
Error: rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File: IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier: cWnwxEAGhWk/8cBsLpqEzWYBx3zhO9ZRrkpw7eseCBI=
Subject key identifier: 24:CD:95:AD:C7:6A:03:AF:BA:40:87:BE:7A:34:42:90:5F:97:6F:CA
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer: /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial: F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number: F6
Signing time: Sat 24 Oct 2026 05:29:55 +0000
Manifest this update: Sat 24 Oct 2026 05:29:54 +0000
Manifest next update: Mon 26 Oct 2026 05:29:54 +0000
Files and hashes: 1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: qo7U623tPavxkUGLVQB82+ZwZSVtdCvWDd0Cq+a8v38=)
2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Validity
Not Before: Oct 24 05:29:54 2026 GMT
Not After : Oct 26 05:29:54 2026 GMT
Subject: CN=6adc4252-fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:35:3a:56:24:62:d2:51:df:f7:3d:24:cc:
c4:8a:bb:3a:76:62:80:0a:f7:f8:48:fa:ca:1d:cf:
bc:1a:66:ee:ad:e7:68:42:b1:00:41:08:9c:04:0c:
6f:33:a5:63:37:0d:ea:6e:39:a7:ca:ea:aa:09:8f:
99:ef:78:bd:2a:88:51:ac:81:e9:8c:cf:62:39:f7:
73:d3:c6:6f:de:af:1e:61:ba:bb:1b:3d:12:7d:04:
98:36:cf:1f:0a:8e:72:de:57:46:4a:25:3d:56:66:
b4:80:02:60:a8:13:67:09:a1:b8:36:58:43:e7:b9:
61:df:ab:33:39:9f:a0:1e:e7:88:a6:89:d5:f8:5b:
98:76:74:6d:cb:62:e0:0b:3f:54:95:30:46:db:1f:
90:c4:d6:e0:b0:b9:df:da:18:9d:91:72:f4:9f:64:
78:66:2d:3e:6d:f7:4e:87:91:15:24:8a:75:25:9d:
ea:b6:00:1e:e2:50:f5:12:70:40:e8:e2:bd:84:cd:
c7:a1:7a:4d:c7:ed:32:7c:92:ec:7e:2c:15:46:5b:
37:eb:30:7e:0e:c4:d9:d6:a0:b5:d7:4e:c2:fb:7f:
8d:56:92:a4:71:ce:c9:e9:5a:70:d7:74:15:bb:b6:
56:e5:93:70:5a:bd:89:df:f3:7c:5b:37:30:06:3c:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:95:AD:C7:6A:03:AF:BA:40:87:BE:7A:34:42:90:5F:97:6F:CA
X509v3 Authority Key Identifier:
keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:25:03:50:24:a6:b8:dd:35:19:9a:9b:18:b8:73:96:f5:
e7:88:0e:4b:5c:06:0d:da:42:9d:e9:82:6c:c7:c9:6b:38:25:
34:b5:22:fb:7a:ea:e4:30:51:25:0c:98:04:46:76:5d:99:f3:
52:0c:02:b5:75:01:55:e8:dc:c6:dd:f4:32:2b:2f:43:11:62:
0c:6a:76:c6:bf:d2:3d:e7:f7:27:c3:1b:58:d3:54:44:f8:04:
82:e5:f7:ef:cd:1a:ac:39:e8:85:a5:3f:02:9d:35:bc:8d:3f:
ef:60:45:c3:de:b7:e6:67:4e:21:f2:78:de:d2:81:b1:03:70:
83:8d:85:aa:fa:52:46:35:1b:74:53:cf:e0:e4:ee:9e:52:5a:
87:3e:ad:57:a9:76:2d:df:54:23:33:5f:d4:4c:94:65:3c:8a:
12:a0:9e:0a:9b:60:8b:65:37:23:85:c5:9c:3f:6a:b0:7a:c1:
16:9c:1e:f5:be:64:2d:26:24:d3:25:73:db:e1:8b:97:e5:3b:
84:65:db:16:f7:32:95:8c:87:59:9a:f1:ea:28:b9:21:09:09:
a7:d9:13:71:dc:f6:9c:9a:8b:f6:f5:d2:e5:9c:05:f7:29:1a:
9a:b4:23:af:7e:70:57:70:10:42:50:84:53:61:13:dd:72:b6:
6f:7b:98:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:28:38 2026 by rpki-client