
Error: rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File: T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier: J99krzmm5NDkSOaQCdZL4YaFSwFlbkGI8wU/g/DWeYQ=
Subject key identifier: DC:D9:24:F2:8C:73:78:F0:DB:6A:1E:24:5C:3A:FC:06:83:7B:58:C0
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 0A05
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number: 09F4
Signing time: Wed 28 Oct 2026 01:40:55 +0000
Manifest this update: Wed 28 Oct 2026 01:40:54 +0000
Manifest next update: Fri 30 Oct 2026 01:40:54 +0000
Files and hashes: 1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: V2nrCggDXZA3pJY0C2R4VTONb3ZwaCOTKhxb9Xaw9wU=)
2: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
5: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
6: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
7: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
8: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2565 (0xa05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Oct 28 01:40:54 2026 GMT
Not After : Oct 30 01:40:54 2026 GMT
Subject: CN=6ae152a7-47bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:17:0e:d4:76:ba:1d:81:0f:51:51:a0:ca:
b6:6e:59:47:89:9a:56:ca:93:38:5e:07:b3:d8:00:
1e:e2:dd:6b:74:ed:32:3e:f8:8e:90:13:ed:6a:88:
54:c6:bc:1b:f3:09:67:c0:d7:7e:11:5e:0d:e5:d3:
01:49:f4:cb:85:46:48:7a:17:24:2b:05:ed:9a:39:
68:68:dc:e5:e0:b3:84:d9:e2:82:a2:75:10:58:6c:
79:08:0f:36:15:67:24:a0:bc:5c:4c:20:17:34:8b:
59:ff:28:26:7e:79:50:4b:b7:93:3a:5d:07:42:25:
c9:b7:0a:a6:5d:6b:c2:49:7d:4d:44:9b:50:13:73:
59:f9:4d:36:c5:ef:d9:21:a9:e5:5f:ff:86:3a:6d:
a3:ac:65:5c:55:76:f8:83:f2:dd:c0:0d:08:90:32:
b6:33:b7:7c:f4:63:37:2a:be:3e:06:ea:c7:43:d8:
06:94:f6:27:68:ce:7b:92:ca:67:2e:db:07:33:9c:
e2:a8:d7:5e:46:15:d8:48:8f:34:59:3e:f1:fb:3a:
6d:b0:9b:60:7a:13:e0:2d:8f:1a:19:8e:af:ec:c9:
fd:52:3a:b1:7a:c8:91:8e:db:de:33:57:35:4d:bc:
dc:99:4e:5c:49:75:b1:b4:9b:93:48:27:58:29:24:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:24:F2:8C:73:78:F0:DB:6A:1E:24:5C:3A:FC:06:83:7B:58:C0
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:cf:55:bd:c4:9b:b0:01:21:ae:29:69:af:ed:f8:77:16:
3e:90:a8:37:04:b3:92:cb:9c:86:46:ff:f8:0a:99:a8:90:fa:
9e:cd:16:32:3b:47:ad:8e:3f:4c:af:29:f4:2b:fb:5e:93:ad:
0a:b1:e3:35:5e:0c:20:cd:57:c3:16:fa:0e:2e:8e:ac:bc:9f:
0a:fa:fb:a2:3d:46:98:3a:3c:72:d2:be:69:0b:f6:cf:e2:fc:
2a:b1:1e:0b:32:49:45:ec:1d:1e:ef:ec:cd:f7:1c:73:be:02:
33:11:f9:1a:06:59:80:af:ca:e8:b9:5e:f8:f5:4b:3c:4f:97:
a0:40:78:df:f3:f4:11:7c:30:ec:92:5d:80:76:f1:23:a0:65:
c0:9d:6a:68:c2:7c:02:04:27:c0:9f:2c:4e:79:f2:6a:29:67:
19:ce:0f:25:14:df:a1:16:60:71:a1:29:06:bd:39:dd:3a:89:
ab:57:f8:0e:6c:5b:ba:72:15:6a:fd:16:cf:a6:59:9c:01:a2:
f0:73:84:73:3e:2d:10:ac:e9:34:21:c2:c7:5e:dc:c2:96:c6:
1d:ba:b3:8b:5a:a6:2c:1e:3b:92:ec:ce:92:d4:22:ba:32:46:
a7:30:48:bb:18:10:db:6f:5a:db:76:d4:a4:1a:a3:2a:7a:30:
c1:61:b3:67
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjZFNEFBRjExMC8GA1UEBRMoNEZFRTEyOUQwOUFCODUwREEwMzlFN0Y1QkIyNEI2
Njk5QTBGODE3OTAeFw0yNjEwMjgwMTQwNTRaFw0yNjEwMzAwMTQwNTRaMBgxFjAU
BgNVBAMTDTZhZTE1MmE3LTQ3YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8YBcO1Ha6HYEPUVGgyrZuWUeJmlbKkzheB7PYAB7i3Wt07TI++I6QE+1q
iFTGvBvzCWfA134RXg3l0wFJ9MuFRkh6FyQrBe2aOWho3OXgs4TZ4oKidRBYbHkI
DzYVZySgvFxMIBc0i1n/KCZ+eVBLt5M6XQdCJcm3CqZda8JJfU1Em1ATc1n5TTbF
79khqeVf/4Y6baOsZVxVdviD8t3ADQiQMrYzt3z0Yzcqvj4G6sdD2AaU9idoznuS
ymcu2wcznOKo115GFdhIjzRZPvH7Om2wm2B6E+AtjxoZjq/syf1SOrF6yJGO294z
VzVNvNyZTlxJdbG0m5NIJ1gpJASxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3Nkk
8oxzePDbah4kXDr8BoN7WMAwHwYDVR0jBBgwFoAUT+4SnQmrhQ2gOef1uyS2aZoP
gXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2RTRBLzlENTk0RjcyNDFBNjExRUE4ODg2M0UyOEY4QUVBMjI4L1QtNFNu
UW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1QtNFNuUW1yaFEyZ09lZjF1eVMyYVpvUGdYay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjZFNEEvOUQ1OTRGNzI0MUE2MTFFQTg4ODYzRTI4RjhB
RUEyMjgvVC00U25RbXJoUTJnT2VmMXV5UzJhWm9QZ1hrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHuc9VvcSbsAEhrilpr+34dxY+kKg3
BLOSy5yGRv/4CpmokPqezRYyO0etjj9Mryn0K/tek60KseM1XgwgzVfDFvoOLo6s
vJ8K+vuiPUaYOjxy0r5pC/bP4vwqsR4LMklF7B0e7+zN9xxzvgIzEfkaBlmAr8ro
uV749Us8T5egQHjf8/QRfDDskl2AdvEjoGXAnWpownwCBCfAnyxOefJqKWcZzg8l
FN+hFmBxoSkGvTndOomrV/gObFu6chVq/RbPplmcAaLwc4RzPi0QrOk0IcLHXtzC
lsYdurOLWqYsHjuS7M6S1CK6MkanMEi7GBDbb1rbdtSkGqMqejDBYbNn
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:14 2026 by rpki-client