
Error: rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
File: SfsOFqhdQF1bnyOWCmkJwdfBW38.mft (raw, json)
Hash identifier: /gTDa8LCUi5lkCnYKrHG0fnLnYQrGC80dM5X0lnGNQc=
Subject key identifier: 18:B1:C8:A2:9D:26:82:90:3A:43:D8:51:CD:46:CA:37:EF:82:92:24
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Certificate issuer: /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial: 6A
Authority info access: rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
Manifest number: 69
Signing time: Sat 31 Oct 2026 05:44:47 +0000
Manifest this update: Sat 31 Oct 2026 05:44:46 +0000
Manifest next update: Mon 02 Nov 2026 05:44:46 +0000
Files and hashes: 1: SfsOFqhdQF1bnyOWCmkJwdfBW38.crl (hash: L5ESXGxejJDhfqsml6tMim0+WWysny5t4x4vOx2g7mM=)
2: 423092FE844811F190DB7106CF1D38B0.roa (hash: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Nov 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Validity
Not Before: Oct 31 05:44:46 2026 GMT
Not After : Nov 2 05:44:46 2026 GMT
Subject: CN=6ae5804f-5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:d0:3d:cd:fd:9c:a2:fa:9c:ad:6c:3d:1f:
18:72:b9:cc:81:26:e9:43:5e:0a:4d:52:49:22:d9:
0c:bd:20:7e:4c:19:60:e3:aa:7f:e9:ff:b3:31:06:
64:6c:0a:1e:e7:2a:61:80:ec:80:87:06:7b:d7:75:
23:a1:d2:5a:4a:9a:c3:65:b3:b2:d5:b4:5b:4b:36:
99:36:6e:54:e2:19:4a:7a:6a:72:cd:36:af:00:23:
f3:cc:e7:2c:28:5f:32:1d:92:af:f3:46:5f:42:43:
67:3c:41:93:3e:b5:bc:a1:d1:ba:15:c7:b6:a4:74:
5f:2f:a2:9b:cd:d9:81:bd:bb:cc:5b:d8:ca:f9:6a:
95:48:92:c9:d6:1a:73:48:99:61:a6:9a:6a:70:36:
c6:1a:78:62:41:f3:3a:f8:28:b2:bc:4c:61:e3:3d:
b4:69:9a:c6:12:ee:89:f6:25:4d:0a:cd:f2:33:48:
ae:4c:6b:5b:23:45:c5:3b:e8:65:84:9d:e1:8d:71:
dd:0f:e6:dc:00:3c:19:8e:b5:be:f8:aa:e2:aa:97:
ea:26:44:3a:0a:a6:18:f0:f7:1e:3d:16:0e:b5:13:
bd:63:a0:f5:69:5c:2a:10:9e:88:40:ad:6e:72:5f:
ef:28:4e:b3:86:c2:58:12:1a:0b:c7:ec:68:55:3d:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:C8:A2:9D:26:82:90:3A:43:D8:51:CD:46:CA:37:EF:82:92:24
X509v3 Authority Key Identifier:
keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f1:15:dd:4a:dc:4a:86:9f:c8:d0:ba:d8:4e:7c:20:2a:e6:
c8:b5:28:ac:c4:c0:bf:5c:43:ff:96:e3:e9:93:d9:2f:03:40:
ea:fb:54:f6:3f:84:29:ae:d7:e9:16:0f:06:30:24:6e:d8:ce:
ea:66:74:3e:30:b1:9a:c2:e2:38:e4:54:07:57:e9:c1:9c:c5:
0c:a9:36:a3:58:55:e2:76:6d:bc:a5:bd:41:5c:62:af:ce:07:
30:17:98:2f:3b:a5:fb:29:4a:28:df:7d:67:01:42:0b:69:ac:
44:68:6f:d0:af:87:e2:c6:58:8d:ce:bd:ca:a0:48:58:a0:e1:
f8:a9:79:84:b7:81:e2:6c:f4:da:04:8b:af:81:31:91:97:03:
9d:47:8c:8e:2b:9e:7e:aa:f5:03:60:32:bc:79:d9:17:13:5b:
96:29:ac:5d:68:cd:74:32:d0:5e:79:3f:ee:3e:99:63:98:9f:
8a:41:d5:49:33:69:ec:23:f4:c1:0d:52:6c:51:16:20:86:87:
c8:00:f7:65:63:64:8a:8a:8c:4a:b8:1b:65:cd:b3:44:44:15:
aa:71:f0:25:9e:44:2f:dd:05:8e:00:7b:f6:51:91:b8:73:da:
4d:b1:91:9f:3f:ef:a7:f7:a2:5f:66:b0:fc:27:ce:30:16:3a:
a7:36:91:a1
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBajANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
OTg3RkFSMTEwLwYDVQQFEyg0OUZCMEUxNkE4NUQ0MDVENUI5RjIzOTYwQTY5MDlD
MUQ3QzE1QjdGMB4XDTI2MTAzMTA1NDQ0NloXDTI2MTEwMjA1NDQ0NlowGDEWMBQG
A1UEAxMNNmFlNTgwNGYtNWI1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjs0D3N/Zyi+pytbD0fGHK5zIEm6UNeCk1SSSLZDL0gfkwZYOOqf+n/szEG
ZGwKHucqYYDsgIcGe9d1I6HSWkqaw2WzstW0W0s2mTZuVOIZSnpqcs02rwAj88zn
LChfMh2Sr/NGX0JDZzxBkz61vKHRuhXHtqR0Xy+im83Zgb27zFvYyvlqlUiSydYa
c0iZYaaaanA2xhp4YkHzOvgosrxMYeM9tGmaxhLuifYlTQrN8jNIrkxrWyNFxTvo
ZYSd4Y1x3Q/m3AA8GY61vviq4qqX6iZEOgqmGPD3Hj0WDrUTvWOg9WlcKhCeiECt
bnJf7yhOs4bCWBIaC8fsaFU9sEcCAwEAAaOCArUwggKxMB0GA1UdDgQWBBQYscii
nSaCkDpD2FHNRso374KSJDAfBgNVHSMEGDAWgBRJ+w4WqF1AXVufI5YKaQnB18Fb
fzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDk4N0YvMjU3N0ZENDI4NDQyMTFGMUI5NEM3MUU1Q0UxRDM4QjAvU2ZzT0Zx
aGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
U2ZzT0ZxaGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOTg3Ri8yNTc3RkQ0Mjg0NDIxMUYxQjk0QzcxRTVDRTFEMzhC
MC9TZnNPRnFoZFFGMWJueU9XQ21rSndkZkJXMzgubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBACHxFd1K3EqGn8jQuthOfCAq5si1KKzEwL9c
Q/+W4+mT2S8DQOr7VPY/hCmu1+kWDwYwJG7YzupmdD4wsZrC4jjkVAdX6cGcxQyp
NqNYVeJ2bbylvUFcYq/OBzAXmC87pfspSijffWcBQgtprERob9Cvh+LGWI3Ovcqg
SFig4fipeYS3geJs9NoEi6+BMZGXA51HjI4rnn6q9QNgMrx52RcTW5YprF1ozXQy
0F55P+4+mWOYn4pB1Ukzaewj9MENUmxRFiCGh8gA92VjZIqKjEq4G2XNs0REFapx
8CWeRC/dBY4Ae/ZRkbhz2k2xkZ8/76f3ol9msPwnzjAWOqc2kaE=
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:30 2026 by rpki-client