
Error: rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
File: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft (raw, json)
Hash identifier: tAq3EMAT7iKY6diueXPiqY0nlE69d/nZICWLxRneDTs=
Subject key identifier: E3:EA:E5:FC:52:38:71:69:4B:D3:56:0D:C6:DB:5A:66:3A:09:72:66
Authority key identifier: E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
Certificate issuer: /CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Certificate serial: 0AE9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
Manifest number: 0ADF
Signing time: Sat 24 Oct 2026 01:23:20 +0000
Manifest this update: Sat 24 Oct 2026 01:23:19 +0000
Manifest next update: Mon 26 Oct 2026 01:23:19 +0000
Files and hashes: 1: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl (hash: iyek3bMMQpQH6C1MgyuMaxq33vfWIdYt+DNwPJRx1Sw=)
2: A70D973E035811EB8CD6BB2EF8AEA228.roa (hash: xD1TsSOLzb9zgs5taA+QevFCLmTa0OLA9qXS/G/GWVw=)
3: 6FCCF99E035911EBA2969D2FF8AEA228.roa (hash: Brj3mGjB3Yf03eWIJCSVbmDY44O5T8140En+VTMw/XM=)
4: 4AAB98F0035911EB9D53632FF8AEA228.roa (hash: u6MKKtyNGkyNHWMBVkyzfCJjg2ohp3vSDpNE9KtffTs=)
5: 08E422B6035911EBB3240F2FF8AEA228.roa (hash: /Zi4DjYvbwyH8lralhYmtbRDBTQdUunZaejcHcESqgQ=)
6: 505E6CAAF83111F082A4E095DAE4EC9C.roa (hash: w5mN97uCWsUBvGHsC6kiqTtZ9/reHDjZERztz56UvmE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D6E6DAF, serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Validity
Not Before: Oct 24 01:23:19 2026 GMT
Not After : Oct 26 01:23:19 2026 GMT
Subject: CN=6adc0888-50e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:0f:34:f3:de:6f:54:7b:ae:38:37:65:3d:
03:f9:2e:58:f2:4e:ee:1c:37:48:24:5f:fa:9d:30:
ab:8c:ad:37:2a:4b:01:80:0b:d8:64:e9:40:fd:4b:
32:50:1b:6f:f7:e6:c3:51:24:cf:54:ce:12:a5:f5:
3a:48:db:63:4a:b6:27:c6:4f:b9:37:64:1e:16:83:
8e:00:c9:4a:b6:f5:4d:10:9f:4f:eb:e8:1c:35:97:
c3:e3:7f:f8:b8:25:f3:fa:d8:c2:43:02:77:d8:93:
4b:54:b3:45:1c:8a:71:41:ad:11:11:89:f9:e8:b7:
0d:42:48:a2:57:d0:3b:e5:71:f9:52:0b:24:78:d1:
4b:35:63:bb:f3:d6:cf:b0:2d:c2:8a:97:9a:1d:9e:
04:9f:46:e0:34:77:fe:04:d1:60:93:fc:d6:29:59:
f0:30:74:c1:54:b4:d4:fc:84:94:8d:75:77:24:9f:
8a:6c:c3:e7:b6:ae:41:51:d6:95:78:19:be:62:b2:
43:51:6f:4f:d9:5e:0d:92:27:2e:1a:34:30:21:08:
40:85:fb:32:f0:e1:9f:e4:65:11:6e:2c:30:e4:02:
09:23:71:b8:d2:98:0d:6d:57:bb:f9:41:30:74:45:
5b:d6:81:6d:c2:70:55:ee:0f:26:bd:6d:ca:ea:88:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:E5:FC:52:38:71:69:4B:D3:56:0D:C6:DB:5A:66:3A:09:72:66
X509v3 Authority Key Identifier:
keyid:E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:5b:44:47:54:d2:2c:37:30:51:f7:57:1d:12:fe:8f:a5:
56:4f:1c:58:da:7f:15:cf:ba:ae:71:4b:e0:66:6f:88:63:df:
1c:8c:bc:80:e8:ff:3a:6b:88:d8:26:fa:76:60:fa:3e:90:1d:
d2:30:c4:ff:28:2c:51:9c:84:ea:52:03:68:0b:93:77:7b:26:
c4:26:c8:4e:50:86:d8:c6:27:88:ff:22:9a:d5:fc:9c:3a:ce:
f2:37:ec:69:69:87:5a:8b:27:7d:6f:30:70:27:86:99:b7:37:
9d:50:1e:85:68:73:86:28:b6:ea:bb:57:51:d0:c6:c5:d0:68:
1d:42:87:d8:20:e9:f7:86:fd:0b:64:ff:4b:0f:29:41:35:0a:
0a:c4:1e:7b:68:4e:be:68:7c:ca:29:15:19:e0:84:8d:b2:10:
5d:6b:66:00:e5:4c:6b:69:19:f9:88:44:ed:f9:e9:5e:f7:7b:
d5:3f:28:cb:f9:55:b4:41:27:f3:66:33:05:56:20:25:ae:b6:
4f:1f:8c:a8:e3:13:30:5b:89:cf:11:2d:88:de:bf:b6:74:a3:
fe:56:8a:d7:ed:b5:06:9b:e9:62:fe:9f:a4:23:1a:fe:aa:b8:
c1:8e:46:2d:6d:8e:23:79:1d:83:77:12:78:b8:8a:0c:59:b6:
76:3d:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:23:05 2026 by rpki-client