
Error: rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
File: f5DbGDX56nljonlPXDJUNY30PvQ.mft (raw, json)
Hash identifier: Y54A1T7S9olJQuuRwR8qMfKqo1lXx9AqIB6Ee2VwPlw=
Subject key identifier: 84:A7:18:7D:4B:FC:B9:3E:38:85:C4:51:BF:59:BE:A6:ED:35:E7:17
Authority key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Certificate issuer: /CN=F36B9B8FAF/serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Certificate serial: 0355
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
Manifest number: 0352
Signing time: Sat 24 Oct 2026 04:20:52 +0000
Manifest this update: Sat 24 Oct 2026 04:20:51 +0000
Manifest next update: Mon 26 Oct 2026 04:20:51 +0000
Files and hashes: 1: f5DbGDX56nljonlPXDJUNY30PvQ.crl (hash: T+A2HJcNcn/dyRw8d6awf6jr3goJCGdT5pROta9LJwQ=)
2: 9D6BC0A2F1EB11F0A880BEA8DAE4EC9C.roa (hash: T5AlM0cdDWsgrJOzsfZ2QwHjdJWPRUtlN9T0HbFf7rA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9B8FAF, serialNumber=7F90DB1835F9EA7963A2794F5C3254358DF43EF4
Validity
Not Before: Oct 24 04:20:51 2026 GMT
Not After : Oct 26 04:20:51 2026 GMT
Subject: CN=6adc3224-7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:c2:3b:3a:da:f3:7e:ad:ec:40:06:93:ad:
0b:03:96:9c:53:bf:99:e1:77:ab:a3:0b:78:79:42:
40:ba:e9:a9:a6:ff:e5:72:3c:96:00:cb:83:16:94:
39:d5:0b:0f:d1:fc:32:dd:fe:a4:de:70:2c:75:7b:
f9:07:e0:83:5e:7b:84:af:5f:fc:52:90:51:c6:23:
eb:8f:c1:15:95:c7:76:cc:bd:df:51:35:c3:79:02:
83:8b:6f:e0:22:32:e0:9f:c9:3b:88:e0:47:36:07:
c3:c1:72:71:29:ea:3b:2e:4e:84:0c:d2:12:10:55:
97:a0:a8:ba:0d:5f:9c:8d:db:15:93:ba:d6:cb:9b:
2f:90:6d:75:35:a7:0f:da:e7:49:29:6d:93:78:b3:
96:53:7a:63:e3:9a:1a:32:b0:7d:48:69:1b:b1:af:
74:d3:fe:b0:d4:98:53:f0:b8:61:a1:94:69:da:95:
bd:03:5d:87:69:fc:aa:4f:a5:2a:83:89:da:61:f6:
ef:28:df:27:18:16:ea:d5:39:88:57:44:36:6a:72:
c8:32:46:ca:7c:25:8a:43:0f:11:cb:67:2b:e9:63:
0c:01:40:4f:78:cb:f9:b0:7c:c4:80:3f:18:75:43:
fa:cc:9c:b7:03:1b:18:81:04:02:29:70:ef:61:1c:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:18:7D:4B:FC:B9:3E:38:85:C4:51:BF:59:BE:A6:ED:35:E7:17
X509v3 Authority Key Identifier:
keyid:7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:ec:76:1a:67:ac:72:2c:2f:5f:0c:d1:f6:e4:d4:fc:23:
9b:10:56:5b:0d:a8:d5:c2:a8:70:10:62:51:21:7a:21:6e:8b:
bb:06:d3:21:7b:62:2a:3c:4c:cc:be:7b:f7:31:84:70:42:59:
8b:07:9b:0f:6a:bd:a7:f0:ce:7e:fd:6c:4c:39:1a:6e:eb:82:
fd:2f:56:66:f8:6f:49:da:fa:a4:de:f0:13:2e:9e:a0:87:d9:
6e:b8:e3:91:61:4a:8c:8b:1c:cb:b6:52:8b:3b:21:9b:8c:70:
03:72:98:8d:41:3a:5f:0e:5b:02:be:14:6e:00:3f:b8:4f:cb:
82:54:c8:8d:1a:a7:75:f8:be:80:51:be:8c:07:7f:8f:60:5d:
26:e1:f6:54:2f:60:7a:79:f8:51:99:20:a0:b4:c2:14:d3:ba:
ef:a7:cd:5e:ca:23:6f:0d:00:df:50:8f:85:cf:bb:3f:dc:e5:
74:66:a7:ed:5b:61:62:9b:8f:b7:a9:8d:56:5c:0f:da:9c:c0:
04:c8:47:24:c1:76:1d:c9:6c:5f:13:39:f0:87:0e:7a:42:83:
22:75:40:25:a0:9c:82:2a:ae:29:c1:2f:4d:9e:8e:41:40:25:
36:75:15:da:aa:a2:85:c9:cb:48:78:e9:1e:73:d6:b4:38:f0:
b7:f4:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:45 2026 by rpki-client