
Error: rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File: TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier: YjwtAgB1aj+bM4U/OEBgRoefNnBLMEtDWW1s5FW4FhY=
Subject key identifier: 95:7A:16:CC:0B:32:5C:29:43:36:9F:F5:0A:69:3E:88:22:15:7C:14
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer: /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial: 0268
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number: 0262
Signing time: Sun 25 Oct 2026 04:49:27 +0000
Manifest this update: Sun 25 Oct 2026 04:49:26 +0000
Manifest next update: Tue 27 Oct 2026 04:49:26 +0000
Files and hashes: 1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: SM5nk3Sbt24Igk5J4VSDadXUcFe6GOwF7/2cygFVG2w=)
2: BFA5C1B46EE511F182B2B000CF1D38B0.roa (hash: RHRxsNRvUbA0pfWNBDtdMx+zqQGU1sO3I81rRWeYWoQ=)
3: 186A261E6EE611F19A57FD00CF1D38B0.roa (hash: xAWYoSxpWYZMxcb1kJT35Bivi41+IMGlrVrYofRUoZM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Validity
Not Before: Oct 25 04:49:26 2026 GMT
Not After : Oct 27 04:49:26 2026 GMT
Subject: CN=6add8a57-20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:72:7c:1c:0f:b0:4b:48:ba:b3:3a:84:f3:
51:70:4e:c7:12:7b:8b:4a:5a:9b:93:1a:ac:5d:a8:
32:42:7f:89:53:83:14:1b:f5:a9:21:66:78:c5:ab:
e1:05:de:39:d0:4f:22:a5:67:8c:cc:8a:ce:d1:68:
6b:66:7f:d8:17:b5:89:df:0b:4a:e6:5b:25:45:73:
59:dd:06:ab:bf:75:1b:d7:17:1b:58:b1:de:34:3d:
d0:3d:3f:9d:3e:92:1c:10:e8:84:91:af:be:ec:4f:
9e:92:e5:18:e9:83:85:d6:3f:ff:3f:34:70:58:38:
b9:8d:a3:58:33:5b:97:d8:de:90:f8:9c:27:a2:0f:
ad:9c:36:24:73:6c:22:b4:ba:dd:a4:8b:60:1f:95:
57:27:8a:8f:79:26:66:b6:00:7c:06:06:66:35:03:
6e:62:09:33:11:8e:d2:c3:cb:2e:31:38:b6:14:4c:
3f:b3:f9:74:22:fe:57:98:6f:a9:75:2c:83:9b:1e:
e5:45:c8:6a:37:fd:7d:5f:18:5d:fe:a0:21:fe:78:
ef:60:11:74:c2:80:1c:65:de:c9:6f:20:02:aa:d7:
cc:09:2f:bf:9e:05:7f:45:37:55:29:ed:40:3d:0e:
13:98:1f:aa:c9:fc:2e:6c:94:3e:81:1b:a2:a7:3d:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:16:CC:0B:32:5C:29:43:36:9F:F5:0A:69:3E:88:22:15:7C:14
X509v3 Authority Key Identifier:
keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:5f:6c:1a:04:ef:fc:26:3a:5d:e1:e3:5b:b4:55:99:11:52:
d2:69:17:57:b2:02:9f:75:5b:2c:db:f3:ba:23:43:5c:70:79:
6e:f5:a0:40:41:26:2c:7c:72:8f:bb:16:84:95:8d:b3:49:ee:
d2:1b:74:10:a5:59:db:0e:29:2b:40:49:6d:ec:dc:eb:18:79:
8c:2b:2d:31:e6:f7:a2:41:4e:e0:cc:a2:88:37:74:61:3c:dd:
7e:7f:9c:51:1f:1f:51:98:96:24:f6:cc:91:e5:72:84:93:b9:
35:7b:d1:9d:9f:6b:20:33:8e:cc:e5:80:0a:09:d5:2a:3c:08:
7f:5e:73:27:83:f4:de:5c:fe:39:02:a1:95:b4:f0:3f:4e:09:
61:aa:46:f1:b4:fe:86:1b:00:c1:77:49:da:e7:4a:3c:be:d7:
45:bd:85:60:73:c6:8c:db:2e:41:76:1f:57:db:54:ff:67:4a:
4f:d8:8c:a0:0d:ac:66:8c:86:be:35:c5:4a:be:e4:d4:e2:36:
08:6f:90:99:43:ce:db:6d:15:92:bc:30:7f:c9:4e:c2:c4:da:
2b:21:c2:dd:87:cd:90:f3:8d:74:7d:75:95:8e:f1:ed:98:b3:
61:d5:b7:60:3f:23:9a:ab:30:a6:c2:c6:ba:e9:65:e0:11:d4:
c3:6e:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:58:01 2026 by rpki-client