
Error: rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File: e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier: sdiT+L+8dxXLvvjYQoDfswYfcQJoRYvEZyZ4fmFjtkY=
Subject key identifier: 02:A1:63:33:6E:7A:A6:ED:29:0E:46:8B:0E:CE:E2:DE:62:06:C3:BB
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer: /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial: 0386
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number: 0382
Signing time: Mon 26 Oct 2026 04:15:14 +0000
Manifest this update: Mon 26 Oct 2026 04:15:14 +0000
Manifest next update: Wed 28 Oct 2026 04:15:14 +0000
Files and hashes: 1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: vJ2NNo9fLDLDifnrZiJPjjd2pQezwmQ9LXVQRFR3Eeo=)
2: E9537D34D68E11F0804EF19CDAE4EC9C.roa (hash: Yi7WlpDmrDcsEUphgJQV/qjToEbUEGi7uC9aoYVJh9s=)
3: 3E1DF6B4D68F11F0A85E0F9FDAE4EC9C.roa (hash: 7mBMpJhGiYcULHhIUFAn1tr0Xgd9cXpIwxF3yIIhjfE=)
4: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 04:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Validity
Not Before: Oct 26 04:15:14 2026 GMT
Not After : Oct 28 04:15:14 2026 GMT
Subject: CN=6aded3d2-1893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:36:f8:9c:37:bf:bc:17:a8:0b:5d:88:b6:
b3:47:45:c0:c6:99:e1:eb:12:3c:00:6c:fe:29:15:
ba:5e:61:86:b5:6a:35:f7:e1:a2:8d:c6:7d:30:ef:
d6:3d:41:e5:da:92:f3:63:7a:c2:d3:c5:58:67:b8:
d8:3c:db:35:ad:63:17:12:1f:e5:d9:56:7d:bb:9d:
71:69:44:63:ad:e1:fa:ab:49:51:2c:26:f6:6f:4b:
39:9f:e7:21:3d:f1:65:b9:63:fd:08:36:58:4a:a6:
d2:2c:32:f4:1d:79:dc:16:8a:0f:be:d1:84:1b:ee:
e4:1c:56:db:8b:a7:5e:a2:63:e5:8d:fd:38:42:98:
2e:ad:aa:e1:03:72:f4:79:3a:f0:af:be:95:4f:8b:
15:4f:df:ff:80:eb:08:c1:84:c1:b4:36:80:23:34:
81:23:94:53:11:42:11:6c:42:74:2f:ba:18:37:19:
34:d6:1d:e5:0f:91:cb:49:f3:24:9c:a9:3d:36:76:
78:2d:e8:9e:8a:97:55:fd:10:48:31:76:55:6e:f6:
d1:c0:fd:f8:4f:63:22:2d:3c:e6:d7:12:2b:2a:ad:
81:26:ea:89:f5:1a:d6:32:9a:07:47:5d:53:85:15:
55:0e:a0:74:6c:52:cb:dc:dc:e3:e0:77:6a:57:06:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:63:33:6E:7A:A6:ED:29:0E:46:8B:0E:CE:E2:DE:62:06:C3:BB
X509v3 Authority Key Identifier:
keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:1f:62:6e:a1:0d:78:17:10:21:b1:91:ef:49:c0:f5:5e:2b:
26:8c:f4:a7:79:6e:be:f8:41:32:46:b1:f6:8f:c1:f7:ba:f4:
29:4f:d9:ea:64:b9:c6:17:74:c4:ae:4d:3a:11:ff:80:57:9d:
32:dd:c6:ef:29:83:09:99:b0:6d:de:0d:2f:40:bf:36:b0:ac:
24:f4:55:8a:95:ea:43:19:49:e3:ca:8b:30:c0:7b:5e:f9:bc:
0e:ba:1f:ae:70:d8:51:20:a1:ad:c6:03:a6:c6:f5:93:f4:a4:
43:2b:66:84:1c:23:77:42:b9:63:cc:88:10:ca:2b:ca:62:40:
f4:ad:61:42:1b:1b:b5:28:7a:e6:32:6f:4d:73:29:79:11:74:
32:47:f9:79:c3:b6:33:44:28:56:5c:bd:1d:22:95:79:34:43:
5f:a1:b9:59:58:ae:47:a0:62:45:c1:b7:d6:68:01:ff:0a:c8:
c6:0d:1f:93:bc:a0:52:1e:b6:46:3f:22:84:ed:27:f4:52:e1:
99:25:97:c2:f3:ac:e5:a0:39:01:a8:5c:3d:6e:e5:33:1c:37:
63:76:0f:28:d0:ab:31:d0:1a:68:27:d4:c0:a7:29:71:5f:ce:
c3:06:4a:7a:40:bc:d1:8d:c4:7f:86:19:bf:6a:91:59:26:51:
b0:43:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:26:21 2026 by rpki-client