
Error: rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
File: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft (raw, json)
Hash identifier: rOM5t0TMx51M4kHmizzWrfeS5BMP0Cz313CJEOHpLaU=
Subject key identifier: EF:B9:7A:3E:CB:28:68:9D:06:F1:47:82:75:A8:A3:54:D7:40:B0:C1
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Certificate issuer: /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial: 0311
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
Manifest number: 030C
Signing time: Mon 26 Oct 2026 04:36:27 +0000
Manifest this update: Mon 26 Oct 2026 04:36:27 +0000
Manifest next update: Wed 28 Oct 2026 04:36:27 +0000
Files and hashes: 1: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl (hash: iTKOwQb57IL/CKq9K/irFQbfzg+ZmxYlqYRALNjCeYQ=)
2: 38A77FC2AB6311F0B45696BFDAE4EC9C.roa (hash: LBPNAWAAVOPpk8TQQA7s5/xN6Mn1ttafqGNGLr5LoZY=)
3: 23D8DB56F78311F0BA13BBE1DAE4EC9C.roa (hash: RiaEDImgDKuhgGwAhXll6hcFon0UmnVQwiXDGntrwvQ=)
4: 74DC1AE2C46511EF85B5237D762E951A.roa (hash: CJ5E2+hEe+/wSXFMNEijdHv/KTZ0Hf60OfkqPWnXEi4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 04:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695083AF, serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Validity
Not Before: Oct 26 04:36:27 2026 GMT
Not After : Oct 28 04:36:27 2026 GMT
Subject: CN=6aded8cb-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:94:d6:73:e1:f1:23:0c:f1:22:78:83:44:
24:18:06:3d:75:f1:b9:55:2c:a0:c6:88:05:e6:ff:
0e:89:7e:8b:8a:07:07:f5:46:c8:2a:51:ed:d1:c7:
68:99:51:f5:f7:22:64:53:87:1f:66:97:a7:15:de:
77:f6:0b:4d:1b:de:fe:58:2c:43:42:0f:a7:e6:28:
6a:46:91:cf:0a:8d:9e:a4:3d:2a:7f:fc:ce:02:00:
29:80:c9:69:cd:8d:91:ad:31:c9:93:78:8b:44:79:
55:71:ff:c1:e3:2c:88:ab:f4:7e:6f:27:85:9c:79:
69:93:6f:bc:24:6d:7f:50:77:9c:f9:bb:6f:64:21:
d1:a3:a2:ac:87:f9:14:be:26:71:c4:1a:b3:a2:66:
5e:dc:1e:fc:50:64:27:29:46:30:6f:6d:08:14:8d:
c0:ef:53:96:82:52:91:f3:cd:04:52:e2:f9:1b:66:
21:02:37:d1:ad:31:df:6c:49:2e:97:d2:fa:fc:82:
fe:f6:2b:d9:6e:de:c1:87:f4:96:df:96:7b:c0:35:
8f:97:d5:5b:03:67:79:7d:1a:cb:9e:43:67:a0:b0:
28:f7:45:d7:77:33:f3:ba:a7:e0:42:b3:9a:16:bd:
e8:45:f7:3d:9d:86:ca:bb:b0:08:e3:6e:bf:36:66:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:7A:3E:CB:28:68:9D:06:F1:47:82:75:A8:A3:54:D7:40:B0:C1
X509v3 Authority Key Identifier:
keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:10:0a:d7:36:d5:77:a0:6e:b3:de:45:5b:e4:0a:36:ca:f3:
f1:44:58:ae:91:e9:56:52:49:f9:35:28:52:6e:76:64:1b:57:
77:97:de:36:bf:ce:29:7c:c3:2d:5f:2b:ed:3e:77:db:f1:8e:
d9:d3:c7:5a:ef:df:c1:bd:9f:85:36:4e:91:5a:2e:30:b2:95:
fa:51:20:f8:f1:b1:71:c0:a7:b1:d9:b3:97:dc:60:73:88:90:
5a:89:9e:f9:1d:db:da:8d:9e:1e:67:4b:2e:96:87:18:ab:7d:
52:a3:05:ef:74:ad:54:cd:c8:2b:cd:c8:bf:11:d0:a2:7a:5d:
fb:9a:84:8b:99:31:39:64:47:83:06:ae:12:e8:e0:65:78:1a:
2c:e0:7d:2f:81:85:03:3b:3e:cb:5a:0c:28:3f:60:a1:ae:73:
b1:e1:47:61:b8:5a:db:df:78:aa:e6:94:66:94:9e:6b:7c:08:
d1:5a:b2:1d:67:9c:22:72:3c:02:f2:03:f8:cd:b7:0f:b5:6f:
bb:22:9d:da:d4:6b:b1:34:57:c1:02:88:4d:9d:77:9e:19:cc:
a4:f5:0b:e1:7e:8b:f5:3b:67:fc:a2:89:35:d9:7f:f1:e4:e1:
c2:13:9c:5f:1f:3d:1f:32:29:c4:6b:d7:51:76:19:9c:7e:40:
2c:10:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:28:23 2026 by rpki-client