
Error: rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
File: r6wKsxpAZoCPAJGfHYKO17Qawmo.mft (raw, json)
Hash identifier: jB55+MB+MTD/sQfu+IJMFoYhwC8chwV6GnpwFDuHKfM=
Subject key identifier: 62:13:46:ED:B8:41:A0:A7:11:4F:82:C6:AE:E1:B6:DC:19:89:E6:E7
Authority key identifier: AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
Certificate issuer: /CN=F36BA3E3AF/serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Certificate serial: 0623
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
Manifest number: 061C
Signing time: Wed 28 Oct 2026 02:55:46 +0000
Manifest this update: Wed 28 Oct 2026 02:55:45 +0000
Manifest next update: Fri 30 Oct 2026 02:55:45 +0000
Files and hashes: 1: r6wKsxpAZoCPAJGfHYKO17Qawmo.crl (hash: zaKyyqHs8m7ome/OwPlo8Vftc/3VYKErw01aFB1Obr0=)
2: A757EE9A8D7911F1A1885CB5CE1D38B0.roa (hash: SX2Sziy1WrXxgfYv48QufAw42k3gnhBEVXgjj2llqVU=)
3: 68B307E28D7911F1B78AF7B4CE1D38B0.roa (hash: UfC0tkAQxlZtwPsWNif+mYQVfjdpERr8zOzUQ27k38I=)
4: 90BA37307E9511F18616461BCF1D38B0.roa (hash: btSLQk35M0eg00qbMZmOf5fhYQeETCbjpRX5iY4495c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1571 (0x623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA3E3AF, serialNumber=AFAC0AB31A4066808F00919F1D828ED7B41AC26A
Validity
Not Before: Oct 28 02:55:45 2026 GMT
Not After : Oct 30 02:55:45 2026 GMT
Subject: CN=6ae16432-fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:be:d9:1d:a3:05:d9:f7:56:1f:b7:22:6f:
33:73:24:23:7a:76:ea:49:a8:1a:6d:5f:6b:09:8e:
a3:a6:3d:d1:5c:03:1f:36:5e:8e:ff:0c:8f:81:31:
14:35:a8:75:28:ff:2a:d7:37:6f:a5:da:f7:bf:67:
ee:20:05:e9:86:32:64:84:fe:22:3b:96:19:50:99:
2e:82:ee:a6:e5:de:a0:0b:c6:67:09:07:15:20:47:
9e:c9:c1:01:3e:ce:2b:1c:3a:95:f8:af:a1:60:65:
99:f0:fb:d5:37:dc:f6:7a:0c:9a:95:39:c4:84:6c:
74:f7:6e:35:ef:50:a9:f7:a1:a4:7d:f7:78:f9:ef:
4f:2e:fa:16:e8:79:76:cc:e1:bc:30:e2:70:31:2c:
20:f0:a8:5c:56:a0:2b:2d:16:68:72:f3:c9:db:93:
4e:35:9f:65:07:3f:33:76:4b:0c:71:93:83:5c:34:
18:13:29:64:08:3e:9c:c7:b5:eb:5c:ee:b4:df:b5:
b1:42:62:83:84:4a:f7:06:3d:32:cd:86:1c:50:43:
37:8a:9f:7f:39:57:8a:a2:ed:3e:c8:23:aa:8f:af:
af:7d:6c:3c:5d:bf:55:8c:ab:1f:ad:95:c6:bf:6d:
04:96:4c:12:b9:64:0f:3e:47:e1:67:ed:0b:39:20:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:46:ED:B8:41:A0:A7:11:4F:82:C6:AE:E1:B6:DC:19:89:E6:E7
X509v3 Authority Key Identifier:
keyid:AF:AC:0A:B3:1A:40:66:80:8F:00:91:9F:1D:82:8E:D7:B4:1A:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r6wKsxpAZoCPAJGfHYKO17Qawmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA3E3/826086642E3311ED9DD7C8EFF1222468/r6wKsxpAZoCPAJGfHYKO17Qawmo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:67:b9:a4:fe:23:8e:36:77:a0:e8:c3:60:91:3d:e0:0f:
ae:1f:16:0e:e7:8f:dd:94:48:b4:c0:89:63:69:20:33:9b:37:
d0:69:69:71:5d:ac:80:50:1b:59:a7:67:24:60:c1:a7:5c:cf:
68:b9:f5:bd:82:0f:2c:c2:40:ae:ed:06:1f:7d:96:db:3c:12:
ee:cb:6e:d5:0f:3a:9f:03:ae:0f:f7:75:8e:ef:b0:ab:94:03:
a5:9f:00:ab:6b:bd:b8:82:31:5c:c5:51:80:64:a9:6f:51:1a:
26:9d:c0:ec:af:9a:e1:da:dc:4f:e5:b6:56:5d:64:e4:cc:06:
be:7c:66:91:f3:12:87:61:1b:bf:12:34:2f:b1:92:32:fa:9e:
a1:9a:5c:3c:5b:38:36:b1:dc:6f:7f:66:1c:11:c2:f3:b9:37:
34:e3:12:9e:1c:90:e3:37:bf:33:15:7d:c6:d8:2d:48:91:c9:
ba:10:6c:e8:50:c1:82:50:b3:f4:b8:ea:41:8e:3d:38:fe:ef:
d0:f5:7f:76:77:cb:06:e9:37:2e:84:f7:9d:ba:a4:a9:c3:4b:
b6:ba:5e:f9:be:1a:9d:5d:b5:19:a8:f1:7f:c3:f7:09:c4:b5:
53:fc:31:f2:c1:f5:19:7b:2a:7b:b9:3b:ab:63:5f:f1:70:74:
9c:49:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:52:58 2026 by rpki-client