
Error: rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier: lq102kM20YtFQTLyD8RJqcQt+sCxootd2XJEBk3YXLc=
Subject key identifier: 3C:67:B4:FB:17:3B:DC:45:39:73:F4:A8:7B:4E:C9:A0:B2:A4:2D:0B
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer: /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial: 0666
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number: 0660
Signing time: Sun 25 Oct 2026 02:48:23 +0000
Manifest this update: Sun 25 Oct 2026 02:48:22 +0000
Manifest next update: Tue 27 Oct 2026 02:48:22 +0000
Files and hashes: 1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: 3hBhGQJsSmeIHIe7qc4Mo8t0AAlxFYGbSnS8AqFvQZQ=)
2: FA0A10268D8011F18F4379E0CE1D38B0.roa (hash: isvF0Tax/20iYi7ZXFeg6uIx+YUxx5ER2b6kv6sd4Js=)
3: DEB2A540851511F19367D3F0CE1D38B0.roa (hash: sYepgmDznNmmNReOcG4umYZCEZRALxnqg21zsuyQF/k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Validity
Not Before: Oct 25 02:48:22 2026 GMT
Not After : Oct 27 02:48:22 2026 GMT
Subject: CN=6add6df7-f56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:e2:c5:b4:d6:7f:40:6d:db:01:c1:e8:ab:
e8:44:01:83:f5:a9:6d:bd:52:a7:3b:d6:5c:3c:9e:
6f:59:f3:62:ca:c0:14:63:ba:cd:22:bb:9c:c0:be:
fe:f2:2e:94:1c:d0:31:a7:eb:00:f1:eb:89:6b:16:
e7:28:5f:7a:fe:16:da:a7:9f:6b:cf:77:e6:c1:2e:
21:e7:07:61:1e:e3:6d:98:bc:75:59:21:2c:ee:5f:
08:9d:4d:00:10:0d:61:e6:d6:8c:48:11:fd:e1:ce:
fb:f8:c9:11:43:44:03:53:a0:10:09:3a:cf:43:e3:
e5:3b:1c:f8:85:a9:c9:06:f5:48:d6:74:e5:c0:2e:
b7:af:39:83:b2:04:d6:9c:b9:1f:bd:17:82:51:5e:
60:c5:a5:eb:5c:ae:0b:bc:8d:52:c9:23:83:51:6a:
99:e3:cb:8f:b2:f0:02:35:13:68:49:7e:3f:3c:09:
eb:26:14:d4:28:fe:6d:38:02:f6:c5:c2:53:7c:fb:
2b:20:f5:21:cf:83:eb:c6:31:d3:c6:58:95:2c:3e:
ad:16:9f:09:86:39:d3:5f:db:fb:f7:39:0f:e2:45:
56:41:33:27:72:ad:69:ca:35:7f:55:45:0f:19:30:
9b:21:72:60:d2:db:87:5f:1c:db:86:ac:f1:1c:07:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:B4:FB:17:3B:DC:45:39:73:F4:A8:7B:4E:C9:A0:B2:A4:2D:0B
X509v3 Authority Key Identifier:
keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:61:89:05:3b:1f:14:fe:16:5d:1a:b2:02:08:58:b5:b6:
ea:7d:91:18:a9:08:a0:5f:66:e2:17:0e:62:76:05:8c:87:9f:
76:2a:ac:b4:68:93:2f:6a:a5:34:20:5f:97:fa:d1:52:9f:6a:
18:a0:98:e5:57:50:8f:e0:6b:07:fc:46:1f:f0:53:54:f1:c1:
6d:40:df:f9:50:de:ed:49:89:26:40:a1:f8:9c:52:87:3c:c0:
70:43:39:52:72:f2:9f:21:75:a5:d6:de:29:ed:2b:8d:25:f0:
2d:cf:cf:9c:be:78:08:12:25:8b:6d:e4:99:d9:09:32:e7:9c:
72:75:db:a5:c1:5d:83:ed:e1:e8:dc:af:62:d9:de:28:3c:11:
09:15:84:8b:d3:ba:56:2d:32:a9:60:c5:4c:7c:4d:3e:1f:a3:
ce:3a:ef:57:0d:52:24:63:e0:f5:3c:b2:4e:35:81:34:68:7f:
f1:78:3d:70:65:69:78:9d:c0:0d:bc:07:60:87:ae:30:73:6d:
b8:d0:2f:b6:c3:88:61:32:50:c5:d8:ca:3d:32:a6:14:29:a2:
9a:47:78:c2:1d:37:96:fc:89:bb:0f:96:bc:9e:aa:76:2f:52:
7c:8c:05:15:68:e1:95:78:2c:c4:70:a7:44:72:50:5d:7e:81:
2f:57:98:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:58:35 2026 by rpki-client