
Error: rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File: S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier: QrQcd+SNf15fpKdSJgjJqN51mPPm4oqU+r2dah3PEXk=
Subject key identifier: 92:5D:51:3E:4C:0F:CB:7E:9D:E5:DA:B0:EF:19:7A:1C:A6:B0:A3:D5
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer: /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial: 102D
Authority info access: rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number: 1027
Signing time: Thu 08 Oct 2026 00:55:16 +0000
Manifest this update: Thu 08 Oct 2026 00:55:16 +0000
Manifest next update: Sat 10 Oct 2026 00:55:16 +0000
Files and hashes: 1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: eIDH4rwhuUrb+qNxWWhX0im3HOKColUog2cp84W6qb0=)
2: 3467C85EB57811EFBB258E50762E951A.roa (hash: 7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=)
3: 3F711DA2B57511EF9BE2B9BD762E951A.roa (hash: HY6X5qdCvMeHk+soAwWe9vEEWgfGLOX8rrjzYU1Pl8w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4141 (0x102d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AR, serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Validity
Not Before: Oct 8 00:55:16 2026 GMT
Not After : Oct 10 00:55:16 2026 GMT
Subject: CN=6ac6e9f4-d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:7a:84:88:2d:b2:4d:78:29:06:0d:93:5a:
ce:d7:1f:7e:b2:e6:92:f4:4e:1b:03:bb:8e:9f:84:
dd:a0:e8:22:5d:6e:fc:b8:d4:f1:d7:07:9d:6c:94:
53:82:6c:ef:88:86:39:17:6b:7e:15:c1:2d:2e:d2:
2b:97:c8:3e:b5:d8:db:bd:ba:1f:f5:6e:ae:8c:ec:
5b:61:7d:d8:d8:c5:77:95:54:28:8e:21:c7:e4:2d:
bf:95:64:29:51:30:71:9f:86:f4:74:2f:b2:18:33:
50:b9:ad:6f:c4:59:13:b3:8b:ea:b1:61:a7:8a:1c:
ee:ba:05:ba:7a:02:98:5c:dc:24:95:5d:b4:6f:5a:
94:10:7e:e2:51:5e:a5:34:c6:9c:2d:bb:4f:33:0b:
a8:f9:d0:65:09:59:37:e1:ad:8b:66:d0:cc:22:06:
2e:b0:54:ce:f6:fd:40:3a:8f:7f:e7:7a:43:b8:12:
83:9c:3b:6e:89:48:b0:7f:b7:53:0d:e4:3c:fb:09:
97:6a:1b:db:e8:6c:32:08:60:21:b3:ea:1d:47:34:
a2:ce:ba:56:12:4f:92:26:d1:50:9a:fa:7d:7c:f6:
27:93:d3:f3:43:2f:cb:38:da:d2:f9:37:8f:94:e2:
64:d7:11:7b:93:c7:94:d8:70:52:71:02:d0:1d:ad:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:51:3E:4C:0F:CB:7E:9D:E5:DA:B0:EF:19:7A:1C:A6:B0:A3:D5
X509v3 Authority Key Identifier:
keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:70:d3:ef:1d:58:5b:fa:28:40:95:8b:27:c6:6d:1f:f5:
25:c5:73:3a:9f:6a:d5:88:bf:24:a9:b6:22:ec:54:8a:27:d1:
c5:52:79:3d:87:7c:04:40:b1:ed:a6:fd:47:64:b3:a0:21:09:
e3:cd:60:c0:43:20:c9:bc:4e:66:b6:5d:96:90:13:38:8f:ca:
0c:05:17:03:30:41:da:2a:35:e2:7f:f0:35:ce:c4:cb:15:02:
f6:9b:3f:f7:a9:0a:f4:1d:1a:f2:a6:18:e8:ec:11:10:55:a3:
49:72:c8:90:6b:e4:82:8e:19:02:04:cb:a6:ab:d0:20:04:f7:
3d:85:88:c8:8e:26:b6:cd:e0:9c:b1:f6:b1:83:8b:2b:59:7f:
45:f3:f5:93:a5:1f:e6:74:ba:19:d9:a2:94:ab:bf:a1:06:ca:
19:57:1d:75:c8:67:c2:5c:66:68:11:9c:c4:b5:1f:3e:be:ef:
07:d2:82:69:08:51:8d:f3:fb:39:89:c0:91:a4:70:56:35:7f:
56:ff:87:e3:11:29:d0:21:80:ea:b6:93:a4:7f:72:c9:9d:6f:
5d:80:7c:94:eb:ba:c4:92:9e:28:f9:6e:b4:3b:17:b6:42:f1:
7e:4f:b3:ba:87:18:0c:a7:64:66:f9:f3:07:6f:fe:97:5b:ca:
70:d2:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:29 2026 by rpki-client