
Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
File: 60qJySS6F_Dpu5lYNPUjWoYZtHE.mft (raw, json)
Hash identifier: xqmLbiYREk1IBirXoudc8N1ELxq8qdtShlOqp6qP80s=
Subject key identifier: C1:38:60:2F:B4:7A:F5:67:8B:38:D1:82:DA:42:F1:AC:32:09:05:BE
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Certificate issuer: /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial: 01EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
Manifest number: 01DF
Signing time: Thu 29 Oct 2026 05:01:12 +0000
Manifest this update: Thu 29 Oct 2026 05:01:11 +0000
Manifest next update: Sat 31 Oct 2026 05:01:11 +0000
Files and hashes: 1: 60qJySS6F_Dpu5lYNPUjWoYZtHE.crl (hash: NWLdspcbk77riiHki744V37sNAUFsrH4YUHvFxC8oQ4=)
2: CDDD6EBC9FA511F18196C91DCF1D38B0.roa (hash: xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=)
3: 20630D049FA611F1995C501ECF1D38B0.roa (hash: JhYhKmI5GODnNurventhICsk25X3A9B8WorGrCRrC2c=)
4: FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (hash: g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=)
5: B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (hash: oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=)
6: 129948809FA811F1A7EF49ACCE1D38B0.roa (hash: N4nEZtBTkM1SOciV0TfCwkWUPzDRHw09DLkdtyiUNio=)
7: 689BCBC49FA611F18785A4A3CE1D38B0.roa (hash: GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=)
8: BAF999E69FA611F1A500E1A3CE1D38B0.roa (hash: aV9FiklXCd8gQFnELSpe+SYak8Dl2un61ShGI8iNFrs=)
9: 443868DC9FA611F19908A5A1CE1D38B0.roa (hash: C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=)
10: B2FE915A9FA711F1806425ACCE1D38B0.roa (hash: sSgssLn1kZB+wHJmWWTYjTwP+BvQpVgLL7TDV51d7qo=)
11: 950608329FA611F184EBCDA3CE1D38B0.roa (hash: NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 31 Oct 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Validity
Not Before: Oct 29 05:01:11 2026 GMT
Not After : Oct 31 05:01:11 2026 GMT
Subject: CN=6ae2d318-9011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:62:19:8b:18:9c:50:21:1c:95:32:f5:3b:
f2:5e:e1:1e:da:74:b1:dd:9b:a3:65:fd:72:b7:cf:
5f:79:e9:48:cb:00:bf:ca:34:8d:74:42:2e:f7:15:
65:41:ee:db:83:8e:20:3d:3b:91:68:9d:6f:47:16:
74:33:08:60:c9:d6:e8:f7:03:38:59:56:89:52:97:
d1:1d:13:a6:dc:79:c0:c4:b0:52:34:32:2c:09:fd:
b8:a5:c3:b1:7b:52:99:16:b9:9d:a5:53:ef:69:84:
82:85:b6:f1:68:84:3a:aa:2d:01:ae:c9:97:93:0c:
a5:db:e3:8c:42:7e:08:53:88:b5:76:9f:3b:e4:29:
13:63:43:a1:df:0e:0e:c8:be:59:56:8e:eb:40:f2:
ef:7d:fc:00:ab:a1:28:fa:32:05:03:1c:f0:a8:2f:
2a:b7:58:5e:ce:51:8d:47:3f:bd:ed:3a:a7:9f:1c:
d2:58:46:0a:42:d7:74:8e:d2:33:fc:f9:03:75:03:
46:39:32:7d:c5:ad:16:f5:7f:14:d3:52:ed:8a:2a:
52:76:ea:d8:26:9d:a2:19:2e:d1:7c:ab:15:09:23:
fb:80:86:58:48:ae:f1:74:8e:4e:c2:e8:d8:86:c5:
20:9e:ef:81:8b:45:14:18:bb:f8:43:25:af:ba:dc:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:60:2F:B4:7A:F5:67:8B:38:D1:82:DA:42:F1:AC:32:09:05:BE
X509v3 Authority Key Identifier:
keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:96:0f:45:a6:9b:b9:ee:38:df:09:80:59:3d:9f:4e:3b:
01:f5:d4:a3:0f:b3:93:0f:da:d2:92:f5:67:44:95:9b:e5:5b:
f1:e2:7b:8c:9f:25:1d:03:7d:2c:81:01:5e:6e:18:67:cb:9b:
17:10:5f:62:bb:5a:51:ac:68:10:db:84:b8:d1:98:e6:7c:6d:
e3:52:3d:d2:04:94:81:d1:16:f8:fb:ed:be:f1:52:df:6d:a0:
15:db:58:d6:d3:65:cd:de:75:99:c0:e7:a6:04:6e:72:a8:52:
f0:d0:a3:8c:11:7f:78:d3:aa:3f:2d:56:5e:5f:f2:cc:e2:c6:
67:57:c3:87:59:1a:70:d2:4b:27:f1:a1:88:8f:60:99:3b:13:
97:28:0f:3f:d0:32:b4:de:f9:b1:f8:e3:36:6f:4a:04:68:cb:
5a:94:13:8c:e8:d2:ca:f1:cf:c2:8e:96:f7:cf:67:f1:d5:3b:
c6:df:7a:ad:ef:ca:61:49:d6:77:62:21:1a:88:fd:bf:ea:db:
dc:31:a4:6f:0a:cf:46:e0:b8:60:3c:bd:56:9b:d3:0e:6d:ef:
d1:99:e4:da:5a:be:8c:99:b6:41:52:79:05:c3:ad:01:97:08:
a7:ba:01:b9:c2:79:41:99:30:ef:51:ee:4c:54:b4:19:a1:23:
9b:fe:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:02 2026 by rpki-client