
Error: rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
File: MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft (raw, json)
Hash identifier: 1Nu96N+8m7S9O/tH4R+vOuG+1IzBWywPhjC9htC4lyw=
Subject key identifier: FE:08:46:C6:44:F2:CF:39:8C:C0:EA:FD:A2:5D:AD:F9:0D:3F:9D:EB
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Certificate issuer: /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial: 0323
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
Manifest number: 031E
Signing time: Tue 27 Oct 2026 04:27:21 +0000
Manifest this update: Tue 27 Oct 2026 04:27:20 +0000
Manifest next update: Thu 29 Oct 2026 04:27:20 +0000
Files and hashes: 1: MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl (hash: mo95ONb3Bs4oeRWzyR5WhSBRA1MlKdQpPGtBjPWqjys=)
2: 26FC764A6FAC11EF8469D197762E951A.roa (hash: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=)
3: B25B5AD66FAB11EF87286395762E951A.roa (hash: vwW65Nr7lh1XhWegso15AlnrJBnrQ6EFgBiPcl1lNqQ=)
4: D16713486FAB11EFBBD4B095762E951A.roa (hash: 8SVqRCmZw8s4aV8wC2vczr/9L/GkHhk4+czM91U/KkQ=)
5: ED98BED66FAB11EF9A20B695762E951A.roa (hash: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=)
6: 099CAAA26FAC11EF9F68F695762E951A.roa (hash: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Validity
Not Before: Oct 27 04:27:20 2026 GMT
Not After : Oct 29 04:27:20 2026 GMT
Subject: CN=6ae02829-cbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:56:d4:3a:a9:c9:a8:a3:98:1a:56:c9:3c:
ca:99:08:22:cc:40:f8:f0:0e:86:84:7f:27:54:90:
b7:dd:06:77:81:d1:c5:79:2b:17:33:63:c2:74:ab:
22:17:5b:3f:e0:ed:f5:56:c7:51:4f:e7:f4:65:90:
8b:47:c5:2f:ef:71:d4:3a:85:ad:3f:7b:4d:22:4b:
ab:fb:e3:c4:38:86:1c:96:72:37:98:11:83:a1:f1:
91:9f:1c:2c:c1:3b:7c:a4:86:fb:f5:88:c1:d5:d9:
9d:a1:e9:45:9c:0e:78:5d:b2:98:07:0f:a8:1c:fc:
55:79:01:b0:00:cd:5a:0b:f2:10:74:bb:f5:0b:15:
60:d3:c1:21:25:3c:11:6f:bd:29:f0:06:2d:fb:fa:
8c:6d:c2:e4:45:83:16:bb:b0:52:3e:fe:bb:f0:ab:
a0:fd:f3:ba:c7:e3:cc:46:6e:80:24:d9:f2:5f:e3:
8f:5d:02:6d:50:f4:d7:36:c2:8e:c7:ac:58:4f:82:
0b:46:92:3e:bf:49:35:05:bc:80:15:a2:c5:ad:d6:
8f:20:eb:e5:73:c7:44:04:02:0f:54:3b:a3:db:1f:
47:6e:0b:4a:69:61:64:7f:b2:ef:87:f0:2c:dd:d1:
aa:d7:d0:c9:be:c4:bb:2e:07:1b:f8:91:30:9e:43:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:08:46:C6:44:F2:CF:39:8C:C0:EA:FD:A2:5D:AD:F9:0D:3F:9D:EB
X509v3 Authority Key Identifier:
keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:69:25:89:ee:60:3f:7a:7f:02:e9:99:7b:06:7e:8a:17:
48:b0:d3:e7:b3:b9:f5:76:37:9f:44:16:fd:8c:01:6b:b8:15:
64:d0:b5:73:ee:88:24:7b:6c:cf:56:5c:39:96:a5:f3:28:aa:
77:d6:5e:b5:e7:c5:cd:bc:65:52:e9:cc:85:31:6a:16:cf:7f:
72:a8:91:18:a8:af:35:8b:ee:55:82:36:c1:0d:da:e9:34:12:
75:d0:68:ec:1d:8f:ee:64:38:d3:25:e4:17:bd:d1:cd:47:29:
95:c6:dd:98:0f:9c:43:4e:c4:15:47:f4:c1:f6:d4:8e:3a:83:
ce:ae:a6:00:3d:5d:42:3e:6d:46:66:8c:a7:00:e9:55:c7:a2:
81:dc:1a:1c:91:8e:bf:88:e1:03:96:d4:9e:91:0d:ac:b0:32:
55:d5:42:5f:b9:a6:88:b7:af:72:08:1f:ca:8e:d5:82:4f:c1:
d8:4d:c3:d5:8a:c2:50:7a:0a:35:63:b0:f4:09:fe:a9:84:30:
84:18:65:83:8d:a2:fc:83:1d:e6:f8:08:e0:b9:bc:d8:a4:99:
56:10:33:45:01:12:d8:97:04:d3:57:67:ab:24:73:8d:d9:4b:
fe:07:46:e8:7d:4b:9a:d9:f6:42:11:8e:52:d6:0c:ad:90:f0:
5a:c4:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:42:22 2026 by rpki-client