
Error: rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File: YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier: Ew81Oc8ZBLgZPhX4oQGCm1MCllu3SPzvE+EpuWtl95g=
Subject key identifier: D1:1D:D2:A1:0F:E4:07:91:DE:BE:B0:DA:AA:9B:58:49:22:E8:D8:5D
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 06AC
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number: 06A3
Signing time: Tue 27 Oct 2026 02:41:03 +0000
Manifest this update: Tue 27 Oct 2026 02:41:03 +0000
Manifest next update: Thu 29 Oct 2026 02:41:03 +0000
Files and hashes: 1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: qdcOlcKqAHx0TIcK/5/42LtJDjbp5oRfBkIrV8G+jME=)
2: 8E8DDE1C6FD111F1A724E610CF1D38B0.roa (hash: 1KMlFaEajdNRT3rBNkJK3leEidm1bkbbNhMaz2bl61o=)
3: B715016C631511F18D69FFF3CE1D38B0.roa (hash: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=)
4: 0201DC14657711F1B151DFE6CE1D38B0.roa (hash: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Oct 27 02:41:03 2026 GMT
Not After : Oct 29 02:41:03 2026 GMT
Subject: CN=6ae00f3f-904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:ff:53:70:a8:e8:38:c0:b7:5e:2b:aa:16:
37:90:65:a2:18:2f:6e:45:49:4f:07:d1:96:2d:1e:
84:10:da:ba:5e:bc:da:68:60:66:e3:ce:93:e2:e6:
84:4c:cc:7c:5e:bc:a4:88:d7:3b:b0:53:63:9b:a0:
5a:56:f1:ad:41:32:4e:7d:f9:62:1e:5c:c3:29:aa:
0b:9b:1f:ef:4d:63:fa:b5:bb:a3:d6:e7:01:8f:48:
31:48:1c:22:ac:64:c9:be:11:c5:c0:2c:dc:32:53:
f5:fb:fd:8c:f8:5c:3d:9d:fb:63:f8:47:bf:f2:37:
7e:11:4b:7f:1c:06:e5:6a:be:14:31:6b:f5:6c:77:
2c:a3:d6:c5:db:a9:10:9f:8a:cd:c9:29:1e:5e:2c:
1e:27:d4:f8:42:f0:b9:e0:b2:f9:7a:66:2c:64:4d:
f4:4b:94:70:23:1e:85:99:5d:fa:d8:c9:90:a2:74:
30:50:3d:00:b4:b5:a9:30:a4:b8:f7:4b:29:ec:75:
ba:23:72:5d:49:15:fe:3b:98:9e:3b:90:1d:2c:c9:
86:65:76:90:1c:58:51:3e:90:7e:26:d9:0a:02:c7:
8d:3c:c0:5e:3f:ae:c0:3d:25:b9:bc:04:ba:82:79:
b3:e5:87:0f:60:99:3e:2a:ea:cf:ec:2c:67:19:c9:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:D2:A1:0F:E4:07:91:DE:BE:B0:DA:AA:9B:58:49:22:E8:D8:5D
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:0d:43:5b:e2:cd:ee:6c:97:26:45:04:70:70:bc:bf:d7:52:
9f:eb:53:f7:c0:61:b7:ee:54:0f:2c:70:6b:98:8b:e8:fd:14:
ae:5f:d6:ce:29:35:ba:8a:47:74:bf:4d:a2:19:9a:3a:e9:cb:
29:45:f0:dd:21:d6:82:49:49:5b:76:44:c6:17:c1:d7:34:31:
8e:a5:6c:c7:11:9c:f6:eb:d4:b5:88:99:18:dd:29:74:ef:44:
42:cd:07:c6:e9:ab:41:e7:b0:86:b1:09:b9:1d:0a:88:0b:68:
86:e6:c3:c8:93:50:b8:1f:38:9f:14:e9:92:cc:9b:86:4e:63:
23:4f:15:a3:5b:af:f5:69:a4:cf:1d:3d:ff:a9:d6:79:73:d1:
63:8c:f8:17:00:fc:93:cf:7d:b5:40:00:a1:2b:49:af:f3:c6:
c4:03:a4:85:f7:42:cc:45:03:ab:68:51:47:fc:a1:ad:48:1b:
c8:ee:64:14:33:46:83:d6:9b:ef:53:64:f8:75:0f:77:ee:d8:
27:e5:5d:53:80:6e:63:2f:29:30:51:f9:8d:f2:47:6f:f5:46:
31:63:7c:fe:8f:73:4e:51:1e:eb:3d:f3:37:ec:fa:b3:68:35:
95:7e:47:3a:49:23:3c:79:26:43:fa:b2:d5:af:29:34:93:65:
08:9d:ae:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:05:51 2026 by rpki-client