
Error: rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
File: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft (raw, json)
Hash identifier: x7XzMd+SW/uIh1Cu3NAYv9dWrFLmGhKq4v0AVIp0xxI=
Subject key identifier: 61:A8:2A:B1:13:71:E0:67:FB:9B:93:27:4B:1F:D4:77:E5:7F:FA:92
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Certificate issuer: /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial: 067F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
Manifest number: 0678
Signing time: Mon 26 Oct 2026 02:45:29 +0000
Manifest this update: Mon 26 Oct 2026 02:45:28 +0000
Manifest next update: Wed 28 Oct 2026 02:45:28 +0000
Files and hashes: 1: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl (hash: 5I7R3oBoBvnfKlRQP4tsfRl/PRiiZmO9towTWekCVRw=)
2: C22D8994634611F1A44F9016CF1D38B0.roa (hash: dn0CiA4TD5hJ1aVLDN4K8BucDVCdQvAPyy7W2PdZhn0=)
3: 9EB86A96634711F19C778F1CCF1D38B0.roa (hash: IIR04ujeixANpE1nIcYKkmtOPYw3lT5knLPQfvE77Uk=)
4: 0F79069C634711F18E23381ACF1D38B0.roa (hash: XpA37kO4U/QHFHB+OsDeSIwJyVOkmHHBBXZIvEnz904=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663 (0x67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Validity
Not Before: Oct 26 02:45:28 2026 GMT
Not After : Oct 28 02:45:28 2026 GMT
Subject: CN=6adebec9-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:de:f8:a5:81:15:37:9f:e8:cf:b4:e6:f3:
75:cb:26:b3:f6:f6:c0:60:01:2e:45:ef:a6:2a:d1:
09:01:8b:e9:a5:f6:a9:dc:6b:35:ca:2c:45:a4:71:
43:88:30:ca:4e:9f:f6:ef:32:bd:d4:16:14:85:f0:
39:87:79:27:c2:cb:32:27:84:90:05:eb:80:f7:8c:
24:99:9d:ba:00:59:5f:35:93:4e:74:4a:05:61:28:
11:ab:cd:71:37:6a:db:98:a3:83:a2:0d:4c:2b:b8:
70:6e:ab:9c:94:f3:e3:2f:fc:bf:22:2b:88:95:a5:
cd:b9:d8:17:da:ca:4d:c8:6d:e0:c8:67:68:b9:07:
f2:60:05:01:6b:33:36:b9:51:15:43:59:bc:47:27:
da:ce:58:b2:20:d5:e9:c2:b4:5d:b3:d6:3f:3a:7f:
72:2f:50:c4:ba:f1:69:40:6c:20:31:63:14:be:45:
c6:a5:82:83:ab:b8:96:a3:11:55:29:e7:f6:9f:c7:
ee:1f:10:4a:51:e6:d8:ea:d0:4f:71:ae:1a:cf:6f:
de:6c:a0:97:3c:0f:84:3f:2c:a5:22:b4:e1:ca:2a:
6c:26:ee:25:e6:7f:28:b0:0b:7c:eb:e2:cd:31:50:
68:50:36:a5:9b:37:62:ec:22:45:5f:d3:fe:87:76:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:2A:B1:13:71:E0:67:FB:9B:93:27:4B:1F:D4:77:E5:7F:FA:92
X509v3 Authority Key Identifier:
keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:b2:3f:c0:ce:5f:a0:91:bf:fb:9b:dc:2a:a3:49:0b:0e:
e7:d2:8a:5a:50:b3:3f:44:56:8b:74:cd:8a:4b:af:5a:33:1d:
a2:bd:5c:eb:8a:d3:45:7d:52:e2:11:4c:45:37:55:e1:43:aa:
4f:bf:93:df:cd:ef:d7:ad:5b:da:56:42:2c:6e:3e:b1:1b:5c:
b1:90:b4:29:df:18:9d:73:05:ba:b0:ea:89:72:4a:68:17:71:
c0:49:d6:03:b5:27:d7:58:3d:bc:8f:11:87:55:f5:2e:d8:eb:
60:85:3a:9f:79:4f:81:a4:05:17:b2:d7:4f:38:5c:02:d9:4d:
22:f6:28:af:a7:a4:f8:6e:14:3f:b4:f8:8d:e1:5f:77:9e:d7:
9a:c8:5b:01:31:c4:31:f6:49:b0:e3:86:cc:d0:ad:2b:50:65:
1e:8a:43:30:67:dc:37:53:9a:0f:dc:6c:e7:c9:29:63:a9:4e:
9a:1a:8f:a9:9a:9b:b4:6c:8c:ba:fe:98:b8:76:22:43:68:03:
fe:e8:61:ee:ff:eb:6d:48:63:dd:37:cc:96:4c:e5:41:3a:ce:
d8:33:db:ce:9c:ef:46:e3:55:cd:9f:a5:3b:ac:4a:a8:dc:5b:
76:66:5c:08:7d:55:f1:93:78:55:97:de:a9:8e:c1:c8:2a:92:
03:70:81:a5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjAxMzNBRjExMC8GA1UEBRMoNjYzMEM3ODQwODQ2RjJGNjkwOTc1NEYxMzQxNDY2
Q0RBRkVBMkZENDAeFw0yNjEwMjYwMjQ1MjhaFw0yNjEwMjgwMjQ1MjhaMBgxFjAU
BgNVBAMTDTZhZGViZWM5LTYwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBYd74pYEVN5/oz7Tm83XLJrP29sBgAS5F76Yq0QkBi+ml9qncazXKLEWk
cUOIMMpOn/bvMr3UFhSF8DmHeSfCyzInhJAF64D3jCSZnboAWV81k050SgVhKBGr
zXE3atuYo4OiDUwruHBuq5yU8+Mv/L8iK4iVpc252Bfayk3IbeDIZ2i5B/JgBQFr
Mza5URVDWbxHJ9rOWLIg1enCtF2z1j86f3IvUMS68WlAbCAxYxS+RcalgoOruJaj
EVUp5/afx+4fEEpR5tjq0E9xrhrPb95soJc8D4Q/LKUitOHKKmwm7iXmfyiwC3zr
4s0xUGhQNqWbN2LsIkVf0/6Hdtp7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYagq
sRNx4Gf7m5MnSx/Ud+V/+pIwHwYDVR0jBBgwFoAUZjDHhAhG8vaQl1TxNBRmza/q
L9QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwMTMzLzUwNDFBNzA4RTU4NjExRUNBRkMyMkE4N0YxMjIyNDY4L1pqREho
QWhHOHZhUWwxVHhOQlJtemFfcUw5US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pqREhoQWhHOHZhUWwxVHhOQlJtemFfcUw5US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxMzMvNTA0MUE3MDhFNTg2MTFFQ0FGQzIyQTg3RjEy
MjI0NjgvWmpESGhBaEc4dmFRbDFUeE5CUm16YV9xTDlRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWwbI/wM5foJG/+5vcKqNJCw7n0opa
ULM/RFaLdM2KS69aMx2ivVzritNFfVLiEUxFN1XhQ6pPv5Pfze/XrVvaVkIsbj6x
G1yxkLQp3xidcwW6sOqJckpoF3HASdYDtSfXWD28jxGHVfUu2OtghTqfeU+BpAUX
stdPOFwC2U0i9iivp6T4bhQ/tPiN4V93nteayFsBMcQx9kmw44bM0K0rUGUeikMw
Z9w3U5oP3GznySljqU6aGo+pmpu0bIy6/pi4diJDaAP+6GHu/+ttSGPdN8yWTOVB
Os7YM9vOnO9G41XNn6U7rEqo3Ft2ZlwIfVXxk3hVl96pjsHIKpIDcIGl
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:18:42 2026 by rpki-client