
Error: rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
File: W8bKYtbdbvSdoT50fsEHbd1PSrY.mft (raw, json)
Hash identifier: aw7zFuItat2Bj+GO89e+mmsTfVgHQt5FEQLOtIPyAVo=
Subject key identifier: 01:DC:AB:BF:F8:05:82:D4:EF:1B:B6:41:E0:FE:D4:F9:67:9A:CE:BA
Authority key identifier: 5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
Certificate issuer: /CN=F36A3F9EAF/serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Certificate serial: 0759
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
Manifest number: 0756
Signing time: Sun 27 Sep 2026 02:24:15 +0000
Manifest this update: Sun 27 Sep 2026 02:24:15 +0000
Manifest next update: Tue 29 Sep 2026 02:24:15 +0000
Files and hashes: 1: W8bKYtbdbvSdoT50fsEHbd1PSrY.crl (hash: MSV9RbgPCxqWLmsCgpKiyLWOg45cpS7divN4Fv4PyEA=)
2: 3CC373A0D18D11EFB9A08393762E951A.roa (hash: J/XCADMjL9YV56WDi2ZZxp5RHEw9w+Slr4XdI+atiNA=)
3: 16BDFC3C8A5211F1A1EE42ECCE1D38B0.roa (hash: SpLIt0X2IUlkes+xF7vMeYb+2NhtwdBkMCssEWFEgNQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A3F9EAF, serialNumber=5BC6CA62D6DD6EF49DA13E747EC1076DDD4F4AB6
Validity
Not Before: Sep 27 02:24:15 2026 GMT
Not After : Sep 29 02:24:15 2026 GMT
Subject: CN=6ab87e4f-ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:5c:71:b8:3d:dc:fb:ce:f3:2e:4f:5c:74:
50:a4:39:55:54:b1:7d:73:12:cb:90:ca:db:cf:37:
96:eb:b6:0d:c6:b7:93:1a:24:bf:a6:e8:55:97:52:
c0:3e:0f:d4:b9:02:39:e7:2e:b0:37:56:79:3a:1a:
19:16:07:ea:af:c0:d2:20:5b:76:7d:39:70:14:4d:
92:46:cd:69:04:99:99:4c:79:65:bd:fb:fc:47:b8:
68:c5:63:10:82:50:c2:17:4b:70:2b:bf:26:01:23:
60:4c:98:c1:93:54:80:56:0d:9a:79:ad:e5:19:aa:
28:90:f2:db:2e:f7:3b:b4:71:75:4b:c5:e0:e1:54:
55:f5:02:14:03:29:2e:ad:b6:2f:8f:5a:f5:40:d3:
f4:ee:23:de:1e:69:2b:dd:f7:dc:a9:5f:99:f7:47:
eb:5b:e3:34:d2:a8:92:16:d6:f0:97:ca:da:ad:99:
22:3f:6a:58:d9:76:4c:a4:b3:01:48:d7:8e:4c:ea:
fe:70:cc:e2:08:d1:ad:a5:45:f9:39:84:ff:aa:9d:
78:db:ff:5f:af:7a:da:93:39:5c:28:49:8a:4e:9a:
eb:cd:b4:bf:97:d4:87:35:42:5a:6d:72:02:79:cf:
d1:f8:6c:16:d8:79:30:c4:60:b8:7c:7c:d3:b6:59:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:AB:BF:F8:05:82:D4:EF:1B:B6:41:E0:FE:D4:F9:67:9A:CE:BA
X509v3 Authority Key Identifier:
keyid:5B:C6:CA:62:D6:DD:6E:F4:9D:A1:3E:74:7E:C1:07:6D:DD:4F:4A:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W8bKYtbdbvSdoT50fsEHbd1PSrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3F9E/CFD8C1C01B8A11ECB488356ED8A014CE/W8bKYtbdbvSdoT50fsEHbd1PSrY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:14:e5:e1:89:b7:b4:68:e5:77:3d:e4:ec:3b:d5:68:39:79:
b5:87:aa:b5:7c:ad:d1:94:10:09:7e:97:10:90:41:f1:dd:b7:
fc:bc:69:d7:ec:a6:c7:5d:11:4a:8e:fa:23:8d:02:78:f6:d1:
39:cb:03:dc:aa:83:c9:66:94:27:5b:72:e9:03:af:dc:c8:39:
a9:0d:5f:a2:ec:bb:61:cb:2b:0b:a5:58:c9:2b:42:d1:ed:d2:
bf:74:8d:62:20:03:ba:ac:93:02:4d:a5:4f:1e:d0:d6:aa:b1:
41:93:bb:b8:47:66:4b:80:54:11:19:8a:a8:5c:97:17:45:93:
88:b9:f1:3c:55:60:21:35:00:6e:a1:eb:4c:00:3c:4f:d9:72:
a4:f7:19:77:ed:a8:a1:79:00:03:17:08:4c:39:4f:84:a9:01:
9e:97:39:4b:1b:23:42:fd:c0:4c:ea:b0:e4:64:80:cb:0b:0a:
73:3b:c0:93:49:5a:34:e2:da:48:cd:3c:e1:0b:5e:67:aa:20:
68:ea:38:1b:33:71:54:d4:2e:fc:53:7d:c4:9b:86:12:0a:80:
2a:e0:8a:33:96:97:e1:b7:15:2d:f6:61:4e:19:a1:7f:28:3c:
07:f2:e2:3d:ea:c2:61:10:4b:b7:84:ec:2c:f0:63:a6:cc:0d:
88:a2:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:41:05 2026 by rpki-client