
Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File: wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier: Edjrf1wKQt/wZGCQia1fZarTOrISkkQ9S5QXmhJIhio=
Subject key identifier: 26:9B:02:BB:68:BC:B8:6A:5B:0D:16:2F:3F:ED:B1:B4:6F:B5:15:DA
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer: /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial: 0123
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number: 011F
Signing time: Thu 10 Sep 2026 05:16:29 +0000
Manifest this update: Thu 10 Sep 2026 05:16:28 +0000
Manifest next update: Sat 12 Sep 2026 05:16:28 +0000
Files and hashes: 1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: 58Wl9SQhsgSANnu3/xmG9UsB3DyPLfu4XbGAM4xayuY=)
2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Validity
Not Before: Sep 10 05:16:28 2026 GMT
Not After : Sep 12 05:16:28 2026 GMT
Subject: CN=6aa23d2d-9f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:66:70:19:c0:3e:e8:97:c4:89:ed:af:ee:
51:4a:58:ef:b3:07:06:54:af:3c:35:55:38:b5:ec:
e8:2d:0f:a8:64:e4:a3:c9:8d:f5:b7:3d:ed:11:20:
75:3e:cb:07:c9:9f:c5:80:1f:4e:ae:22:65:a5:68:
c2:9f:49:09:e5:8d:10:2d:72:16:f1:f1:6a:ef:99:
3f:9f:83:d4:da:de:82:a1:ef:9f:21:14:0d:f3:c7:
ee:ca:5a:0d:8d:c4:cf:a4:bd:57:24:27:55:0d:3d:
ca:e8:77:b2:ef:d6:dc:0b:c1:ca:f0:ca:4d:b1:65:
07:7d:11:5c:64:c0:53:ab:8e:1f:53:26:47:e4:28:
2c:68:9a:e9:f8:5c:5d:54:5e:3d:60:b0:0d:95:b2:
37:82:01:9c:ef:f2:0e:eb:46:db:a9:5a:7c:05:9a:
3b:64:e3:4a:7d:f7:24:be:f6:a5:38:24:5f:c6:a0:
1a:1f:56:9e:c3:99:a5:cf:2c:01:bf:09:dd:93:f6:
5f:8b:b9:65:7c:d9:f0:5e:b4:a3:50:9f:5f:d4:13:
b9:49:25:43:56:3b:db:42:58:f9:df:3f:66:7a:95:
d8:22:d5:b5:5c:a3:38:c0:5a:2f:ab:10:92:ce:c5:
16:fc:4c:6f:95:3e:36:40:f2:b2:4c:38:87:07:df:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:02:BB:68:BC:B8:6A:5B:0D:16:2F:3F:ED:B1:B4:6F:B5:15:DA
X509v3 Authority Key Identifier:
keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:60:4b:ca:d5:e4:5b:5b:e4:5c:e7:8f:c0:e2:7c:33:a2:
bf:fc:90:eb:f2:e6:af:aa:85:7b:59:57:10:f2:fd:d9:ac:5b:
28:bf:13:85:07:f7:f0:b5:e8:7b:32:b7:76:de:a4:1d:09:00:
6b:c4:0f:cd:2a:7f:6d:df:eb:14:1a:83:62:cb:f9:fe:19:4e:
b7:51:24:f9:d7:b3:5d:03:71:01:bc:40:be:21:8b:34:74:8c:
4b:50:51:e2:76:3d:93:d6:bd:eb:ee:f0:50:d7:9e:29:a5:9b:
1e:f9:4f:a9:8a:ea:ee:42:22:39:7a:0f:54:39:9d:57:2c:27:
23:06:15:90:ce:ea:30:0c:ac:d2:60:7f:a0:16:a7:dd:59:b9:
2a:a2:c1:2b:c4:de:87:83:1a:6b:fc:0d:cd:e5:8a:28:0c:1f:
e8:04:d1:5c:5f:38:ee:ce:e3:0e:a1:20:96:36:b7:b3:09:7c:
4b:b4:ec:a9:a8:61:32:f0:c2:f9:5e:40:a3:40:9a:b9:16:54:
31:ae:9d:e0:52:96:73:4d:d7:57:04:3b:93:ae:73:ea:f0:b7:
2e:aa:a7:e0:53:73:22:55:0a:30:f9:e5:a7:fb:5d:ec:d5:11:
ad:24:aa:c5:00:b8:18:65:a7:fa:e0:dc:9a:25:12:35:69:d0:
f3:e8:7a:41
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTZFQTBSSTExMC8GA1UEBRMoQzAzQjc4NjJFNDQxQjAwMkUxMDlFOEJCN0JBQzI4
RkFFRDk3OTc0RjAeFw0yNjA5MTAwNTE2MjhaFw0yNjA5MTIwNTE2MjhaMBgxFjAU
BgNVBAMTDTZhYTIzZDJkLTlmODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoZGZwGcA+6JfEie2v7lFKWO+zBwZUrzw1VTi17OgtD6hk5KPJjfW3Pe0R
IHU+ywfJn8WAH06uImWlaMKfSQnljRAtchbx8WrvmT+fg9Ta3oKh758hFA3zx+7K
Wg2NxM+kvVckJ1UNPcrod7Lv1twLwcrwyk2xZQd9EVxkwFOrjh9TJkfkKCxomun4
XF1UXj1gsA2VsjeCAZzv8g7rRtupWnwFmjtk40p99yS+9qU4JF/GoBofVp7DmaXP
LAG/Cd2T9l+LuWV82fBetKNQn1/UE7lJJUNWO9tCWPnfP2Z6ldgi1bVcozjAWi+r
EJLOxRb8TG+VPjZA8rJMOIcH35AfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJpsC
u2i8uGpbDRYvP+2xtG+1FdowHwYDVR0jBBgwFoAUwDt4YuRBsALhCei7e6wo+u2X
l08wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE2RUEwLzQ2NUE0QjdFRDBGNTExRjBBODExMUY4NURBRTRFQzlDL3dEdDRZ
dVJCc0FMaENlaTdlNndvLXUyWGwwOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L3dEdDRZdVJCc0FMaENlaTdlNndvLXUyWGwwOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTZFQTAvNDY1QTRCN0VEMEY1MTFGMEE4MTExRjg1REFFNEVD
OUMvd0R0NFl1UkJzQUxoQ2VpN2U2d28tdTJYbDA4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFfGBLytXkW1vkXOePwOJ8M6K//JDr8uav
qoV7WVcQ8v3ZrFsovxOFB/fwteh7Mrd23qQdCQBrxA/NKn9t3+sUGoNiy/n+GU63
UST517NdA3EBvEC+IYs0dIxLUFHidj2T1r3r7vBQ154ppZse+U+piuruQiI5eg9U
OZ1XLCcjBhWQzuowDKzSYH+gFqfdWbkqosErxN6Hgxpr/A3N5YooDB/oBNFcXzju
zuMOoSCWNrezCXxLtOypqGEy8ML5XkCjQJq5FlQxrp3gUpZzTddXBDuTrnPq8Lcu
qqfgU3MiVQow+eWn+13s1RGtJKrFALgYZaf64NyaJRI1adDz6HpB
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:18 2026 by rpki-client