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:FF:A7:7B:74:43:39:C9:06:44:36:EE:BC:AD:94:1B:66:AD:13
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a3:24:e4:ed:d4:23:8f:f4:52:db:27:fe:41:79:ac:ba:e2:
f9:50:de:b9:f6:f6:30:be:43:b4:84:dc:62:b2:e5:99:c8:79:
16:4a:da:cb:5a:28:1d:b6:0a:fe:f5:0e:12:a4:04:62:2d:a9:
52:ca:df:02:98:42:ca:e1:94:9e:ef:61:ce:9b:36:b4:07:4f:
5c:89:d4:56:6c:61:30:ef:aa:f3:4b:c3:c3:b8:50:12:33:03:
af:ce:75:5f:0c:5b:bb:7e:e3:bf:a7:22:ee:ea:94:f0:b8:69:
c8:60:c8:ac:f2:59:0e:72:0f:bb:a9:47:aa:4d:73:4b:49:ef:
d0:96:a8:9e:06:8c:85:bf:df:8e:05:4d:2d:cd:16:30:48:30:
2b:ac:e1:e1:f5:28:18:07:52:2d:96:2f:03:53:2c:c1:f1:41:
4b:99:eb:49:d2:af:0d:7b:a0:e8:95:b5:79:b7:96:b5:ec:1d:
05:ad:33:6b:07:e7:af:5f:54:a0:af:be:de:34:67:64:01:1d:
ad:9f:56:a1:a1:e4:a8:a4:72:11:92:c9:8c:1a:46:c7:1a:20:
e8:a1:fc:76:3b:af:97:4e:63:11:7f:e5:46:d7:e5:dc:c2:da:
81:00:2e:06:e7:3e:44:18:18:dc:c7:de:44:fe:9c:d6:f6:c4:
fc:25:0f:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB3swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5NDRBRjExMC8GA1UEBRMoRDE4MUU5MUVEMTczRjY0RDdCRjgyRDhFMEJFRjk5
NEQ1OTg2REY1MjAeFw0yNjEwMjcwMjI0NDBaFw0yNjEwMjkwMjI0NDBaMBgxFjAU
BgNVBAMTDTZhZTAwYjY5LWUwMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDu4el/2v2SE+TxbqTeAiXCKYC+QYkrhFsdVzTEQl43APcrKOmDxB5EbvGt
5rPYmChsyhQ+Fy5+GQNQ/MQRAQvSPCFJLIjWiiVFbkubjZSVVoUkG2wdS2q9e1iL
zxUolIaHYM97D6jdp9yjTLlELrJe19rgpLKSl23GxzrLfMduIqNofyMeQNFFDVjT
40rs+JWC/bfXLI1k02VByiL1zhDTYF0RTip4Qqv4ashKL9ZJczwlH0JYmetL2pMW
urE8rtNBFLOUzccEWDXwuJAbevlApT3lAfNmoq43lZQoezHpiW2BTVy5h3jqMJnq
FaHo1D1vsJnp9s3HECMZbjJSXVoDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUndv/
p3t0QznJBkQ27rytlBtmrRMwHwYDVR0jBBgwFoAU0YHpHtFz9k17+C2OC++ZTVmG
31IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOTQ0LzE2QUE4QTQ0MjA3NjExRUNCMzA2MDkyNUQ4QTAxNENFLzBZSHBI
dEZ6OWsxNy1DMk9DLS1aVFZtRzMxSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBZSHBIdEZ6OWsxNy1DMk9DLS1aVFZtRzMxSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTM5NDQvMTZBQThBNDQyMDc2MTFFQ0IzMDYwOTI1RDhB
MDE0Q0UvMFlIcEh0Rno5azE3LUMyT0MtLVpUVm1HMzFJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6oyTk7dQjj/RS2yf+QXmsuuL5UN65
9vYwvkO0hNxisuWZyHkWStrLWigdtgr+9Q4SpARiLalSyt8CmELK4ZSe72HOmza0
B09cidRWbGEw76rzS8PDuFASMwOvznVfDFu7fuO/pyLu6pTwuGnIYMis8lkOcg+7
qUeqTXNLSe/QlqieBoyFv9+OBU0tzRYwSDArrOHh9SgYB1Itli8DUyzB8UFLmetJ
0q8Ne6DolbV5t5a17B0FrTNrB+evX1Sgr77eNGdkAR2tn1ahoeSopHIRksmMGkbH
GiDoofx2O6+XTmMRf+VG1+XcwtqBAC4G5z5EGBjcx95E/pzW9sT8JQ9H
-----END CERTIFICATE-----
Generated at Tue Oct 27 13:04:05 2026 by rpki-client