
Error: rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
File: e-SeL48taNn-5zmG1EeTdhak7Yg.mft (raw, json)
Hash identifier: cLeSOJ90J9CW1JZRtNckwHokI4UceM23+pkmYDqVHrc=
Subject key identifier: 55:B8:15:3B:1F:6A:F3:69:3E:87:7B:3B:BD:CA:2F:8E:74:1B:E0:41
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Certificate issuer: /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial: 3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
Manifest number: 39
Signing time: Thu 10 Sep 2026 05:44:26 +0000
Manifest this update: Thu 10 Sep 2026 05:44:25 +0000
Manifest next update: Sat 12 Sep 2026 05:44:25 +0000
Files and hashes: 1: e-SeL48taNn-5zmG1EeTdhak7Yg.crl (hash: /NLlnvFcqoBQ9REm9lm3L4+6L4b7aD67i8CggTlMzr0=)
2: 9E812784844911F1AC6FBF0FCF1D38B0.roa (hash: Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=)
3: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (hash: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 05:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Validity
Not Before: Sep 10 05:44:25 2026 GMT
Not After : Sep 12 05:44:25 2026 GMT
Subject: CN=6aa243b9-f038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:a0:af:cb:b1:01:a0:d6:6e:87:7f:ba:c7:
c2:44:eb:85:a4:6b:16:7e:3e:39:c0:24:07:d3:6d:
ca:17:07:75:be:97:58:d6:b9:a5:67:62:dc:c9:77:
b5:7f:66:e4:1e:0e:5d:33:d6:9c:99:95:55:e8:44:
67:2c:5f:5b:c6:eb:ff:e2:98:ea:c6:9a:5d:5d:1a:
fd:a4:8a:a9:f5:04:7f:aa:bb:16:18:f1:3f:7c:22:
2e:67:72:dc:da:e1:d2:a7:31:bd:53:56:9e:c2:08:
2a:3c:1e:7e:46:42:86:30:b8:d2:22:3a:fd:fb:37:
c2:6a:aa:e6:56:27:db:02:fb:72:9f:83:36:2d:63:
ce:77:e4:23:2d:00:eb:dd:8f:76:b4:1c:ee:7c:f3:
38:c3:69:37:0c:44:46:68:0d:8d:09:b6:08:41:f8:
ce:15:7a:d1:eb:99:55:73:3f:07:c5:ec:10:87:ee:
0c:df:8f:4f:8b:89:29:0d:d7:d2:c7:74:33:ee:98:
69:2c:2c:2e:3a:67:94:89:94:f3:62:3c:9d:89:98:
f6:47:2d:45:4a:1a:44:fa:28:60:bd:df:c2:94:fe:
8b:7f:8e:53:da:09:22:ac:9c:6c:a1:30:25:99:ab:
fa:0c:94:a4:ae:1a:07:fb:d0:54:43:9e:3f:aa:98:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B8:15:3B:1F:6A:F3:69:3E:87:7B:3B:BD:CA:2F:8E:74:1B:E0:41
X509v3 Authority Key Identifier:
keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:06:a5:da:11:4e:75:0c:fb:8f:78:de:25:24:e4:33:d1:ac:
08:12:8e:8d:d2:90:be:89:17:e0:c1:3d:70:a2:76:01:e8:aa:
df:f6:43:fb:9c:8f:3f:36:18:e5:8b:00:13:67:ba:c4:51:c2:
9d:0c:43:36:20:69:96:7c:92:d3:8d:ef:dc:8c:56:ec:19:8a:
11:87:83:33:04:ed:f5:b6:1a:b7:d7:ce:2c:b3:5e:0c:58:cc:
00:e1:cd:8f:10:4f:3b:1b:61:58:e9:b6:2f:d3:7b:fa:02:4f:
3f:a6:27:81:15:65:8e:2f:aa:d1:f7:83:5d:2d:a1:1f:31:d6:
a2:c2:c4:b5:d9:18:73:1c:8f:0d:e0:81:1f:a5:b2:fa:66:74:
7b:15:89:f4:97:28:67:df:f0:fa:66:5e:19:0f:7b:59:c0:85:
70:71:db:d1:f3:6e:d1:96:ea:28:7a:a4:09:c2:77:fd:6d:76:
9f:aa:4f:a0:31:fc:c5:84:17:60:ed:5e:dd:86:10:50:e3:e8:
28:2f:3f:31:08:04:63:bc:0c:8e:4b:13:c5:66:65:ff:da:4f:
f8:66:28:14:e5:29:2b:50:bf:b5:07:1f:f7:8d:bb:5e:e8:63:
2d:03:eb:4d:e9:1f:6c:37:4e:77:c7:ea:12:43:37:70:9b:a8:
66:2e:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:20:37 2026 by rpki-client