
Error: rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
File: fs54roG_QHKx3E9vt-bLkWYlKzQ.mft (raw, json)
Hash identifier: x17avjbB7hP88iE+keqGgaI8uphkAF84eGJ0lrQtrhs=
Subject key identifier: 2D:68:94:AF:09:21:9D:6E:2E:D0:17:DC:F1:E1:86:95:7C:F8:68:02
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Certificate issuer: /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial: 06B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
Manifest number: 06A8
Signing time: Mon 26 Oct 2026 02:41:53 +0000
Manifest this update: Mon 26 Oct 2026 02:41:53 +0000
Manifest next update: Wed 28 Oct 2026 02:41:53 +0000
Files and hashes: 1: fs54roG_QHKx3E9vt-bLkWYlKzQ.crl (hash: B2Zg2SknMJTQ3D1Kq4D3gCVUmGnCgJAALYDLPATmSyc=)
2: F2869CE2631511F1AB7816F4CE1D38B0.roa (hash: w337w6lFswzcMoF6XmD+yS8pjZh65kRgsDRKhjEyxsg=)
3: 05DD987EE12A11EEBF968C9D775412E6.roa (hash: GrTtmavb95kKmRvm7iTDLhvIm3hoIjSrT87MDqcdXU8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028AF, serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Validity
Not Before: Oct 26 02:41:53 2026 GMT
Not After : Oct 28 02:41:53 2026 GMT
Subject: CN=6adebdf1-e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:99:06:69:3f:dc:f3:34:f5:52:7b:e7:98:
64:3e:dd:ad:7d:68:9b:a6:b9:09:5c:5b:e0:2d:f7:
03:9a:e3:bf:e0:60:b4:f8:0d:b3:59:0b:19:68:e0:
82:b1:10:fd:4e:6d:bf:12:86:5e:dc:d0:a8:c3:cd:
53:8c:22:48:86:91:d8:71:0c:aa:22:6c:46:ce:ee:
db:e5:6c:31:46:10:33:d6:53:9a:52:ea:d8:cf:dd:
87:48:33:00:d2:bb:fa:cd:7e:fa:83:ec:05:5a:ef:
65:ed:94:82:8a:43:98:55:e2:0a:ba:6a:e3:29:f9:
f6:02:fe:85:94:65:ce:80:48:50:68:5e:94:df:a6:
9d:63:77:e0:60:24:b7:b5:7a:e6:0f:b9:1c:3a:89:
82:e8:81:8c:75:32:4f:91:11:83:2d:62:99:87:c2:
79:d1:2e:6e:4f:ae:db:3e:a2:23:96:d5:ba:2e:9f:
a4:e3:b5:3d:71:10:49:d1:a8:e0:c2:2c:e0:d4:a9:
28:22:86:25:b0:9b:54:30:19:7b:6f:2a:02:b2:cb:
57:e4:b5:a6:e8:30:fa:ab:2d:f2:82:ad:86:1a:84:
df:f4:c7:ca:96:65:36:64:35:b5:9c:3c:79:d9:c6:
8b:61:03:18:38:94:04:17:64:d6:53:60:b8:63:12:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:68:94:AF:09:21:9D:6E:2E:D0:17:DC:F1:E1:86:95:7C:F8:68:02
X509v3 Authority Key Identifier:
keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d6:8f:13:d2:18:60:6e:d5:5e:a0:5b:57:c0:9e:db:1b:17:
83:ee:a9:ff:18:bd:88:11:95:cd:6f:c1:f5:6d:af:d2:e4:4b:
7f:dd:58:6f:02:34:c8:d5:4c:71:04:5d:1d:8e:ab:7e:a2:c2:
e4:ed:46:40:5a:7a:d5:4a:2a:02:88:1f:f7:94:6b:00:16:a5:
54:56:51:d8:df:df:ac:83:ec:32:9e:6e:9c:d5:0c:6f:77:4a:
f5:bb:d7:6f:80:a1:27:4f:fb:80:86:99:06:02:34:df:6f:1e:
f8:4e:a6:a3:28:a3:fb:17:9f:ee:75:ca:42:9e:c5:9f:d6:6b:
a2:8c:74:fe:0a:e2:e0:24:05:ff:5c:c8:34:f4:20:6b:37:14:
41:da:72:bf:51:02:dc:bc:50:5a:2a:57:b8:0f:aa:27:cf:f4:
71:17:fd:46:18:42:f7:b6:6e:37:9c:ca:4e:15:2b:ca:d7:6b:
4a:9e:9e:86:9a:a3:3c:40:40:dd:1e:14:9e:76:bf:75:42:01:
6a:65:4e:04:0a:83:e7:cb:a8:de:a8:cb:43:50:65:13:a6:8e:
64:ac:a6:0d:db:c3:b8:bd:2a:af:a4:a3:c7:84:b2:32:ca:a8:
07:43:08:45:ba:f6:f1:09:13:2d:4a:60:ed:13:c0:5f:d6:5c:
f2:70:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:29:31 2026 by rpki-client