
Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
File: 60qJySS6F_Dpu5lYNPUjWoYZtHE.mft (raw, json)
Hash identifier: hZrvQAhgVIoH+/x+aDbNqjMSmSp3LS6AJqSi3C92mr0=
Subject key identifier: A9:CA:F9:38:79:01:EF:79:4D:4B:FE:CF:11:C1:B4:8C:8D:77:45:F4
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Certificate issuer: /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial: 01EA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
Manifest number: 01DE
Signing time: Wed 28 Oct 2026 05:01:55 +0000
Manifest this update: Wed 28 Oct 2026 05:01:54 +0000
Manifest next update: Fri 30 Oct 2026 05:01:54 +0000
Files and hashes: 1: 60qJySS6F_Dpu5lYNPUjWoYZtHE.crl (hash: MfG+Eh0p/x0rWyUMJ6I/TieH99JzNYzCcqUNrlqIMSc=)
2: CDDD6EBC9FA511F18196C91DCF1D38B0.roa (hash: xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=)
3: 20630D049FA611F1995C501ECF1D38B0.roa (hash: JhYhKmI5GODnNurventhICsk25X3A9B8WorGrCRrC2c=)
4: FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (hash: g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=)
5: B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (hash: oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=)
6: 129948809FA811F1A7EF49ACCE1D38B0.roa (hash: N4nEZtBTkM1SOciV0TfCwkWUPzDRHw09DLkdtyiUNio=)
7: 689BCBC49FA611F18785A4A3CE1D38B0.roa (hash: GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=)
8: BAF999E69FA611F1A500E1A3CE1D38B0.roa (hash: aV9FiklXCd8gQFnELSpe+SYak8Dl2un61ShGI8iNFrs=)
9: 443868DC9FA611F19908A5A1CE1D38B0.roa (hash: C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=)
10: B2FE915A9FA711F1806425ACCE1D38B0.roa (hash: sSgssLn1kZB+wHJmWWTYjTwP+BvQpVgLL7TDV51d7qo=)
11: 950608329FA611F184EBCDA3CE1D38B0.roa (hash: NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 05:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Validity
Not Before: Oct 28 05:01:54 2026 GMT
Not After : Oct 30 05:01:54 2026 GMT
Subject: CN=6ae181c2-667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:ea:cc:9f:19:45:f4:77:74:78:9d:bd:e3:
c1:8e:9e:cc:1c:ad:64:95:e5:51:08:b7:16:f1:cb:
6c:c2:f4:87:16:38:bd:a2:9f:ca:0d:f9:87:0c:41:
ab:e5:35:26:0f:50:f1:f6:e7:86:f9:fe:1c:1d:20:
3b:eb:f1:a5:ff:67:eb:35:12:92:64:90:0a:4f:ba:
55:14:07:41:e8:78:a7:67:72:6b:94:3a:0a:2f:b1:
27:94:51:6d:8a:03:fc:b2:86:f4:03:36:df:f4:72:
0b:20:d8:f6:9d:6a:a3:78:14:38:c6:74:76:b2:c7:
4e:8b:6a:be:e0:7d:ee:60:4f:e7:d8:96:f6:4a:75:
16:67:bb:7f:5c:a9:9f:ff:e1:ae:c0:1d:6b:78:16:
36:ba:62:26:2b:d2:18:1b:e8:43:1d:e2:79:07:05:
ad:78:7f:be:db:97:b3:b7:24:96:d4:66:57:c6:96:
57:1f:69:6b:0d:07:5e:c9:7e:3a:a1:ae:f3:06:2b:
5a:1f:f8:a8:df:ea:53:a2:51:43:1e:ca:01:72:6a:
87:51:9f:5d:fd:95:b6:43:2b:39:6d:53:7f:a2:f1:
af:8a:7d:83:89:24:13:21:93:66:d0:fa:39:ca:e1:
0b:71:c7:d4:b4:4f:9c:35:4a:f1:ea:66:37:a6:7e:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:F9:38:79:01:EF:79:4D:4B:FE:CF:11:C1:B4:8C:8D:77:45:F4
X509v3 Authority Key Identifier:
keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:da:b5:79:c2:5d:8a:5e:a1:cb:6b:d7:e4:d8:b7:66:a3:c6:
48:ee:2f:98:12:17:82:42:0a:fb:ef:03:84:4c:99:ae:79:9d:
bf:7e:b3:dd:f1:98:77:09:25:c0:3e:d3:75:91:4c:aa:1b:0b:
6f:79:37:71:1e:ad:4e:19:40:78:dd:98:d1:87:0b:3d:21:c3:
f8:08:c0:2b:33:34:03:f2:74:5f:e8:d8:e8:dc:60:a5:d9:4a:
9b:75:58:55:52:d1:40:c7:65:00:16:a9:5e:f2:10:18:44:aa:
09:a9:c3:fe:11:19:b2:04:e4:1e:1d:5e:56:13:83:4c:b1:f7:
e7:e9:57:d3:cd:bd:bf:61:a0:3d:ac:d0:24:6e:0a:67:10:78:
de:75:ef:38:47:34:7e:cd:cd:63:c2:09:1d:2f:89:bc:ab:f6:
ab:ee:54:84:4f:1f:fc:e2:02:82:c6:54:4f:07:b4:59:4a:2f:
59:1f:a0:60:3f:89:a6:98:53:11:a8:47:e7:59:b1:2a:6e:46:
da:cb:a9:9b:10:dd:e4:a1:35:c5:cf:ea:75:77:94:ba:84:d6:
58:1b:33:b8:dd:80:2c:c5:c8:76:57:e9:4c:08:5d:e4:8c:b5:
05:c9:32:a5:d6:a2:78:6d:f8:0f:0e:98:47:0f:ca:4d:65:91:
a1:b9:21:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAeowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjVFRTdBRjExMC8GA1UEBRMoRUI0QTg5QzkyNEJBMTdGMEU5QkI5OTU4MzRGNTIz
NUE4NjE5QjQ3MTAeFw0yNjEwMjgwNTAxNTRaFw0yNjEwMzAwNTAxNTRaMBgxFjAU
BgNVBAMTDTZhZTE4MWMyLTY2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1BerMnxlF9Hd0eJ2948GOnswcrWSV5VEItxbxy2zC9IcWOL2in8oN+YcM
QavlNSYPUPH254b5/hwdIDvr8aX/Z+s1EpJkkApPulUUB0HoeKdncmuUOgovsSeU
UW2KA/yyhvQDNt/0cgsg2PadaqN4FDjGdHayx06Lar7gfe5gT+fYlvZKdRZnu39c
qZ//4a7AHWt4Fja6YiYr0hgb6EMd4nkHBa14f77bl7O3JJbUZlfGllcfaWsNB17J
fjqhrvMGK1of+Kjf6lOiUUMeygFyaodRn139lbZDKzltU3+i8a+KfYOJJBMhk2bQ
+jnK4Qtxx9S0T5w1SvHqZjemfi4FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqcr5
OHkB73lNS/7PEcG0jI13RfQwHwYDVR0jBBgwFoAU60qJySS6F/Dpu5lYNPUjWoYZ
tHEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1RUU3LzE1Q0I5NERDNkI5MTExRjA4NkVBOEQ4NURBRTRFQzlDLzYwcUp5
U1M2Rl9EcHU1bFlOUFVqV29ZWnRIRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzYwcUp5U1M2Rl9EcHU1bFlOUFVqV29ZWnRIRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjVFRTcvMTVDQjk0REM2QjkxMTFGMDg2RUE4RDg1REFF
NEVDOUMvNjBxSnlTUzZGX0RwdTVsWU5QVWpXb1ladEhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp2rV5wl2KXqHLa9fk2Ldmo8ZI7i+Y
EheCQgr77wOETJmueZ2/frPd8Zh3CSXAPtN1kUyqGwtveTdxHq1OGUB43ZjRhws9
IcP4CMArMzQD8nRf6Njo3GCl2UqbdVhVUtFAx2UAFqle8hAYRKoJqcP+ERmyBOQe
HV5WE4NMsffn6VfTzb2/YaA9rNAkbgpnEHjede84RzR+zc1jwgkdL4m8q/ar7lSE
Tx/84gKCxlRPB7RZSi9ZH6BgP4mmmFMRqEfnWbEqbkbay6mbEN3koTXFz+p1d5S6
hNZYGzO43YAsxch2V+lMCF3kjLUFyTKl1qJ4bfgPDphHD8pNZZGhuSHq
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:54:16 2026 by rpki-client