
Error: rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: cwqNWZc5hxxx+fn3A6zeFo8qupBAjiZ0/DC+7+oozvg=
Subject key identifier: 01:F2:7D:AF:0E:06:FE:03:0E:DE:A3:96:9C:7E:D1:18:CD:5F:D0:32
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 03FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 03F8
Signing time: Sat 24 Oct 2026 04:01:40 +0000
Manifest this update: Sat 24 Oct 2026 04:01:39 +0000
Manifest next update: Mon 26 Oct 2026 04:01:39 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: lJ2zS4TZfCmp3FcIA3/OXcAluMBuchAipoqMdF3lEf0=)
2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Oct 24 04:01:39 2026 GMT
Not After : Oct 26 04:01:39 2026 GMT
Subject: CN=6adc2da3-1360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:22:28:8c:d2:9d:87:0b:2e:19:0a:2e:29:
8a:fb:b7:94:6e:b6:09:e4:6a:64:59:de:14:fd:29:
62:58:42:8f:a1:41:99:81:28:cb:21:f8:a7:9d:68:
f7:35:6c:2c:aa:39:89:ce:81:8a:58:f1:5c:d3:6a:
91:54:ea:f2:77:93:87:35:dd:69:2f:fe:49:a9:4b:
6f:08:18:da:8e:d7:5f:4c:9e:bb:28:45:26:e7:28:
67:73:04:97:d4:4f:08:92:7b:aa:db:70:dd:48:7c:
c2:84:2b:c9:31:55:77:b8:ca:50:3f:73:69:10:9e:
77:4f:db:a1:56:f8:e6:e9:d6:b9:ec:fa:87:c9:33:
f6:dc:cd:4d:fc:65:d1:c3:ad:a3:09:d3:0d:df:c5:
f6:0f:68:35:80:0e:36:c4:66:98:5f:c1:79:e5:d6:
e3:22:96:42:17:f4:ca:2a:39:77:b4:8b:09:5d:cf:
79:5b:d2:ef:82:99:3d:fd:e4:b8:28:8b:67:2d:d2:
f3:6a:0d:fd:48:9d:02:6a:cf:a9:d8:15:8c:59:3a:
e0:8d:27:54:17:6b:c4:ed:f8:01:c4:19:fb:93:e6:
69:16:75:6c:5f:7a:b0:81:56:b5:27:a3:37:df:4d:
34:83:81:8f:c8:4c:94:7e:76:86:32:66:84:2f:12:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:7D:AF:0E:06:FE:03:0E:DE:A3:96:9C:7E:D1:18:CD:5F:D0:32
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:4f:bd:b4:e6:0e:a6:c7:27:91:f9:44:26:04:63:11:3a:6a:
a3:ae:a9:20:33:5b:99:5f:07:8a:18:60:99:5a:ce:2f:c6:da:
d2:21:41:0a:03:fd:f4:cd:2b:c9:3b:d3:0e:a7:9c:99:9b:61:
9e:5c:a8:fb:c3:18:b4:f1:ef:c9:16:74:50:64:cf:cf:fc:cd:
ac:b1:4b:8c:79:ca:e7:69:1d:11:1a:f9:5b:26:1e:42:c3:7b:
f4:6a:a6:a7:a5:32:f6:d0:09:45:26:be:c2:b7:fc:0d:b9:cf:
f8:d8:26:18:b0:02:54:e7:2b:9b:d5:44:48:61:c3:e4:3a:0f:
3c:d4:be:87:22:31:dc:16:94:22:8f:10:f0:35:76:cf:92:ac:
d2:26:12:0e:07:18:80:6c:cb:57:3d:d7:9a:d6:58:f3:df:e0:
3d:87:d7:0d:e5:60:fa:c4:99:0a:5e:61:3d:9e:51:0d:38:27:
9a:e9:b7:5b:23:e7:cd:8c:87:e6:a7:6e:7c:20:16:0c:be:31:
f7:9c:17:b8:e5:e4:ee:0c:bf:46:12:25:7a:24:6b:37:b7:2c:
71:6e:1d:86:e1:ec:76:14:08:4b:b5:9a:77:6e:09:f6:5f:18:
80:f8:6c:6a:c8:db:a9:49:ef:ea:a1:7b:1c:d8:16:4e:49:80:
dd:67:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:01:37 2026 by rpki-client