
Error: rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
File: VibDpyL2myOgzqq4vq9tsK0kQw8.mft (raw, json)
Hash identifier: Ci8izmBZySTI8o6Dt+VKJsFjbliBey3IQfcapv65uWc=
Subject key identifier: 09:EB:AB:F7:3B:7F:B4:41:04:91:BE:18:DB:37:45:E3:0F:61:B3:36
Authority key identifier: 56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
Certificate issuer: /CN=F36EA220AF/serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
Certificate serial: 16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
Manifest number: 15
Signing time: Sun 25 Oct 2026 06:00:28 +0000
Manifest this update: Sun 25 Oct 2026 06:00:28 +0000
Manifest next update: Tue 27 Oct 2026 06:00:28 +0000
Files and hashes: 1: VibDpyL2myOgzqq4vq9tsK0kQw8.crl (hash: +s8pAFyeGJIRsj2MRi1A3jm36V55YgH1UFjU9PotZCA=)
2: D7FAE8C6C16911F1AE6DCCDDCE1D38B0.roa (hash: oF1QD/EnlryIIxrUvh7rJqBbz2N3toUNpal/yvqhuxs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EA220AF, serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
Validity
Not Before: Oct 25 06:00:28 2026 GMT
Not After : Oct 27 06:00:28 2026 GMT
Subject: CN=6add9afc-c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:e7:aa:94:df:4d:57:da:54:a3:28:20:70:
ce:bf:04:6d:7c:5b:b4:8f:24:43:65:9d:13:82:7d:
3e:f5:91:41:8d:e8:88:b7:35:d2:9d:61:f5:54:b9:
46:4c:75:9a:3f:dc:fe:f6:4a:9b:7e:4e:6f:ca:5c:
bf:a1:f3:ad:96:8e:d3:cf:a8:d1:55:d0:ac:bc:ea:
52:b7:f0:4c:2b:64:e8:d2:50:78:6d:c4:58:a3:a1:
95:d3:b7:b7:5d:9b:4b:18:25:b2:e3:2b:b0:5d:b5:
8d:8c:67:be:33:34:71:88:ad:0a:c5:d8:b1:d0:59:
5d:7f:4d:04:f8:bc:a5:2d:92:32:e9:b0:0f:6e:33:
b1:76:ec:11:4e:73:3a:1b:c6:89:1d:1d:a2:79:00:
08:43:d3:8a:4a:07:af:e2:bb:71:ec:6f:ae:0c:94:
bc:e2:d7:28:f7:c5:98:ed:50:8a:a4:2f:a8:b6:d6:
90:a0:4d:79:8d:89:d0:42:36:04:28:08:50:bd:fb:
8a:40:b2:ff:1a:d2:8b:fa:79:80:92:85:29:03:57:
b7:36:59:d5:fa:79:a5:cd:99:0c:4e:70:69:97:b1:
96:f8:e5:98:f2:54:d9:1d:7c:af:48:10:9e:35:20:
46:ec:36:29:65:fb:b1:bf:28:3b:80:d6:87:2a:52:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:AB:F7:3B:7F:B4:41:04:91:BE:18:DB:37:45:E3:0F:61:B3:36
X509v3 Authority Key Identifier:
keyid:56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:2b:c4:eb:d8:96:fd:41:0b:24:5f:69:91:7e:fc:b9:21:3f:
51:03:a5:95:e9:b1:5c:4e:31:df:39:88:92:8f:2d:cf:76:5d:
d1:76:77:ce:cb:17:6e:a6:38:bf:c7:2a:52:f5:d4:00:f2:4f:
ce:87:db:92:37:bf:f8:d7:8d:8e:7b:9e:d2:8a:21:87:e9:4e:
b2:98:50:04:70:ab:3b:c0:07:cf:61:14:11:bf:3c:f4:c7:98:
f2:a0:25:1f:da:e6:44:94:e0:0f:53:5e:3a:9d:0d:8e:95:aa:
be:34:e7:e9:10:90:1f:15:61:77:d4:24:a2:2c:ca:5e:bf:b2:
7a:52:f7:77:90:74:7d:fa:e3:93:e2:2d:84:65:a3:de:33:78:
fb:1f:80:dd:f7:7c:da:7e:88:4f:eb:8e:94:84:0e:91:d7:34:
d5:66:0a:42:4f:28:4a:b3:af:94:15:86:5b:83:e6:9e:19:4d:
95:f8:8f:fb:f1:7d:a5:a6:be:21:90:fe:13:41:b7:77:f4:58:
62:7b:32:04:e0:67:8e:6c:5d:a6:c6:78:86:2c:08:79:9a:a7:
83:48:7c:8a:ec:93:c0:c8:0a:93:51:2d:a1:95:f3:61:43:a5:
14:8c:75:d9:11:53:df:c0:e2:1f:96:f0:4e:82:c9:aa:07:9c:
f2:9c:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:33 2026 by rpki-client