
Error: rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File: HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier: nHHHOxMnL7MnHaxsQXW38gaf5LlVpRysnyzTa7UEcko=
Subject key identifier: 47:45:90:27:87:C5:65:43:85:AF:B2:A0:BF:39:FF:81:FC:15:FB:DA
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer: /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial: 0507
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number: 0506
Signing time: Mon 26 Oct 2026 03:27:08 +0000
Manifest this update: Mon 26 Oct 2026 03:27:07 +0000
Manifest next update: Wed 28 Oct 2026 03:27:07 +0000
Files and hashes: 1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: qUCp/3i0dmaVd49Y8NI6Xz0u415ihKbonHHaWQ7qmxs=)
2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 03:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Validity
Not Before: Oct 26 03:27:07 2026 GMT
Not After : Oct 28 03:27:07 2026 GMT
Subject: CN=6adec88c-b4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:d0:4c:13:fb:a2:0f:f2:b9:ed:6c:75:48:
a0:a9:d8:cb:97:09:7b:5d:11:f6:d7:ab:6e:39:02:
00:1a:27:d7:60:74:40:eb:15:cf:38:43:ce:63:d1:
58:ce:8b:b4:5c:d2:ac:91:a6:03:ec:b7:73:a7:f3:
dc:bb:5a:0a:cd:5a:07:d9:e1:8a:7d:d8:2b:52:4b:
93:a8:b8:da:b9:7f:df:41:7a:69:a3:15:7e:47:5c:
7c:44:91:c0:3f:c5:ab:75:df:05:a4:ed:73:e3:15:
05:da:dd:a7:8a:04:fc:a8:3d:ed:85:61:09:96:d9:
ba:b3:99:c4:70:ce:f7:cb:f6:88:44:db:4f:de:79:
96:97:e1:32:8c:68:ff:7e:22:48:06:fc:a7:65:d8:
02:8d:7a:fb:7b:71:00:51:52:53:31:f2:56:6a:c3:
04:0c:69:ad:b0:f0:86:19:8b:21:11:c1:6b:4a:ec:
68:97:25:a2:e2:66:b6:7a:74:38:47:73:d5:38:40:
72:74:22:5f:98:d2:c8:6c:f6:2f:27:10:bd:6d:32:
15:a4:0b:70:65:06:e8:14:15:9a:e0:37:47:72:74:
48:bf:02:47:a4:ef:33:73:87:76:5f:b1:55:a2:5a:
44:60:99:a7:5f:1a:24:c7:95:4a:0e:74:18:8d:88:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:90:27:87:C5:65:43:85:AF:B2:A0:BF:39:FF:81:FC:15:FB:DA
X509v3 Authority Key Identifier:
keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c7:6a:37:3c:77:4c:9e:5a:a9:3f:15:b7:d4:da:ea:3e:47:
0e:dd:32:29:c8:a6:9f:a5:ae:fe:0b:d2:62:f6:80:cb:ed:52:
6e:ce:e5:1f:ab:fc:53:86:bf:ec:69:52:5f:f7:79:40:d6:dc:
b9:63:16:6f:c9:2e:fa:95:a1:63:3b:5e:19:36:a6:d5:e1:09:
b7:b4:18:3e:f8:14:58:48:76:15:07:a7:7c:e0:b2:51:c2:20:
f8:d4:d6:6f:ea:36:04:cd:58:1a:ed:e3:73:9c:c2:92:66:4b:
e9:00:93:d0:34:37:fc:73:2d:db:d1:17:7f:9a:ab:3d:9e:2b:
c4:0d:3e:38:8a:5f:cf:1c:e6:39:12:34:fc:84:83:9b:b0:3f:
ad:d1:4c:92:fc:8c:cb:a3:7a:31:89:20:03:9c:1f:6c:83:52:
7a:18:38:21:73:b4:5e:5a:ff:8e:e1:8d:ac:3a:3e:62:c5:4a:
58:d6:99:00:49:c8:1e:21:af:ee:03:ee:73:b0:46:45:11:41:
06:5d:ce:7f:d0:45:7f:d4:12:99:92:ba:2d:db:84:91:b4:f3:
a7:18:2b:9c:8c:6c:65:8c:8c:59:6f:f6:db:10:9c:a8:ec:92:
15:da:ea:e6:3a:53:26:ba:de:a9:14:52:0c:a2:f4:15:53:b0:
0d:ad:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:11 2026 by rpki-client