
Error: rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
File: 4a66tLHvdNsvpuf2sMhhKwzhv9s.mft (raw, json)
Hash identifier: 1HA6tf1fnIeynTYfPdOnXDTVDh0kVt4gbkzYbzA93Sc=
Subject key identifier: 08:2A:37:DF:C4:2A:33:21:90:7C:65:CB:A1:30:71:7A:79:79:73:05
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Certificate issuer: /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial: 0EC1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
Manifest number: 0EBF
Signing time: Wed 28 Oct 2026 01:04:23 +0000
Manifest this update: Wed 28 Oct 2026 01:04:22 +0000
Manifest next update: Fri 30 Oct 2026 01:04:22 +0000
Files and hashes: 1: 4a66tLHvdNsvpuf2sMhhKwzhv9s.crl (hash: xNwsBTlB2IU8ZX3cWCqcb6FFnDhIGJC1V2GsE7GPXZo=)
2: A9CE075A727B11EBB196600DF8AEA228.roa (hash: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=)
3: BEBDF2D279B111E6830FCB69F8AEA228.roa (hash: EouzcL5tOeyVAza9Ny4WgUhhP+v0Y2hxWM5v0/DIPwk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3777 (0xec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDB53AF, serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Validity
Not Before: Oct 28 01:04:22 2026 GMT
Not After : Oct 30 01:04:22 2026 GMT
Subject: CN=6ae14a17-f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:aa:83:5a:dc:e8:ac:18:0b:69:b6:42:cb:
4c:2b:4f:30:e8:f8:ff:1f:1f:4e:e9:c9:3e:db:10:
ab:52:4e:4d:9f:89:6c:98:e9:56:7b:c4:35:eb:3b:
fa:1a:80:b0:de:a8:6d:5a:f6:7a:f9:aa:4f:c6:74:
47:09:53:5c:51:ec:53:f5:52:95:84:2d:c1:d3:1b:
78:b8:56:ec:3f:07:c5:f1:6c:24:b3:42:df:c6:c1:
62:9a:f8:ea:0a:75:57:1c:cb:57:51:df:b3:81:d2:
bc:fd:33:7d:89:d9:0d:da:8a:d6:43:68:a1:9c:be:
55:42:65:08:e1:9a:35:cb:8b:f5:58:b2:89:74:02:
45:48:cc:39:08:9a:37:fd:82:e2:d1:18:67:d4:3e:
61:c0:0a:7d:61:65:b3:a8:75:ff:ae:ac:bb:06:10:
c3:70:2a:42:e7:4e:60:a4:74:c6:5d:5f:13:3b:63:
64:92:3d:52:58:75:64:34:7c:4e:98:1a:5a:79:cb:
0e:2a:42:22:86:0d:d7:87:30:65:49:0d:f8:7b:df:
74:87:68:cb:4c:f0:0a:ba:bb:53:b8:41:96:04:d8:
14:09:42:d8:2b:d2:7a:f8:21:ab:a4:84:54:f1:9d:
3b:a0:1b:af:61:57:4a:a1:b4:b7:bc:33:84:2f:b5:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:37:DF:C4:2A:33:21:90:7C:65:CB:A1:30:71:7A:79:79:73:05
X509v3 Authority Key Identifier:
keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:83:00:28:cb:03:4a:e2:3e:3f:ef:67:f9:12:34:fa:f9:
62:dd:7c:d3:ea:ab:ef:f7:e3:dd:d0:1e:9f:88:40:0f:10:82:
4d:99:f4:b6:a6:d9:b4:fd:67:78:6b:18:85:c7:ce:f2:35:df:
2e:95:dd:54:9b:d5:59:2e:85:91:ed:32:3d:38:07:bb:77:36:
d8:4c:43:b0:c7:99:33:e7:cd:92:ad:a7:6d:0b:37:0f:10:2a:
a4:51:9b:0b:bd:5c:61:4e:bc:dd:81:89:b1:bc:21:72:37:8c:
96:fa:c1:65:52:3d:3a:1e:e3:e9:93:a5:7f:07:d1:f8:69:e4:
19:03:5c:e2:f3:4a:40:3b:cf:11:c8:4e:fa:39:d4:4e:64:17:
16:68:73:c9:85:d9:fa:0a:bd:57:49:4d:a4:b2:60:e1:29:ce:
bc:58:c1:65:56:73:59:17:5e:ef:8f:52:0b:e3:b9:97:bc:30:
02:0c:a2:62:03:ef:ad:4e:7e:c8:52:58:03:c4:32:44:b8:55:
47:83:d3:6d:b9:0e:60:7c:86:4e:2f:65:4d:9f:ff:0c:21:bd:
d3:88:0a:2d:9d:b4:14:96:3d:66:2d:94:62:2b:18:92:4a:c9:
d1:6c:3e:53:15:cc:60:c8:29:5a:01:9d:14:89:3d:65:71:d2:
28:76:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:14:14 2026 by rpki-client