
Error: rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
File: 4QUiVzRX-tnLWm9cGdaMzm1unCM.mft (raw, json)
Hash identifier: IKX6saiGUy988ohhfRNxjkf9DMIDvFvZoPNc0WG1iyk=
Subject key identifier: 03:D4:2A:AD:CB:0B:A9:BC:FC:DD:B1:9B:12:C5:1E:05:4C:12:EF:46
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Certificate issuer: /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial: 0808
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
Manifest number: 07FC
Signing time: Tue 27 Oct 2026 02:09:50 +0000
Manifest this update: Tue 27 Oct 2026 02:09:49 +0000
Manifest next update: Thu 29 Oct 2026 02:09:49 +0000
Files and hashes: 1: 4QUiVzRX-tnLWm9cGdaMzm1unCM.crl (hash: FhF2shaVRfV71vHPbdBYkG0+Y+QW/m2+d8hxBD3BLs0=)
2: AC177DA47B0B11F1A3B216CBCE1D38B0.roa (hash: bMth0AusCvgLj6XLpToN0qnzNfQVf/3FW6vcNFU0/ec=)
3: 4E070DD6D22711EE84901E62775412E6.roa (hash: BH/57g82jCGEW3Gi9zhi5zpe2WKpng1h5j7GySibBtY=)
4: 3824F918D4D911EBACDD633EF8AEA228.roa (hash: L3vH2zmIsjZ03q0URRZICrpO1MOA0mkvPARr/jfeppg=)
5: 71A4280C7B0B11F18395E9CACE1D38B0.roa (hash: hX289QM9gmP7k7TIWsfxNk6zfdIqxgBnNjpDZMaDshU=)
6: 6BE29F76D4D911EB8763AE3EF8AEA228.roa (hash: X6fENjfD/CbaGp5w9cKC1jdpjMT1u+e4NgCmYHUQ1mc=)
7: 68D44AB88A5111F198E52EE8CE1D38B0.roa (hash: NuAO+4Cff/SQYJzZ9VP0Sm+kGnXMOfIzHPRlCovDBHY=)
8: 05AA50A47B0B11F189AE00C7CE1D38B0.roa (hash: y1OUPqhtr8x46vl5qQeuQVcGSNDFIWY5wQSw/hbLWIk=)
9: 970F1E641FEA11EE99947F624AD9E6FC.roa (hash: 0Kn857c5JBdTYzWFmA6vGDiE64UxZrMNDZC0t8mHU/g=)
10: FBC837E67B0911F1870DC0C2CE1D38B0.roa (hash: Xx+fv2dGXbQND8KB+NNAbNwEGv0ozVNMYzQVnM23J5Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A0CB0AF, serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Validity
Not Before: Oct 27 02:09:49 2026 GMT
Not After : Oct 29 02:09:49 2026 GMT
Subject: CN=6ae007ee-4676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:9a:9d:b5:9f:1b:9d:84:fc:f1:31:0f:15:
c1:c5:1d:d9:05:f5:28:04:3e:d3:be:5c:a4:6d:8c:
44:8b:5a:15:b6:47:45:2f:b7:32:47:18:e1:8a:07:
9e:86:86:66:f8:d9:8e:b7:fe:68:ae:31:6d:15:3b:
e1:8d:24:06:43:9d:39:d9:10:ad:34:06:4f:0d:cd:
71:a7:91:af:3e:b1:0a:70:27:18:a5:c9:21:53:cd:
44:19:10:0d:f1:51:6e:75:2e:30:8c:2d:7a:cc:7c:
2e:16:49:ee:fd:dd:fc:53:8f:5d:1d:fe:85:2e:1f:
02:fe:6e:37:92:10:33:d8:a5:3c:dc:02:4f:ac:f9:
c0:7f:b2:5d:dd:04:d5:32:92:44:1c:b0:79:a9:9f:
b7:04:6e:6f:60:78:39:1f:06:80:7a:10:90:c4:79:
82:1e:bd:22:89:d1:63:b6:3b:ba:47:a8:31:7f:3c:
77:82:96:11:7c:c0:f9:2c:56:02:55:54:0e:9a:69:
58:ad:8f:d4:7c:ea:9b:5b:c1:b9:24:a8:88:8e:27:
e8:73:8e:86:7b:6f:f0:ef:c5:9e:14:64:d8:ad:af:
3c:a4:96:07:9e:aa:32:0f:3f:bb:78:5f:df:ea:62:
c9:41:8e:2d:25:0c:f6:d1:1d:06:0c:b9:31:f9:8b:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:2A:AD:CB:0B:A9:BC:FC:DD:B1:9B:12:C5:1E:05:4C:12:EF:46
X509v3 Authority Key Identifier:
keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:ab:45:31:26:b5:c2:95:09:78:48:87:32:12:e3:ea:aa:
42:5d:32:5c:3c:4d:94:bc:b9:7d:50:5a:80:35:09:9a:95:57:
d2:28:eb:55:37:2b:68:2d:6f:ec:79:d1:3b:0a:91:e7:e3:a3:
17:55:ff:a9:d4:9b:8f:0b:62:08:0f:57:6c:81:b9:54:52:bb:
a3:b2:fe:75:c9:b0:93:b6:11:ff:fa:15:2a:88:32:9a:87:36:
d9:1d:e6:92:de:a1:f6:c7:fd:fb:50:5a:a2:43:8a:3a:e8:c4:
e9:44:d4:29:27:25:ba:be:6b:79:ed:98:28:ee:e9:53:7b:64:
2e:da:cf:01:cb:87:6d:40:e0:84:78:2f:36:64:6f:a7:37:11:
49:a8:19:31:fc:11:ba:60:d7:cd:09:37:3e:4f:2c:c4:1e:f3:
80:e3:5c:e4:18:a4:a4:0f:9f:fd:2c:bc:37:28:81:c2:30:65:
a3:4f:75:99:a7:1d:95:13:8a:5b:b8:a0:fc:6c:68:85:8b:6e:
5c:8d:63:41:95:e8:0f:2a:a8:75:ce:aa:c6:bf:b6:ec:96:a4:
8a:b9:f7:9b:27:ac:6b:b7:26:ca:b5:65:90:e8:e5:6c:5d:f8:
96:bf:71:33:f6:75:8f:4c:51:5a:7a:e5:ab:c5:b9:26:f3:4d:
c3:a7:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:21:22 2026 by rpki-client