
Error: rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
File: ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json)
Hash identifier: Xw9geAJ+o8C+xVIuH2/4rdWpxr9ztzolSLiyEB1ePB8=
Subject key identifier: C5:CC:C4:3C:4D:6D:7D:F9:DD:9B:5C:65:D3:61:94:D3:14:19:96:50
Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
Certificate issuer: /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Certificate serial: 04BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
Manifest number: 04BA
Signing time: Sun 25 Oct 2026 03:37:28 +0000
Manifest this update: Sun 25 Oct 2026 03:37:27 +0000
Manifest next update: Tue 27 Oct 2026 03:37:27 +0000
Files and hashes: 1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: 0tMdQVjFXgnn3g4gDvpaZnuxryxaqL7qP2DB8lZkTqQ=)
2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=)
3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 03:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Validity
Not Before: Oct 25 03:37:27 2026 GMT
Not After : Oct 27 03:37:27 2026 GMT
Subject: CN=6add7978-8f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:1d:71:69:e0:84:f6:37:3a:b0:f5:6a:b5:
7a:00:3b:ca:5c:ed:99:e3:a0:26:83:50:df:80:d3:
a3:e7:1f:f8:86:89:9c:d8:33:9a:9a:41:94:06:23:
be:60:1f:60:4b:85:f6:78:5c:70:44:69:91:15:04:
32:55:ce:92:aa:45:d4:31:24:f8:b7:26:ee:d9:f2:
d9:20:0b:c0:03:fb:d0:9a:51:7f:41:45:07:4e:67:
f1:c3:c7:05:00:a4:33:07:ad:51:42:d4:a6:ce:80:
82:38:9d:0b:28:1c:4a:ea:c6:18:f8:a8:f5:34:57:
11:0f:1e:6f:1b:c1:33:06:99:11:8f:bc:e2:ec:a2:
a7:70:71:50:40:9c:f1:5d:55:93:8b:80:39:0e:a3:
84:c5:a4:d0:c9:6e:fc:8c:cf:e8:21:a3:78:8a:e6:
af:f6:f4:84:2d:6e:c9:8d:78:91:98:43:10:c2:82:
01:d3:45:ff:dc:87:d3:14:09:78:52:b8:47:8b:19:
2d:49:e7:d4:b9:5d:7f:f8:eb:d0:ee:4b:89:97:36:
86:53:b5:39:42:19:1e:90:4b:66:61:18:5c:20:2e:
5c:36:3e:ec:d6:4e:8b:a4:d3:23:91:51:f6:ae:a2:
74:28:d2:c9:2c:cd:45:13:42:a2:83:ec:11:7b:e7:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:C4:3C:4D:6D:7D:F9:DD:9B:5C:65:D3:61:94:D3:14:19:96:50
X509v3 Authority Key Identifier:
keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:09:ef:be:f9:2f:b1:63:cd:c4:82:97:af:3f:ca:11:79:
99:68:47:0f:e7:ec:86:17:ae:4c:04:61:10:44:1a:b8:8c:df:
8a:4d:43:24:34:dc:d3:f8:06:f4:b7:6f:fc:55:11:f4:73:a2:
a8:73:30:60:eb:6b:6f:e7:8d:73:56:74:f5:6c:62:56:25:e5:
4c:62:25:90:f3:76:9c:83:1d:9b:43:62:37:1c:c7:bb:5c:f8:
08:e3:19:76:02:78:de:aa:f3:e4:5f:e2:c6:84:f7:21:68:99:
c2:cf:35:60:18:53:89:bb:28:ce:ee:f4:57:59:2f:71:33:11:
a5:e1:ed:04:3b:5f:ff:07:8b:8c:05:8d:31:5a:bd:86:ab:cd:
f5:02:f0:b7:3a:83:45:8c:01:bd:9b:24:9f:4e:c1:b6:b9:6b:
2d:2e:5d:5a:6f:74:43:f2:e2:72:bd:90:20:c0:3e:75:0e:ed:
0b:78:bf:1f:19:c2:e1:a6:d4:8d:2f:87:5a:b8:d1:bc:7f:b2:
df:b3:cb:92:13:ae:60:9e:23:2c:cb:7a:50:5b:cd:5a:de:a7:
d7:61:ff:2b:f2:e4:2f:a0:5b:f9:94:30:d8:6e:b7:79:da:ec:
21:d5:6d:60:98:8f:ca:07:ff:90:aa:8e:ab:41:a5:d9:40:e7:
a6:ec:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:43:53 2026 by rpki-client