
Error: rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier: ac1MypVINe5bjM5NR5fYxfmzl+fxvPQc8kNiUpMt3qc=
Subject key identifier: B3:C9:EE:F8:9D:20:4B:20:E4:41:B1:09:E5:1F:74:EE:47:D5:E1:23
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 05C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number: 057A
Signing time: Mon 28 Sep 2026 06:35:20 +0000
Manifest this update: Mon 28 Sep 2026 06:35:19 +0000
Manifest next update: Wed 30 Sep 2026 06:35:19 +0000
Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: hqAFRhWNNDg1WW6DCzPoctB1GdogQ5GLBp48ardqcio=)
2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
3: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
4: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
5: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
6: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
7: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
8: 1E9B49149F9711F19432EEC7CE1D38B0.roa (hash: 423oc5wMsXl0L9ZTq1G1yNiSD/6xYsvAeXUOalOhMmE=)
9: 4FBF1C72AD0311F1862DB40FCF1D38B0.roa (hash: t6ex/8mwd18GaETkmAnTRn/QBwkoSJmWpGTfIaWpmQg=)
10: E44287A0E1A511F09B8305AFDAE4EC9C.roa (hash: i0YqrCk3d9f/RPOZqg04E/KSYN7esrzd1BRKHLmfxzk=)
11: C2CCB704BB0611F193CEF5B2CE1D38B0.roa (hash: wv9rMH8t0kkY6Ne1yt+PsSOMWEjCuZeqg6y2tFrf2nQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 06:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Sep 28 06:35:19 2026 GMT
Not After : Sep 30 06:35:19 2026 GMT
Subject: CN=6aba0aa8-c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:ba:02:45:53:4a:0a:df:76:f5:4d:6d:48:
83:56:49:ce:44:e1:39:de:6d:3a:5b:28:a3:1a:45:
bc:ba:3d:00:47:fe:9d:e5:42:09:7b:0d:4a:26:ac:
6f:8f:69:96:34:c3:b4:5e:b0:61:0a:5e:3d:49:ec:
07:fd:16:b3:cf:73:62:a0:2c:67:58:ee:97:94:9d:
07:2d:dd:ea:42:e2:f6:b4:88:97:37:eb:51:08:9d:
c6:c8:c7:c1:4e:1c:e0:46:4e:c2:1b:79:77:c3:27:
2b:e8:b7:1c:10:e9:95:13:00:4d:fe:45:4c:44:9e:
45:14:f6:55:a7:8c:77:26:29:b6:5d:98:cc:c5:8a:
c8:b8:f6:f8:2d:fd:29:7c:34:70:8b:5d:6a:44:a2:
68:ed:77:17:98:7e:1c:05:e8:5e:4f:48:cf:1d:1c:
80:51:3a:18:ac:84:42:1a:64:24:c1:56:d4:3a:47:
c0:9e:71:ea:da:30:e0:c1:e2:3c:50:83:5d:99:bd:
51:23:c0:45:67:73:e6:c1:e3:d7:cd:21:05:e3:aa:
08:bb:9b:a4:5c:0d:18:39:9a:55:32:4b:0d:af:ee:
cd:a9:da:6a:48:3c:9e:4d:8e:9c:8b:58:6e:4f:24:
c4:d9:dd:82:ba:7b:fb:f4:bf:60:af:ee:5d:b6:9a:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:EE:F8:9D:20:4B:20:E4:41:B1:09:E5:1F:74:EE:47:D5:E1:23
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:12:c9:3d:7f:8d:a7:3d:3e:43:6c:40:d9:f1:f6:a2:27:09:
62:61:56:4c:d1:29:37:cd:ca:8c:f9:3d:c2:9f:e9:84:b0:e8:
9a:61:ed:b4:fa:37:5e:a7:8f:14:90:92:c5:cf:f8:fd:aa:cd:
73:d0:0c:05:a1:83:bb:e5:37:04:1e:e8:9a:27:8d:6c:ab:c2:
d6:99:30:a8:91:dd:15:f5:5f:31:90:6e:87:c2:c0:88:3c:c7:
d0:de:a4:df:df:a0:44:f3:c7:fc:09:ec:38:ff:81:65:50:57:
76:96:3e:4f:09:f9:c7:27:ef:a8:cd:d5:74:8f:a7:97:3c:14:
1e:b9:d6:21:85:32:8d:c0:77:72:35:af:74:1b:00:2f:d7:36:
e2:34:d2:2e:0f:d4:9d:01:f8:61:9f:96:eb:0b:04:63:24:ff:
6a:2c:e0:c3:a5:e7:b1:d2:8c:db:22:45:c0:1a:b4:23:5b:f6:
27:28:52:27:92:24:bf:4a:f3:b3:80:12:92:74:a0:ba:b5:2f:
10:68:cb:71:7f:20:e7:61:99:c3:4d:e4:73:1b:48:e7:a2:22:
6f:fe:11:66:81:dd:d5:4a:fc:4c:b7:62:fe:bf:b9:fd:69:c3:
10:2f:59:ca:78:dd:22:be:a0:41:7d:83:59:fb:58:df:18:83:
cb:b6:e9:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy
MTlBOEM0MTIxQjAeFw0yNjA5MjgwNjM1MTlaFw0yNjA5MzAwNjM1MTlaMBgxFjAU
BgNVBAMTDTZhYmEwYWE4LWM2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuv7oCRVNKCt929U1tSINWSc5E4TnebTpbKKMaRby6PQBH/p3lQgl7DUom
rG+PaZY0w7ResGEKXj1J7Af9FrPPc2KgLGdY7peUnQct3epC4va0iJc361EIncbI
x8FOHOBGTsIbeXfDJyvotxwQ6ZUTAE3+RUxEnkUU9lWnjHcmKbZdmMzFisi49vgt
/Sl8NHCLXWpEomjtdxeYfhwF6F5PSM8dHIBROhishEIaZCTBVtQ6R8CeceraMODB
4jxQg12ZvVEjwEVnc+bB49fNIQXjqgi7m6RcDRg5mlUySw2v7s2p2mpIPJ5NjpyL
WG5PJMTZ3YK6e/v0v2Cv7l22miOzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUs8nu
+J0gSyDkQbEJ5R907kfV4SMwHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE
EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi
dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE
OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7Esk9f42nPT5DbEDZ8faiJwliYVZM
0Sk3zcqM+T3Cn+mEsOiaYe20+jdep48UkJLFz/j9qs1z0AwFoYO75TcEHuiaJ41s
q8LWmTCokd0V9V8xkG6HwsCIPMfQ3qTf36BE88f8Cew4/4FlUFd2lj5PCfnHJ++o
zdV0j6eXPBQeudYhhTKNwHdyNa90GwAv1zbiNNIuD9SdAfhhn5brCwRjJP9qLODD
peex0ozbIkXAGrQjW/YnKFInkiS/SvOzgBKSdKC6tS8QaMtxfyDnYZnDTeRzG0jn
oiJv/hFmgd3VSvxMt2L+v7n9acMQL1nKeN0ivqBBfYNZ+1jfGIPLtuk4
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:09:10 2026 by rpki-client