
Error: rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File: Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier: yufsb2utzo5xS6JHoscAwFS/Zg5LpHe9znOCdhe17K8=
Subject key identifier: CC:7E:27:EC:C8:AC:EF:9D:65:4D:EF:3C:71:62:4A:AB:9F:C5:5D:CF
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer: /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial: 06D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number: 06D0
Signing time: Sun 25 Oct 2026 02:38:34 +0000
Manifest this update: Sun 25 Oct 2026 02:38:33 +0000
Manifest next update: Tue 27 Oct 2026 02:38:33 +0000
Files and hashes: 1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: hY7G5tzt1auf/vZWfqYSGqDgHuYVTW4gZKyxmhtjEt8=)
2: B483DD5260AD11F186FE20D2CE1D38B0.roa (hash: N08HMzaJrPQG98yF1dW42tjXRI8KTIgg1jSIS0yuaAc=)
3: 139A49B660AE11F1B99DE7D5CE1D38B0.roa (hash: rarFIEocrc0sUeZ7yyVNoX9GlR16ogXiHgAmgUr4kRc=)
4: 50EB151660AE11F1946459D6CE1D38B0.roa (hash: 3jYVZX446QMMMo1B09+QFtsPNpHJUqVfEGEWSu2C7qM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Validity
Not Before: Oct 25 02:38:33 2026 GMT
Not After : Oct 27 02:38:33 2026 GMT
Subject: CN=6add6baa-b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:36:df:70:84:6a:2e:b7:15:4f:b8:78:e2:
08:2a:eb:d1:f5:da:6d:04:c0:02:6d:ad:42:b9:b8:
e3:3b:8f:b6:d0:de:ed:5d:42:e1:d0:9e:19:58:8b:
97:e9:b7:cf:9a:ba:e6:ec:e3:c5:05:34:c1:08:39:
6c:92:2b:a4:72:07:de:7e:72:f2:ec:4f:2a:77:21:
dc:c7:91:7f:52:3d:bf:31:8f:e9:9d:4c:77:ae:83:
be:c6:8d:24:50:72:87:b7:ce:7e:47:80:46:9d:14:
01:89:87:7e:70:54:00:e5:2c:98:1f:d9:b0:99:48:
76:0e:8e:05:a8:b3:d5:eb:e2:39:5e:ad:e2:df:46:
59:ca:f2:16:51:3c:6a:6d:8e:af:7f:c8:47:54:60:
4c:24:b6:03:2e:b7:3e:c3:5a:35:66:ea:25:3e:b4:
2d:bc:43:5b:0e:8a:58:09:c0:cd:42:3c:59:0e:60:
a4:73:73:fe:bf:e4:c4:ea:b5:ae:eb:a8:20:f9:8e:
ca:0f:8c:6f:e0:07:7d:02:90:a0:f4:15:3d:8e:d1:
85:0c:31:74:e0:48:14:cd:35:ca:42:84:c8:cb:28:
80:f2:a5:e4:63:06:ff:32:80:c9:37:e9:96:7c:50:
06:d9:96:52:d3:1a:cd:93:c0:1f:25:a0:73:a9:ef:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:27:EC:C8:AC:EF:9D:65:4D:EF:3C:71:62:4A:AB:9F:C5:5D:CF
X509v3 Authority Key Identifier:
keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:54:08:d6:35:f5:51:7e:8c:88:e0:f7:7b:37:2d:8b:7e:0f:
d5:f0:72:19:57:18:26:de:f6:02:68:79:ea:6f:f8:c5:9c:42:
e6:75:20:cd:1a:81:fe:a0:5e:14:a1:94:7f:ee:74:4f:c2:47:
a2:de:35:02:aa:04:35:5c:d9:90:b3:ac:c6:2a:61:3d:79:29:
c7:04:70:16:da:7a:91:a1:5b:af:ba:e5:55:b5:44:b7:96:12:
66:07:58:7b:18:c2:42:34:51:a2:15:44:8a:d0:43:90:d2:10:
85:3a:df:9b:b1:a5:86:4a:c9:f3:d4:a2:42:f4:22:00:0f:68:
f5:2c:e0:f4:b9:b9:1b:0c:36:2f:07:d2:04:75:81:39:2f:de:
ca:92:dd:07:39:40:2f:3d:ee:f1:fb:c0:76:a5:9c:9f:b9:9f:
14:68:50:a1:59:4e:03:39:90:5d:df:42:b1:d6:d0:bc:dc:32:
dc:52:ec:5c:eb:fe:6b:a3:18:e2:4f:25:d4:f8:72:9d:69:87:
7b:bd:80:d1:89:9a:c9:74:66:9f:9e:b9:72:73:48:20:14:2d:
e5:8a:11:ab:7f:48:8f:7e:02:a3:51:12:0a:2c:c7:79:a7:c2:
56:a4:aa:0d:18:f9:63:65:b2:0f:54:b7:0e:8a:62:86:66:28:
ef:7e:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:41 2026 by rpki-client