
Error: rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File: xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier: OocYXTReJG4Aqe5BfBONMzAdfcnFdK6W1T4vzIlWdmU=
Subject key identifier: C8:34:EF:4B:20:B0:E7:11:7E:38:8F:F4:79:8D:54:4F:BF:F3:79:E6
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer: /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial: 0292
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number: 0291
Signing time: Mon 26 Oct 2026 04:46:25 +0000
Manifest this update: Mon 26 Oct 2026 04:46:25 +0000
Manifest next update: Wed 28 Oct 2026 04:46:25 +0000
Files and hashes: 1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: iJmUrVu8+Sm2JthNz4b6GaOl6z0XpB0AIvq3o1iz8vQ=)
2: 9FC2FD909B0411F0887961DFDAE4EC9C.roa (hash: SQLFm7c0g8dDMdmzog7bxprxzbcmvNx7dNociNoNFR4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 04:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Validity
Not Before: Oct 26 04:46:25 2026 GMT
Not After : Oct 28 04:46:25 2026 GMT
Subject: CN=6adedb21-bd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:a9:f9:16:fc:e1:6b:97:11:c0:70:25:cd:
2b:f8:5a:30:af:cd:d9:92:60:87:2e:5c:8e:30:70:
32:b2:be:cf:f1:ec:11:03:55:73:da:15:d1:25:35:
1d:b2:3b:56:97:6e:a5:fb:12:f3:6f:61:b5:ec:92:
32:31:14:31:35:dd:24:f3:6e:26:5f:e6:d9:5c:a7:
0a:4c:b8:54:5d:68:b6:3f:7e:6f:a2:57:16:2c:a7:
be:f3:08:57:ef:fe:0a:ee:0c:2c:5b:4c:00:1d:e1:
cb:7e:0d:7e:1c:3a:06:67:c2:87:de:80:72:02:42:
52:7f:2d:a1:0d:ac:34:bd:b0:ec:23:7f:a2:22:e7:
a0:0d:d9:d9:cf:0b:d6:6b:72:e2:94:4d:ca:4b:80:
93:4b:a9:5f:aa:0e:86:37:e4:97:a2:40:38:41:9b:
a0:2d:8c:51:1b:82:b8:f0:cb:38:b1:94:d6:74:85:
05:98:75:64:92:6a:e0:24:ea:ea:5b:01:1d:a2:49:
37:0f:66:36:a1:ed:84:40:06:c5:ef:9b:cb:7e:53:
e1:33:c9:38:75:cd:71:2f:fa:0f:4a:2e:75:9c:41:
2a:6b:ab:ed:e9:b9:39:a7:73:9a:83:c0:ab:d6:cf:
14:dd:66:be:a7:74:f0:6b:e9:c4:cd:1d:b2:f8:7e:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:EF:4B:20:B0:E7:11:7E:38:8F:F4:79:8D:54:4F:BF:F3:79:E6
X509v3 Authority Key Identifier:
keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:9d:bb:14:5d:6d:6d:5f:6b:a3:81:80:d7:9f:bf:27:80:
d1:9d:2f:f6:47:db:2d:ed:88:9d:63:6a:04:b8:5c:2d:cb:e7:
14:de:a6:92:7b:53:34:34:32:dd:c5:bb:67:ec:58:e6:31:5b:
10:6b:54:f7:22:62:52:91:cb:31:2f:28:22:f4:11:aa:07:2a:
a1:78:9e:e4:03:63:8e:39:48:b8:25:10:37:14:e1:41:d8:ad:
80:d8:42:5f:5f:6f:19:57:7d:7e:a3:00:ec:94:20:72:0f:2c:
b8:30:94:64:5c:05:c7:e2:55:b9:a9:d6:0a:7c:8f:91:7f:4c:
7c:c0:14:1c:5b:d1:b6:f8:af:0d:e1:7e:08:c7:e8:6c:a9:0b:
2f:c7:3e:8a:8f:75:9e:b4:94:f7:ba:ee:95:6e:02:33:ee:32:
77:a4:ec:d0:f7:4b:95:01:23:12:40:24:1f:f8:2a:37:62:54:
29:f5:50:ea:42:fe:c4:73:e1:bf:2e:0c:e2:b0:51:bf:a6:d1:
37:b8:5a:02:4d:a1:c1:92:d8:c8:67:04:37:ae:9f:43:45:a8:
4d:81:4b:15:75:d6:c3:96:9d:c3:6e:20:31:26:02:fd:71:49:
58:39:e2:49:cd:59:22:c5:e5:46:75:f7:d1:e1:b9:ad:97:27:
9b:2a:d7:e3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICApIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxM0ZBRjExMC8GA1UEBRMoQzQ0RUUyOTlBRjU4QjFDQkY0NkJEMUQyMEZDN0RD
RDk3QzZBNTc2ODAeFw0yNjEwMjYwNDQ2MjVaFw0yNjEwMjgwNDQ2MjVaMBgxFjAU
BgNVBAMTDTZhZGVkYjIxLWJkNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKlqn5Fvzha5cRwHAlzSv4WjCvzdmSYIcuXI4wcDKyvs/x7BEDVXPaFdEl
NR2yO1aXbqX7EvNvYbXskjIxFDE13STzbiZf5tlcpwpMuFRdaLY/fm+iVxYsp77z
CFfv/gruDCxbTAAd4ct+DX4cOgZnwofegHICQlJ/LaENrDS9sOwjf6Ii56AN2dnP
C9ZrcuKUTcpLgJNLqV+qDoY35JeiQDhBm6AtjFEbgrjwyzixlNZ0hQWYdWSSauAk
6upbAR2iSTcPZjah7YRABsXvm8t+U+EzyTh1zXEv+g9KLnWcQSprq+3puTmnc5qD
wKvWzxTdZr6ndPBr6cTNHbL4fojTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyDTv
SyCw5xF+OI/0eY1UT7/zeeYwHwYDVR0jBBgwFoAUxE7ima9Yscv0a9HSD8fc2Xxq
V2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MTNGL0VGRDc5RUQyRDMzOTExRUZCMjZBRDdCMzc2MkU5NTFBL3hFN2lt
YTlZc2N2MGE5SFNEOGZjMlh4cVYyZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hFN2ltYTlZc2N2MGE5SFNEOGZjMlh4cVYyZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQxM0YvRUZENzlFRDJEMzM5MTFFRkIyNkFEN0IzNzYy
RTk1MUEveEU3aW1hOVlzY3YwYTlIU0Q4ZmMyWHhxVjJnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALl527FF1tbV9ro4GA15+/J4DRnS/2
R9st7YidY2oEuFwty+cU3qaSe1M0NDLdxbtn7FjmMVsQa1T3ImJSkcsxLygi9BGq
ByqheJ7kA2OOOUi4JRA3FOFB2K2A2EJfX28ZV31+owDslCByDyy4MJRkXAXH4lW5
qdYKfI+Rf0x8wBQcW9G2+K8N4X4Ix+hsqQsvxz6Kj3WetJT3uu6VbgIz7jJ3pOzQ
90uVASMSQCQf+Co3YlQp9VDqQv7Ec+G/LgzisFG/ptE3uFoCTaHBktjIZwQ3rp9D
RahNgUsVddbDlp3DbiAxJgL9cUlYOeJJzVkixeVGdffR4bmtlyebKtfj
-----END CERTIFICATE-----
Generated at Mon Oct 26 18:17:35 2026 by rpki-client