
Error: rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File: kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier: WJlZnFra1WL+CLzejiGet3Q5iPHHJtJSDBat0Gbp8Ok=
Subject key identifier: 44:A2:73:C4:5C:3B:E8:11:32:5B:F5:A3:4F:07:45:86:CF:AF:64:0F
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 0933
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number: 091C
Signing time: Tue 27 Oct 2026 01:52:51 +0000
Manifest this update: Tue 27 Oct 2026 01:52:50 +0000
Manifest next update: Thu 29 Oct 2026 01:52:50 +0000
Files and hashes: 1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: 8Ogm2kJ4Aa8cPipcjq1e7sv+CDvlc2VfrjOMbjwxaQ0=)
2: D318CC8C60AD11F1834B33D2CE1D38B0.roa (hash: vytVxGQ5+3+xcP2yd2fLQ/SusudZIXkMM5vt1VWGOmM=)
3: 897EC16E60AB11F1A8C053C5CE1D38B0.roa (hash: cOUky0Q6559nAr4pPlLRgn5KmQ7ELu+a9eo4lRfn4Mg=)
4: 6748080C60AC11F1928CA7C9CE1D38B0.roa (hash: aiq8sw3U5IVlccJ2GnivuZdBAxpg4+7vp5rz3mmOjQc=)
5: 1394835A60AE11F1B76EE6D5CE1D38B0.roa (hash: qfAk6epq64XJP4NhzfTGD3cJAx9bl2U959tuTFQxuXE=)
6: FABD169A60AC11F1BE76D3CDCE1D38B0.roa (hash: k55PhIufq/MeyxvA1lamTZ3k66D8nz3zhmTmmjbZpLk=)
7: 5EA59BFA60AD11F1AF689ED1CE1D38B0.roa (hash: cdEai7Ee3CZvUvc9U/SJDi4Blq+Yz12d2wfaw2JZgC0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Oct 27 01:52:50 2026 GMT
Not After : Oct 29 01:52:50 2026 GMT
Subject: CN=6ae003f3-2de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:d5:e4:8b:5c:4a:7d:62:2b:39:ae:62:e9:
2b:e1:d8:50:09:d2:ac:d3:6b:f2:8b:40:cf:12:54:
49:06:8b:08:3f:5c:ce:7c:59:c1:c4:31:74:fe:22:
65:76:c0:f8:bf:f1:20:b0:80:21:de:f5:fe:6a:f9:
f0:5a:20:ea:67:d8:55:1d:cb:ae:a0:70:f4:48:d6:
d8:54:67:0c:25:71:f5:a9:92:84:df:5f:8a:ee:8c:
3b:d7:35:22:41:0c:40:22:46:8a:35:2a:8e:af:14:
83:96:08:a7:e5:ea:2f:40:d9:f6:e0:9d:b2:a5:83:
e5:fa:47:85:3c:fe:e0:24:c2:2b:56:24:44:d3:8f:
e0:8f:68:d1:d8:1e:f7:3e:6c:22:15:24:f4:67:88:
8f:dc:18:9f:d5:52:c2:90:89:f5:3f:84:a7:86:2d:
46:14:90:72:6c:4d:e4:f2:e1:c8:9a:a4:6d:f7:3a:
87:f6:1f:4e:af:10:49:52:35:29:0a:ba:25:7e:85:
49:4b:e3:45:87:a3:d1:47:bb:ec:59:fd:a9:93:99:
07:22:f1:e0:71:bd:db:fc:e7:34:2d:1a:3f:17:0f:
cd:68:86:de:bf:a1:80:ee:07:9b:86:25:0b:fd:62:
34:dc:55:f4:84:59:7d:4a:b6:cf:48:04:79:77:5e:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A2:73:C4:5C:3B:E8:11:32:5B:F5:A3:4F:07:45:86:CF:AF:64:0F
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:8a:64:cb:63:2e:ba:ef:d4:80:0a:7a:47:4c:8a:c9:cf:7c:
d4:ed:f5:a2:be:c7:63:7c:6c:d9:06:7c:f4:0d:66:38:06:52:
a5:40:30:8f:a9:e6:b9:00:43:9f:51:5d:e6:35:26:ed:70:e5:
b9:48:af:b8:d5:dc:e0:68:79:2f:38:9d:22:b0:2b:f7:a4:3f:
a5:80:e4:49:1b:1d:9e:da:6a:36:30:2c:2f:c4:c6:52:7a:1e:
57:2a:46:fe:99:3e:de:e2:d8:22:c6:1b:88:19:c3:36:a9:17:
b5:b4:39:ec:82:89:3f:23:95:4a:7c:f0:ee:fc:a7:ff:38:75:
b0:0a:6f:32:7d:8d:ed:3b:f8:a8:b6:8b:05:fb:c5:d4:49:a9:
27:51:4c:c8:48:75:15:fd:d1:91:67:18:4d:82:6b:cc:bc:5a:
58:26:c3:6a:2f:4c:38:19:81:aa:e5:f3:d3:1c:20:d4:d8:d9:
3d:ef:20:90:dc:f6:72:27:37:11:12:ac:9f:7e:a1:51:32:a7:
9d:80:28:a5:03:70:9e:12:1c:ba:77:eb:02:24:09:5a:83:49:
c8:ed:b4:92:00:6e:76:d3:29:c5:03:60:b5:ff:d8:fb:84:d2:
82:02:d1:73:61:e5:f8:fe:61:9d:f0:11:49:88:1d:06:3c:1a:
4d:1f:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:15:28 2026 by rpki-client