
Error: rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File: Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier: 1OksB7R71Q1KmFyz1q5vtVwereS3OP6Q/kiLoGjl7J4=
Subject key identifier: 62:EF:59:DB:78:09:DB:74:43:DC:A3:35:02:E6:7F:69:33:FF:26:2B
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer: /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial: 0610
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number: 0621
Signing time: Wed 28 Oct 2026 02:58:20 +0000
Manifest this update: Wed 28 Oct 2026 02:58:20 +0000
Manifest next update: Fri 30 Oct 2026 02:58:20 +0000
Files and hashes: 1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: 2fiTpOYkiSvsiwIH9mxOZ6WX4sUk6GRWIPUm3dPrJ/I=)
2: 171E9A8816E411F1A88C6BB9DAE4EC9C.roa (hash: vJQ48Pdad/mMI/K9zYFw3poQzcd4T1o72/4e9rHed8k=)
3: A572A8A416E111F19EA4E7ACDAE4EC9C.roa (hash: n7gCG2uQxTeIhVaPEx4goN+jApSMUA/WmCugEwzQCJw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 02:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552 (0x610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Validity
Not Before: Oct 28 02:58:20 2026 GMT
Not After : Oct 30 02:58:20 2026 GMT
Subject: CN=6ae164cc-05a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:e6:ff:ed:b4:dd:a4:46:0f:19:4a:6a:3a:
65:b9:9b:0c:91:af:97:aa:7f:2e:20:d2:57:59:2d:
f9:eb:6e:4b:be:04:e2:73:ef:2c:bf:f4:17:f7:a7:
6e:ae:c7:93:76:0a:b1:a1:2f:53:24:64:d7:13:44:
f7:e8:61:91:28:24:c9:48:3f:e4:a8:2a:84:96:ef:
1c:44:5d:86:2b:61:74:fb:06:29:81:cf:47:85:9f:
fb:bc:7b:da:66:5f:0a:e0:75:d4:c4:52:0f:4f:1f:
9e:91:f4:b6:9c:69:5e:02:cf:9a:5e:9c:a8:06:13:
26:80:32:47:51:08:b2:c9:b8:3d:16:65:33:62:b6:
07:07:c2:2f:c2:8d:54:6d:72:68:6c:d9:48:1a:ff:
ca:94:d0:f2:a9:41:b5:7a:f2:ec:14:26:31:69:74:
bd:4a:bc:52:8a:6e:c4:68:5f:91:67:77:57:11:ff:
9b:7e:f5:b6:08:17:e3:06:b0:aa:30:8b:ec:1d:10:
66:4e:ff:3a:c1:08:50:e6:2f:a2:8f:80:60:77:7e:
42:3e:67:67:11:91:3c:26:5e:98:f5:fc:34:c1:b6:
af:01:84:0e:48:2b:6f:22:0a:6f:ea:1b:6a:e7:c5:
e7:a4:b8:86:fc:88:e0:17:1c:74:7e:29:8e:3b:cb:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:59:DB:78:09:DB:74:43:DC:A3:35:02:E6:7F:69:33:FF:26:2B
X509v3 Authority Key Identifier:
keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:07:1d:a0:fc:16:05:f9:0f:bc:ec:34:55:c5:dd:1a:d4:
b7:60:0b:a4:88:21:fe:cf:28:7e:b7:78:df:ea:4d:b4:92:fb:
d8:3c:ab:8e:ab:4e:e6:df:f8:94:84:52:c2:50:ab:a1:17:2c:
58:9c:f4:ac:75:88:72:54:2e:e2:e3:cf:89:ef:4f:25:72:36:
72:36:47:86:b8:9c:34:37:f7:90:af:47:1d:c3:ec:08:cb:60:
e0:17:2c:e1:29:6d:81:ab:75:1b:fd:2d:b2:73:81:e7:fd:85:
04:32:0f:1f:3c:77:e3:98:b9:15:db:60:e5:df:7c:f5:97:6d:
0b:7f:67:62:6c:a1:4f:28:0c:94:42:29:93:47:4b:86:bb:4c:
27:73:1f:69:73:c5:bd:7f:80:28:de:3f:9d:d1:a7:2f:c3:ea:
1e:ae:7e:cc:0d:59:fe:cd:ec:4d:a8:08:a9:99:bf:64:08:e1:
83:6b:0e:ee:62:4d:a8:69:bc:52:3d:ef:71:1e:b2:3c:cb:b0:
36:91:b3:35:cb:eb:49:85:84:54:1a:17:74:9b:75:b8:ed:8d:
fd:e7:e2:46:84:e6:1f:62:e8:7c:ea:4a:29:07:69:d4:9e:d3:
24:a0:8d:e6:16:f8:54:5b:bb:f0:83:b1:4e:76:da:9a:2c:67:
23:76:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:49:56 2026 by rpki-client