
Error: rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier: iPCfneyOKotP0u2j6E53jp3qVNFXEjOFpvZbDX6GPVw=
Subject key identifier: B8:44:D6:6B:A1:AD:33:87:FF:0E:A8:66:B4:A4:F9:1D:20:7C:40:6C
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer: /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial: 0741
Authority info access: rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number: 073B
Signing time: Thu 17 Sep 2026 02:29:01 +0000
Manifest this update: Thu 17 Sep 2026 02:29:00 +0000
Manifest next update: Sat 19 Sep 2026 02:29:00 +0000
Files and hashes: 1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: Lycz8i3n0oNMvvtqsOAYwsxnGpHULLdeU99HIpNGZ2M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Validity
Not Before: Sep 17 02:29:00 2026 GMT
Not After : Sep 19 02:29:00 2026 GMT
Subject: CN=6aab506c-04f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:60:4d:b2:ea:e0:3e:02:f6:81:eb:d6:fc:
c7:20:5c:c9:e8:5c:20:03:a6:e9:24:c5:f0:44:57:
d2:6f:57:0e:b0:aa:98:8a:79:e2:09:b0:a1:20:81:
06:6a:7a:0a:c3:0c:68:ce:39:72:e2:c0:c9:30:db:
46:cb:f0:33:6f:b5:79:67:f7:58:b2:d2:fd:aa:ca:
0c:0b:dc:1b:4f:f3:5b:7f:c3:00:9a:da:d6:03:f4:
fd:0d:d6:b1:a2:06:39:e3:c2:78:52:90:26:4f:bc:
6b:00:8a:db:2d:5a:75:70:84:7c:e6:3a:a4:c8:93:
57:74:03:30:a9:01:a0:44:59:b3:7b:4e:7e:e3:1e:
75:0e:24:cc:9e:e5:11:91:76:a1:0b:90:a5:88:b1:
ba:fc:f0:87:6f:72:2d:d0:f2:33:d5:6d:48:66:0e:
78:70:90:e0:fa:8c:78:17:00:3c:74:2b:0b:85:c7:
62:6e:4d:2a:33:d4:b5:0b:6d:0a:d4:fc:ba:1f:6a:
f2:60:fd:03:93:d3:aa:45:01:71:7b:ee:97:f1:7f:
0f:ee:3d:6a:01:d2:b9:3f:c6:da:fd:83:b6:d0:24:
8a:35:e4:75:2f:e0:5c:4e:aa:3b:4d:07:56:d3:50:
4b:9a:2e:37:11:da:8d:ce:a6:de:ce:85:6d:67:3c:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:D6:6B:A1:AD:33:87:FF:0E:A8:66:B4:A4:F9:1D:20:7C:40:6C
X509v3 Authority Key Identifier:
keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:99:7b:82:0b:d5:b4:c2:e9:ea:ec:36:f3:6d:41:ec:e5:
7c:2b:a6:7f:1f:33:9c:5d:0a:fe:0e:5b:7f:98:80:58:6b:43:
84:fb:3a:18:8a:c5:e9:62:09:8b:55:66:a0:b4:3b:be:9e:da:
10:a9:e0:5c:9e:6e:db:95:9b:97:41:f4:93:c8:d1:18:b1:53:
ee:8f:1a:75:66:31:bd:f3:b2:8d:f1:fa:0a:ff:42:7f:a5:d9:
7e:6e:f3:fe:79:42:2e:25:03:1d:27:92:d6:ce:27:77:93:c4:
d0:69:73:3d:45:af:0a:19:a6:4a:bf:9d:fe:b5:e4:b9:75:77:
b3:fe:1b:93:0a:82:88:0c:dc:e8:f1:13:53:4c:f4:93:df:1c:
df:23:7f:6f:d8:bc:49:b0:21:ef:05:f5:d3:e6:c1:ce:e6:b6:
0d:61:2c:d5:1c:9a:8d:6e:8c:b2:8d:84:38:f0:30:b7:17:fc:
f8:43:73:3b:fd:3c:a7:32:f7:6d:8a:5b:6f:d6:4f:cf:cb:0c:
7c:e7:1a:ee:4e:7d:e2:83:01:23:c2:f3:2e:72:29:ce:39:25:
de:d8:ed:85:5a:5b:8f:cd:71:d9:22:4f:bc:2f:58:db:bf:03:
23:b7:9c:8a:78:28:1b:75:cc:1b:72:e6:d7:9b:6f:f3:9d:31:
5f:00:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:43:03 2026 by rpki-client