
Error: rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
File: JrOnWLLY0r61xvaBylvZJYx593c.mft (raw, json)
Hash identifier: z9T4tYCJY3jiHGZ1Xz8VZQ89jsFkxcOwO7DjryLPNg0=
Subject key identifier: AF:35:04:37:BA:8D:0D:86:5D:F8:EA:52:A7:8E:05:42:6C:02:27:7A
Authority key identifier: 26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
Certificate issuer: /CN=F36D8ADDAF/serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Certificate serial: 085A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
Manifest number: 0857
Signing time: Sun 25 Oct 2026 02:00:46 +0000
Manifest this update: Sun 25 Oct 2026 02:00:45 +0000
Manifest next update: Tue 27 Oct 2026 02:00:45 +0000
Files and hashes: 1: JrOnWLLY0r61xvaBylvZJYx593c.crl (hash: KHSmE0b7yNzLAqP/9/y2yPsQFEBoH4UF/80Yl38TBY0=)
2: 8725BB28177111EF81A9096D017001B1.roa (hash: 88veSwgimt5nxNF8bDTfkfTQkyjEIh0wtn0t0fyF6v4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8ADDAF, serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Validity
Not Before: Oct 25 02:00:45 2026 GMT
Not After : Oct 27 02:00:45 2026 GMT
Subject: CN=6add62cd-c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:ee:9d:d9:5e:a4:18:d4:57:5e:55:65:d7:
da:ea:be:6f:c9:b2:0d:fd:c6:50:25:68:80:5c:67:
67:07:f8:c1:e7:81:ad:91:b1:7d:e5:a0:82:b5:10:
48:9b:7e:1f:4b:1c:69:ad:9d:c4:01:34:63:9c:41:
be:67:5b:5f:30:fd:aa:b9:02:13:37:cd:8a:e8:0a:
6f:c5:a3:51:2c:0e:a9:8c:7b:42:a9:d7:a7:90:13:
04:b1:d9:d9:a7:7d:69:dd:37:39:51:84:e2:50:46:
9a:15:05:ab:a4:1d:3d:ec:ee:c1:56:31:63:b7:eb:
a2:a8:e4:b6:b3:c4:5e:b2:b2:f8:76:bc:cb:92:42:
4a:ee:4c:54:e8:a1:36:32:16:5a:2c:d4:7e:e5:43:
90:00:0e:ab:79:94:62:cd:e3:fe:22:37:40:c3:35:
a4:3f:e7:e0:be:65:c5:a2:54:63:0e:c1:73:73:ac:
f0:99:ce:96:16:0d:a8:07:28:08:60:27:8d:09:d7:
2d:72:ab:9e:dd:e8:61:c6:d7:13:f1:5b:41:ac:62:
34:2b:c3:fb:51:73:b0:74:e2:da:91:0e:dc:c8:9b:
97:83:c8:fe:a6:cb:ec:d9:37:f7:13:51:20:f9:3c:
d3:82:f4:88:46:22:69:b2:ac:8b:8b:e0:55:f5:29:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:04:37:BA:8D:0D:86:5D:F8:EA:52:A7:8E:05:42:6C:02:27:7A
X509v3 Authority Key Identifier:
keyid:26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5a:20:dc:d0:9a:b0:07:71:a5:27:37:c5:5c:0d:7f:ba:8f:
30:04:24:ed:70:7f:c8:dc:14:0e:ee:e5:03:15:c9:4e:f0:03:
cb:6d:44:9b:d3:7c:d3:aa:c4:2c:cb:ae:74:b6:b8:43:5c:a2:
69:a7:46:3c:59:f4:d1:f6:2a:ca:11:bb:48:bd:97:6b:d0:29:
d8:3d:5f:ca:5d:13:74:b9:b9:fb:9d:14:b5:84:c0:ab:ba:3c:
45:0f:03:d4:91:d7:b1:b3:52:cc:32:b5:cc:16:d3:42:81:f1:
96:dc:53:33:e0:a4:54:b2:8a:79:f8:5c:67:47:20:62:79:e4:
93:27:fd:72:2e:19:94:01:e2:d5:5b:a1:5c:ad:4a:df:bd:41:
37:a0:cd:e4:19:d6:d4:50:87:0d:26:fe:e2:ca:44:57:78:31:
c3:c9:d5:1e:37:26:f7:87:82:64:c5:26:e8:83:f9:5b:ff:ac:
05:05:a8:dd:7d:2f:7f:4f:51:d2:5e:00:59:63:5e:2b:b2:e5:
af:93:e6:64:a0:59:1d:49:4e:b1:c9:28:45:66:40:1a:75:48:
75:eb:e4:59:a7:b2:e7:9a:3c:26:19:ac:19:30:8f:22:b2:da:
af:00:13:50:95:0e:97:d3:81:3e:10:80:43:0b:ca:a7:e4:7c:
72:e4:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:57 2026 by rpki-client