
Error: rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File: X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier: R9Z6Bxx3fjDBiYSbiWjFaH1e7W1+2NaJpgqjfE2NFfk=
Subject key identifier: 79:7D:52:ED:5B:B1:55:57:49:95:F3:5A:91:2C:2E:B7:D0:85:E5:8A
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer: /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial: 0605
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number: 0601
Signing time: Thu 08 Oct 2026 02:55:45 +0000
Manifest this update: Thu 08 Oct 2026 02:55:44 +0000
Manifest next update: Sat 10 Oct 2026 02:55:44 +0000
Files and hashes: 1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: r6xSR5RGo20C3QxNiv1o09u82vBnFcaaAtSxtwgqRKA=)
2: ED6720888A4D11F18B3C7BD3CE1D38B0.roa (hash: fy03gYHL7JTAVtW+hjgr7RCIr18BTRSjeQ/qFlmp6EA=)
3: 9727295C8A4D11F1AF7D2AD1CE1D38B0.roa (hash: gnUznLVBJQoJLLODckjNn7stwWgqRcBoFzmwFmu5Uy8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 02:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Validity
Not Before: Oct 8 02:55:44 2026 GMT
Not After : Oct 10 02:55:44 2026 GMT
Subject: CN=6ac70631-a73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:bb:25:ca:be:96:c2:89:72:5b:a6:5c:08:
8a:44:ad:94:69:e0:1f:6a:19:c8:e3:5b:fc:87:f3:
72:98:3f:ad:f2:44:60:53:9a:47:c1:d1:b0:07:55:
da:a3:90:8b:75:d0:17:67:6a:ad:fd:1b:28:4f:ba:
07:91:1f:7b:2c:6f:7f:33:f6:18:73:c0:af:c2:06:
35:9a:f2:e1:97:98:6e:d6:a6:57:b3:d0:6f:c6:79:
9d:2f:68:c0:2c:72:a0:c3:50:cb:76:47:8f:20:d7:
22:82:ab:c5:59:dc:b0:b0:06:7f:15:d5:69:9c:1a:
6b:d4:11:de:da:7f:07:34:2d:48:05:52:84:a9:8c:
e2:0b:fd:c0:c9:ee:5c:dd:a4:dd:4f:23:cb:7f:6b:
54:50:8f:fa:70:37:37:d2:2c:39:f3:4d:ff:e3:ee:
bf:62:1e:f0:0d:4c:5d:ce:6e:9e:db:28:04:f1:ab:
61:56:15:39:1b:92:1e:bb:f1:62:59:b9:7d:06:e7:
a4:58:ba:aa:9d:f9:20:2b:69:6f:31:47:57:81:aa:
68:b7:1e:7c:e6:c6:b7:f5:10:96:34:36:a5:94:d8:
b8:f7:e6:e6:56:86:74:11:04:2a:74:fa:29:7c:c4:
7f:1a:24:26:3d:bb:00:be:b0:2e:97:d0:36:9f:91:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:52:ED:5B:B1:55:57:49:95:F3:5A:91:2C:2E:B7:D0:85:E5:8A
X509v3 Authority Key Identifier:
keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:f0:a2:9c:1d:e9:af:36:1a:b0:1a:cd:1b:22:b5:43:91:
a5:de:c7:8e:35:aa:19:c1:27:68:c0:ee:5b:ce:7d:87:fd:74:
00:c6:c8:73:cf:a8:34:ac:c0:9a:33:8e:db:c3:c0:63:76:9c:
74:d6:d9:96:c6:15:3c:2a:19:df:8f:c5:21:f4:f9:50:f3:ac:
ca:49:bc:41:f9:59:a0:79:12:91:88:77:ea:16:b8:2d:4b:15:
79:2e:a8:53:c3:ad:f5:c0:63:5c:61:6c:30:ac:28:7a:67:b0:
91:71:06:f4:a6:b2:77:0f:aa:e4:7a:6d:c0:69:e7:db:3b:d8:
80:ee:fb:7e:d6:4f:bc:98:76:aa:1e:28:d1:7a:a6:50:d9:78:
2c:11:f8:e2:94:e0:4c:5a:40:66:96:15:cc:6a:d7:14:2a:02:
ff:08:6c:d3:53:0a:b4:26:63:62:76:d8:a8:03:59:2a:08:8f:
52:b7:b0:4d:55:3c:11:e3:6a:1b:0f:b6:48:77:41:7d:0c:de:
e4:6d:01:8c:d9:ac:c6:6b:66:cb:f1:d7:f0:0b:db:75:58:e1:
83:2b:a1:4c:dc:8a:9b:c2:38:c9:01:26:a0:ff:87:4d:22:c3:
c8:8f:c2:f4:3b:47:09:01:18:44:77:67:05:7e:07:a6:e8:ae:
c9:49:ae:20
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM2MzJBRjExMC8GA1UEBRMoNUY2QjM0MTIxNjYyM0Q4NUE3NEYyQ0U4QTVFMjlC
NUVFQUNGQTI1MzAeFw0yNjEwMDgwMjU1NDRaFw0yNjEwMTAwMjU1NDRaMBgxFjAU
BgNVBAMTDTZhYzcwNjMxLWE3M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOTrslyr6WwolyW6ZcCIpErZRp4B9qGcjjW/yH83KYP63yRGBTmkfB0bAH
VdqjkIt10Bdnaq39GyhPugeRH3ssb38z9hhzwK/CBjWa8uGXmG7Wplez0G/GeZ0v
aMAscqDDUMt2R48g1yKCq8VZ3LCwBn8V1WmcGmvUEd7afwc0LUgFUoSpjOIL/cDJ
7lzdpN1PI8t/a1RQj/pwNzfSLDnzTf/j7r9iHvANTF3Obp7bKATxq2FWFTkbkh67
8WJZuX0G56RYuqqd+SAraW8xR1eBqmi3Hnzmxrf1EJY0NqWU2Lj35uZWhnQRBCp0
+il8xH8aJCY9uwC+sC6X0DafkTvPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeX1S
7VuxVVdJlfNakSwut9CF5YowHwYDVR0jBBgwFoAUX2s0EhZiPYWnTyzopeKbXurP
olMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYxMjIyNDY4L1gyczBF
aFppUFlXblR5em9wZUtiWHVyUG9sTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gyczBFaFppUFlXblR5em9wZUtiWHVyUG9sTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEy
MjI0NjgvWDJzMEVoWmlQWVduVHl6b3BlS2JYdXJQb2xNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARs/CinB3przYasBrNGyK1Q5Gl3seO
NaoZwSdowO5bzn2H/XQAxshzz6g0rMCaM47bw8Bjdpx01tmWxhU8Khnfj8Uh9PlQ
86zKSbxB+VmgeRKRiHfqFrgtSxV5LqhTw631wGNcYWwwrCh6Z7CRcQb0prJ3D6rk
em3AaefbO9iA7vt+1k+8mHaqHijReqZQ2XgsEfjilOBMWkBmlhXMatcUKgL/CGzT
Uwq0JmNidtioA1kqCI9St7BNVTwR42obD7ZId0F9DN7kbQGM2azGa2bL8dfwC9t1
WOGDK6FM3IqbwjjJASag/4dNIsPIj8L0O0cJARhEd2cFfgem6K7JSa4g
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:52:02 2026 by rpki-client