
Error: rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier: HOWB/xk1EcbsdCWhKWExGfWu/xDlY4kzSRqKNR1RZ1I=
Subject key identifier: D6:87:57:A4:0C:34:EE:DA:61:F4:80:84:43:2A:2D:8C:D8:3E:65:D7
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 0510
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number: 0500
Signing time: Sun 25 Oct 2026 03:29:12 +0000
Manifest this update: Sun 25 Oct 2026 03:29:11 +0000
Manifest next update: Tue 27 Oct 2026 03:29:11 +0000
Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 5i8wkszijiWDhWPfKxn9rdH7Il4tDj0o24enwiEM0Ls=)
2: DEAA31D852A411F19BAFC4E7CE1D38B0.roa (hash: NlGJ9Fu2KD7bBdpzwrMNS3dq9S7KYOxVJin74O+cf6Q=)
3: 6755753852A511F18B0707EACE1D38B0.roa (hash: nzSoNfGbTsEtiebZovzm8gDKi70ZiKZA1QZGabI/6uw=)
4: 3CD2137A52A511F188ADFFE9CE1D38B0.roa (hash: evhWeXQLaV4zwXSsmlcLuOv+UAoeBUgww23rfwSfng4=)
5: 0E6074FA52A511F187479FE9CE1D38B0.roa (hash: qmsm209xtAFWImZocN27LMHqGAIJP4T5JyMpaW7qQDU=)
6: 3AD17B4852A411F18433B2E3CE1D38B0.roa (hash: oaElfRftqLvCyVv+pEr2pAOJ1u5zOSHWd0gK4S3VFZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Oct 25 03:29:11 2026 GMT
Not After : Oct 27 03:29:11 2026 GMT
Subject: CN=6add7788-1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:68:d8:61:da:9f:ed:87:fb:2a:fd:f2:92:
26:b9:78:a9:b7:6f:a2:62:42:30:dd:81:2c:8a:ff:
26:86:0e:3a:07:bd:a1:8f:e3:89:44:47:75:16:7b:
d6:01:cb:02:ae:4e:dc:fc:17:79:af:65:f7:73:2f:
f7:ec:af:df:72:bc:1b:73:2f:8d:fb:cb:28:45:1b:
37:44:5a:69:99:79:1e:93:1e:64:f3:e0:4e:81:bb:
d5:7e:e1:a3:a9:b1:46:c7:f1:9a:c5:9d:fe:a3:c5:
6a:5d:ba:d9:cd:46:e0:e2:b3:7a:0e:89:09:bc:b0:
98:14:eb:95:e5:69:cf:d7:63:04:36:3d:49:7d:be:
bd:92:20:4b:af:fe:cd:18:53:8f:ab:f0:92:00:cc:
f3:16:d5:db:30:3d:c2:28:fa:be:d4:6f:ec:7c:70:
07:66:71:2e:28:6e:8d:b6:8e:2a:3a:fd:cc:c9:bf:
71:28:bc:de:5b:0b:27:c8:33:93:86:74:af:5c:dc:
ef:03:fa:23:18:88:51:65:9e:09:12:13:c4:9d:20:
21:f5:13:52:8b:1d:80:91:b0:60:6c:6f:a5:f5:9d:
78:86:b4:ca:b7:9e:bf:a2:3c:a8:66:6d:31:e1:57:
c1:9d:99:e5:2e:f3:07:ec:9a:1d:d8:67:90:9d:01:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:57:A4:0C:34:EE:DA:61:F4:80:84:43:2A:2D:8C:D8:3E:65:D7
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6d:e8:1d:32:ff:a8:a3:bf:f8:91:27:c6:be:ea:d1:af:7d:
0e:20:81:86:5c:c7:35:71:05:c7:3e:67:bb:52:9d:a9:03:8a:
a1:de:bf:ac:65:15:dc:7e:7c:67:05:07:e0:0a:d5:f0:88:51:
10:c2:18:37:09:f6:d9:db:49:66:2b:c0:11:f8:21:b9:69:2d:
04:ad:6a:e3:7c:8c:dd:7f:6e:82:f8:26:45:ca:3e:ba:b9:ae:
1b:e2:ae:65:3b:53:a8:1c:ad:ac:64:3b:3e:0d:52:b0:2a:7f:
f3:59:a3:a9:4e:5d:04:26:01:9a:e0:23:09:2c:fb:43:94:97:
0c:7f:d2:e1:d0:20:11:8a:77:00:f0:68:cb:12:e9:8d:ce:fe:
5a:54:84:a1:cd:ad:a2:1a:ca:a6:91:33:77:d7:11:15:3f:b8:
d7:73:ce:f1:e5:88:e3:47:f1:50:a1:53:e1:c1:cc:da:66:6a:
d4:ab:00:b0:df:67:80:b8:7f:45:bc:9c:5f:e0:bb:7c:e1:2b:
55:e9:97:b1:59:8f:f8:a3:c7:39:63:4a:90:5f:f2:3b:6e:a7:
f8:c1:6a:c7:78:d7:95:5a:36:fb:ad:dd:9a:27:ca:55:0c:7a:
88:e2:d6:89:16:0f:6a:88:0d:9f:36:75:ec:d5:2e:9f:3e:b9:
e0:56:6d:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxQTBBRjExMC8GA1UEBRMoNUYyMjhDNDZCRUYyQjRDQkE5NENCMjlGMTBDMzY4
MEVFMjg4M0RCMzAeFw0yNjEwMjUwMzI5MTFaFw0yNjEwMjcwMzI5MTFaMBgxFjAU
BgNVBAMTDTZhZGQ3Nzg4LTE0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIPGjYYdqf7Yf7Kv3ykia5eKm3b6JiQjDdgSyK/yaGDjoHvaGP44lER3UW
e9YBywKuTtz8F3mvZfdzL/fsr99yvBtzL437yyhFGzdEWmmZeR6THmTz4E6Bu9V+
4aOpsUbH8ZrFnf6jxWpdutnNRuDis3oOiQm8sJgU65Xlac/XYwQ2PUl9vr2SIEuv
/s0YU4+r8JIAzPMW1dswPcIo+r7Ub+x8cAdmcS4obo22jio6/czJv3EovN5bCyfI
M5OGdK9c3O8D+iMYiFFlngkSE8SdICH1E1KLHYCRsGBsb6X1nXiGtMq3nr+iPKhm
bTHhV8GdmeUu8wfsmh3YZ5CdASeRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1odX
pAw07tph9ICEQyotjNg+ZdcwHwYDVR0jBBgwFoAUXyKMRr7ytMupTLKfEMNoDuKI
PbMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MUEwL0YwNjNDRTMyMEE5NzExRUVCOUI0MjUyMzRBRDlFNkZDL1h5S01S
cjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h5S01Scjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFE
OUU2RkMvWHlLTVJyN3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClbegdMv+oo7/4kSfGvurRr30OIIGG
XMc1cQXHPme7Up2pA4qh3r+sZRXcfnxnBQfgCtXwiFEQwhg3CfbZ20lmK8AR+CG5
aS0ErWrjfIzdf26C+CZFyj66ua4b4q5lO1OoHK2sZDs+DVKwKn/zWaOpTl0EJgGa
4CMJLPtDlJcMf9Lh0CARincA8GjLEumNzv5aVIShza2iGsqmkTN31xEVP7jXc87x
5YjjR/FQoVPhwczaZmrUqwCw32eAuH9FvJxf4Lt84StV6ZexWY/4o8c5Y0qQX/I7
bqf4wWrHeNeVWjb7rd2aJ8pVDHqI4taJFg9qiA2fNnXs1S6fPrngVm2k
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:54 2026 by rpki-client