
Error: rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File: KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier: hiwLY0EZia4An+mdJMkAgZ2/bykL7GhbhoSZ3zezqp8=
Subject key identifier: EC:B1:E9:58:2B:96:A9:5D:8D:23:B4:30:A1:11:5D:AF:1C:50:42:0F
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer: /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial: 0F06
Authority info access: rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number: 0F03
Signing time: Thu 10 Sep 2026 01:01:14 +0000
Manifest this update: Thu 10 Sep 2026 01:01:13 +0000
Manifest next update: Sat 12 Sep 2026 01:01:13 +0000
Files and hashes: 1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: Daj84pvrlhLmsa7DkpL0QcAm0sbp9+Y19jv1iBFXXWw=)
2: EA4F7EFAD9A811F08C56B58CDAE4EC9C.roa (hash: KJfS72R5iuz5xs0eftrag9nUHdu8fHWjhJvFlKIOLa0=)
3: 2A59319ED9A911F084AC988EDAE4EC9C.roa (hash: ZE/AMuFDnqEMdF+m9bTrDEG8cxJJ5piRwX5injKhwic=)
4: 099F7328D9A911F096B18E8EDAE4EC9C.roa (hash: vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3846 (0xf06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Validity
Not Before: Sep 10 01:01:13 2026 GMT
Not After : Sep 12 01:01:13 2026 GMT
Subject: CN=6aa2015a-b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:e3:de:6c:ca:01:05:33:e8:0c:e6:75:dd:
dd:24:53:d0:c4:d9:9b:86:41:e7:ab:cb:86:90:c8:
b7:02:08:c4:66:0f:cb:ec:51:1e:84:a9:69:e1:f8:
f2:c3:6d:d3:ad:f2:5f:05:11:1d:08:df:af:72:6c:
60:dd:5a:10:0a:7f:45:a0:6a:2a:69:49:d2:9c:92:
0b:21:08:66:ec:2a:dc:72:6b:c1:b1:12:45:cf:3f:
d0:65:d2:1e:74:63:f2:12:be:cc:31:74:a3:32:91:
d5:72:8c:ca:d0:2b:3e:a1:fa:4d:3b:68:1f:b4:ce:
68:9b:69:d7:20:83:a8:4d:ac:52:3b:d4:51:1b:80:
26:65:2e:83:a5:c1:df:6f:58:87:cc:98:a0:8d:f8:
a1:88:0d:6f:5f:5d:65:44:b9:1c:2c:2b:46:3c:24:
0e:79:83:65:f0:bf:14:67:2d:e2:38:e6:cb:4f:fb:
c5:08:41:f7:f4:1e:c5:af:db:ad:1a:55:a9:50:e9:
41:36:1a:8a:64:f6:2a:0a:1b:7b:db:51:21:45:7c:
6c:50:03:5b:9c:61:4a:88:7c:12:ce:37:e5:54:22:
20:92:fd:bf:9d:65:b5:b9:f8:61:dd:75:61:2e:c7:
6e:cf:63:e8:c9:2f:73:94:3d:7b:9c:01:50:93:b7:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:E9:58:2B:96:A9:5D:8D:23:B4:30:A1:11:5D:AF:1C:50:42:0F
X509v3 Authority Key Identifier:
keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:5b:39:68:7c:22:9b:c2:89:34:1c:6b:b9:92:fb:d6:69:
81:de:89:ad:e7:2c:4f:da:1a:93:f4:e6:ae:a7:ba:b8:14:78:
f8:db:f1:12:2d:1f:f3:5f:f6:b6:9a:7e:1e:21:3a:bc:4f:15:
32:58:b1:4e:9a:35:41:1e:57:47:01:1e:85:b0:e7:b5:a3:28:
0a:e8:cb:26:56:9f:a5:86:e6:7f:ed:dc:db:64:ff:91:68:0f:
78:fd:89:76:2f:1d:97:2e:36:47:83:99:d6:88:f8:b0:f0:a1:
dc:36:4a:50:29:43:c2:0c:de:29:c9:a1:3a:88:0f:3a:ed:b2:
a6:96:ea:14:87:7d:9d:b3:19:62:36:26:cc:29:5f:2b:29:d8:
50:c3:41:fa:cd:7c:5e:a5:0f:cf:ec:8a:42:b9:9b:6c:b6:cb:
3e:22:ac:f1:0d:9d:a8:f9:d6:99:e7:9b:53:c1:94:23:ee:58:
e0:23:f4:a6:f6:91:36:d2:2b:00:6c:42:92:57:d5:17:c0:3f:
ca:9b:8f:8e:0a:f0:17:09:ac:5c:c0:1f:de:f2:15:52:cf:3e:
3d:b0:19:58:45:6f:5c:27:ce:75:e9:db:67:27:d1:a5:bf:40:
2a:93:69:bd:1d:e8:41:ae:40:ea:89:b5:9b:62:d9:af:69:ac:
2e:ec:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:09 2026 by rpki-client