
Error: rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
File: e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft (raw, json)
Hash identifier: YHbGpq/wCVOeAISVbEj1MTxF+HkiwLhX4v8p6/PFc5A=
Subject key identifier: CF:FA:47:81:60:53:E2:2D:89:AE:8F:04:4E:21:C3:0C:50:0E:CB:7F
Authority key identifier: 7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
Certificate issuer: /CN=F36B9F4BAR/serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Certificate serial: 0AE0
Authority info access: rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
Manifest number: 0AD9
Signing time: Sun 01 Nov 2026 01:29:40 +0000
Manifest this update: Sun 01 Nov 2026 01:29:40 +0000
Manifest next update: Tue 03 Nov 2026 01:29:40 +0000
Files and hashes: 1: e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl (hash: 8ABc2JMGGx3xMotUjqC+LsYwOZGfQO/I+HMgdnY9RCI=)
2: CC58F7C422BD11F183461ADFDAE4EC9C.roa (hash: DWZrC4+ZCy9WarSzpXK13RhrAoH94T/igwaBF75lQlY=)
3: 033994E822B811F183FAB1BDDAE4EC9C.roa (hash: NWQU47xDGEMdfBshOG2MbAYNTV/ExbjFLB7MJsI28xY=)
4: 3FA44D0622B811F1A097CFBFDAE4EC9C.roa (hash: bm9LUHD8iWz8/51Tk3NQcoYIf2jRL8L+SWl78X4zXkI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Nov 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAR, serialNumber=7B4E00490D40841240B3A676B6E328A6EFD0FDA2
Validity
Not Before: Nov 1 01:29:40 2026 GMT
Not After : Nov 3 01:29:40 2026 GMT
Subject: CN=6ae69604-d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:ce:ce:05:b0:81:b5:06:e1:48:88:de:5c:
bc:42:a0:fc:1b:12:84:45:7a:f5:0d:58:e9:6c:06:
5c:3f:01:96:75:74:c1:1e:54:c8:f8:0a:09:58:b0:
51:b6:d2:e2:d0:f9:72:22:6b:3d:69:ec:a1:d0:3a:
28:6a:78:f3:1e:0e:0d:63:27:b2:5a:53:4d:39:54:
5a:74:6d:46:c9:69:a6:ea:f6:50:21:8b:cb:6f:61:
39:5b:d2:4d:b4:cd:fe:b7:64:f9:ce:7d:4b:d5:5b:
77:5c:66:61:0b:cc:24:d2:95:35:34:09:36:08:97:
8a:12:ca:cc:cc:8b:84:1b:f2:4d:ca:df:d6:b4:19:
94:6d:2c:ea:b5:c1:69:39:fc:e8:3b:05:21:7a:db:
9a:d0:b4:63:c3:7e:19:12:74:a9:46:c0:61:55:7c:
76:20:f2:44:91:a2:b4:99:99:7b:4f:f1:64:81:cf:
a0:5f:79:7c:1a:59:aa:a2:a7:9a:a8:cd:b6:d2:29:
e7:c1:72:b6:24:e9:3e:ab:6b:ed:d3:98:76:21:f6:
9c:88:ed:52:15:40:4e:e5:07:79:cf:e5:0c:8f:3b:
9e:8f:23:bc:95:91:6c:b8:59:69:e4:e1:9e:21:50:
d1:a5:05:37:a1:75:0a:e5:34:3d:b5:1d:d7:5a:8e:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:47:81:60:53:E2:2D:89:AE:8F:04:4E:21:C3:0C:50:0E:CB:7F
X509v3 Authority Key Identifier:
keyid:7B:4E:00:49:0D:40:84:12:40:B3:A6:76:B6:E3:28:A6:EF:D0:FD:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/742037808DE011E993171A33F8AEA228/e04ASQ1AhBJAs6Z2tuMopu_Q_aI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:3e:e4:04:cf:a0:64:88:b0:71:75:21:65:7c:57:7d:60:9b:
b0:87:97:62:31:34:69:d0:98:56:22:0b:0f:0a:b5:d1:c0:ac:
7d:0b:d9:21:cc:58:1d:ef:cc:15:94:61:83:a2:22:fd:ec:3f:
a1:7c:76:a1:5a:80:f7:f6:c2:4f:04:32:74:a1:ef:10:8d:fa:
24:46:f5:f9:5c:d2:e1:db:c3:3a:9d:d9:e5:3b:f5:e1:f9:23:
d1:24:7e:d4:25:c6:0e:73:e6:8f:6a:51:db:1c:00:9c:56:7a:
e9:b7:25:9a:04:9f:9a:1f:ca:71:1e:89:dc:b8:7a:4b:62:5d:
bd:f2:5c:ac:30:e0:21:86:10:7d:9f:fe:c0:11:aa:5a:89:45:
65:ff:e3:45:0c:41:77:7c:3d:24:db:95:78:2c:b8:12:dd:a8:
e3:47:88:b8:f2:97:e5:72:52:b8:16:bb:5a:f7:d8:86:4e:1b:
01:66:8c:3c:da:c4:b4:9c:b0:08:60:cf:ad:55:81:29:75:c5:
12:3e:9f:0f:e6:cd:d8:ed:83:66:e9:44:4e:ff:03:cf:c8:3c:
5e:e7:7e:11:79:e2:d0:55:d5:39:d0:f7:ef:73:90:f9:92:e5:
a6:b0:9e:9d:bc:86:ef:fc:f2:63:cf:ab:4f:99:70:55:5b:c8:
e2:af:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:46:22 2026 by rpki-client