
Error: rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File: dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier: SEHuMhBE+/2YDt5QoZL489+QSkhUMW1J1xu7Rzyszh0=
Subject key identifier: 31:AC:5C:B1:4C:CB:80:A2:39:0B:7C:4B:74:75:32:87:E9:24:38:A8
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer: /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial: 04EC
Authority info access: rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number: 04EB
Signing time: Tue 27 Oct 2026 03:29:30 +0000
Manifest this update: Tue 27 Oct 2026 03:29:29 +0000
Manifest next update: Thu 29 Oct 2026 03:29:29 +0000
Files and hashes: 1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: fiBZ8x3VrSUDOjNOG+AAa9XD4+LMHksQIQ6bd3QdQWU=)
2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Validity
Not Before: Oct 27 03:29:29 2026 GMT
Not After : Oct 29 03:29:29 2026 GMT
Subject: CN=6ae01a9a-115a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:56:20:0f:f3:d8:d0:35:ed:82:f8:8a:2a:5a:
d5:c9:71:2a:2c:ef:26:d4:f3:42:61:8a:31:0d:26:
a6:30:27:50:1a:fa:c5:67:1b:18:c1:75:2b:a5:03:
a6:0a:70:d5:10:33:e0:fd:53:3c:c0:5e:09:62:e8:
70:f2:0a:3a:d0:12:7f:f6:40:20:23:ca:8d:ce:0e:
1d:a1:01:ee:13:6f:dc:3b:da:0e:f6:d1:69:c5:f0:
bf:51:f3:b1:04:5f:1a:68:7d:cf:50:0c:08:4b:38:
6c:41:cd:47:f7:1b:88:2e:51:20:4d:ba:ea:56:3b:
e9:18:d6:8e:1e:09:66:2e:c5:f8:3a:4b:6a:c0:02:
16:fd:1c:21:a9:b2:6e:a2:df:5d:95:f9:a2:a2:eb:
d9:db:67:e3:12:d8:b0:0f:b7:6b:6a:8d:8f:eb:17:
7c:72:ca:69:ea:7e:bc:cc:0c:b5:f1:6b:e5:70:d8:
c6:06:a5:86:4d:e8:c6:54:fe:59:29:77:99:56:d6:
da:dc:4a:70:88:8d:b1:ed:76:ba:a6:ad:57:c7:4b:
c9:d6:e5:33:10:08:d3:62:44:15:a2:ed:df:a9:06:
e1:38:9f:4e:a6:09:70:dc:14:24:fd:bd:bd:22:3c:
1d:11:e4:bd:57:7d:28:ec:a2:e0:32:3a:29:bc:bb:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:5C:B1:4C:CB:80:A2:39:0B:7C:4B:74:75:32:87:E9:24:38:A8
X509v3 Authority Key Identifier:
keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:2a:89:ea:08:6a:a4:76:3e:bc:18:b9:51:2b:ed:91:1e:
7d:f8:5e:45:d0:ad:b4:d3:fe:3a:2f:d2:c5:37:85:1c:e1:e6:
91:d2:65:84:b6:bf:02:f1:9a:93:1f:71:a3:7c:fe:5c:c3:97:
0d:bf:3f:5b:d7:dc:ce:19:e7:d4:d4:ea:00:bc:59:85:b2:3d:
19:ac:1d:84:15:b4:df:81:ef:8d:66:20:2e:e1:80:84:15:8b:
ba:25:32:03:aa:dc:68:35:ae:2a:7b:cd:ef:33:a1:e1:4e:69:
0b:22:68:b1:49:69:a4:4a:38:22:9e:30:fd:99:a1:4c:3e:d6:
c1:7e:36:c9:58:b7:d5:22:92:96:af:76:6c:59:a5:47:ab:34:
9c:61:ad:4f:b4:15:46:22:ef:46:2c:6c:0f:7e:fa:a9:99:f7:
d8:28:b4:eb:3f:6a:f6:85:c9:b6:83:7f:40:5e:b3:00:69:60:
ec:ff:e1:e5:78:17:6d:d1:6e:50:5a:92:0c:d6:8a:57:a3:11:
ee:5b:6a:c0:d5:e7:67:c1:92:f1:c4:3e:8e:e8:32:75:1e:0c:
86:eb:80:05:cc:74:3b:e2:a9:cc:bf:00:09:a9:2a:a4:d9:bc:
f7:47:ba:7d:a8:94:fe:93:28:a6:24:7a:18:75:11:f2:f0:dc:
d6:ee:e5:17
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM5Q0VBUjExMC8GA1UEBRMoNzQ1REQ3NzEwMEU1QkFBNTc1NUQzQjkzQzBGNDI3
NEMyNzlCNkRENzAeFw0yNjEwMjcwMzI5MjlaFw0yNjEwMjkwMzI5MjlaMBgxFjAU
BgNVBAMTDTZhZTAxYTlhLTExNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD6ViAP89jQNe2C+IoqWtXJcSos7ybU80JhijENJqYwJ1Aa+sVnGxjBdSul
A6YKcNUQM+D9UzzAXgli6HDyCjrQEn/2QCAjyo3ODh2hAe4Tb9w72g720WnF8L9R
87EEXxpofc9QDAhLOGxBzUf3G4guUSBNuupWO+kY1o4eCWYuxfg6S2rAAhb9HCGp
sm6i312V+aKi69nbZ+MS2LAPt2tqjY/rF3xyymnqfrzMDLXxa+Vw2MYGpYZN6MZU
/lkpd5lW1trcSnCIjbHtdrqmrVfHS8nW5TMQCNNiRBWi7d+pBuE4n06mCXDcFCT9
vb0iPB0R5L1XfSjsouAyOim8uyYdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMaxc
sUzLgKI5C3xLdHUyh+kkOKgwHwYDVR0jBBgwFoAUdF3XcQDluqV1XTuTwPQnTCeb
bdcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzOUNFLzYyMUFCNEVFMEI1MzExRUU5QjREMTM1RDRBRDlFNkZDL2RGM1hj
UURsdXFWMVhUdVR3UFFuVENlYmJkYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2RGM1hjUURsdXFWMVhUdVR3UFFuVENlYmJkYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTM5Q0UvNjIxQUI0RUUwQjUzMTFFRTlCNEQxMzVENEFEOUU2
RkMvZEYzWGNRRGx1cVYxWFR1VHdQUW5UQ2ViYmRjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv6iqJ6ghqpHY+vBi5USvtkR59+F5F0K20
0/46L9LFN4Uc4eaR0mWEtr8C8ZqTH3GjfP5cw5cNvz9b19zOGefU1OoAvFmFsj0Z
rB2EFbTfge+NZiAu4YCEFYu6JTIDqtxoNa4qe83vM6HhTmkLImixSWmkSjginjD9
maFMPtbBfjbJWLfVIpKWr3ZsWaVHqzScYa1PtBVGIu9GLGwPfvqpmffYKLTrP2r2
hcm2g39AXrMAaWDs/+HleBdt0W5QWpIM1opXoxHuW2rA1ednwZLxxD6O6DJ1HgyG
64AFzHQ74qnMvwAJqSqk2bz3R7p9qJT+kyimJHoYdRHy8NzW7uUX
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:19:17 2026 by rpki-client