
Error: rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: 8Fu2d+KUAUHEXX3jm05yjbIuhYmf4b/+dKpVCdqURbY=
Subject key identifier: 32:55:A9:7B:3E:2D:E7:1B:E5:99:4F:A1:3F:71:1E:7B:11:D8:E2:68
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 0483
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 0481
Signing time: Thu 10 Sep 2026 03:37:45 +0000
Manifest this update: Thu 10 Sep 2026 03:37:44 +0000
Manifest next update: Sat 12 Sep 2026 03:37:44 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: 6xZrebnHEVdOXOqtTSkl6J8q7VsAMYpD3hMR2cOaDfc=)
2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Sep 10 03:37:44 2026 GMT
Not After : Sep 12 03:37:44 2026 GMT
Subject: CN=6aa22609-e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:be:9f:61:92:f9:41:22:a8:85:ab:f1:c0:
20:b7:57:2a:ec:0b:68:c9:8f:d8:a5:bc:72:c4:c7:
fa:2e:59:4e:13:f3:58:28:33:26:64:89:cf:f7:68:
72:d4:e2:ae:a1:0e:78:4b:be:41:a7:2e:3e:ab:53:
bf:01:e4:bc:92:71:ed:ef:fb:13:d0:ed:52:0a:2b:
3b:ca:65:1d:19:75:64:3c:a0:15:ed:1a:11:29:c7:
9e:64:ba:f5:8e:63:27:94:bc:df:5d:c5:18:9d:89:
83:8c:1a:0d:98:12:25:2c:f2:c2:cc:5c:08:64:66:
4c:78:84:a1:7c:da:46:40:cd:b9:dc:0e:7d:59:12:
f6:e6:6a:1d:95:28:71:0a:6f:d2:1d:5d:7f:f8:de:
d2:e9:7c:65:e4:42:70:8f:8c:ec:9e:8f:fc:a2:87:
95:83:bc:46:00:f3:d1:6d:db:3d:bf:60:bb:78:b8:
b2:be:be:ab:ac:54:ba:9f:79:d1:a6:98:98:90:4a:
7f:54:65:4f:ca:59:85:39:7c:1c:e1:17:d6:63:be:
9f:c0:b9:12:67:3c:24:28:e5:3b:09:8b:7b:ed:89:
91:30:c0:fa:37:e4:71:2d:6a:4f:c0:9c:76:13:7f:
26:a7:0d:8c:e0:46:ac:10:d1:2b:84:7c:b2:ed:81:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:A9:7B:3E:2D:E7:1B:E5:99:4F:A1:3F:71:1E:7B:11:D8:E2:68
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:64:9e:e0:4a:6f:7f:d2:ee:5a:9a:ce:11:cd:fa:0a:2b:
79:c1:92:b8:65:4d:a5:3a:d1:d1:b8:e9:48:41:60:e8:6c:f1:
9e:03:f6:ae:5a:8a:28:8b:d8:26:d2:de:6f:2e:82:9c:86:0b:
56:e2:f4:c8:08:64:23:8c:ca:f2:8a:58:c4:4f:99:e0:17:87:
13:95:29:28:10:29:ca:d2:41:6d:bd:0e:56:4a:78:59:28:66:
9e:e7:48:91:90:66:06:29:e2:9f:ad:41:e2:3a:8a:e1:3b:37:
58:4f:18:64:df:77:ed:8e:7d:ce:4a:70:e0:f2:c4:ca:2b:0f:
88:70:0b:0b:78:98:c3:19:75:75:15:03:4d:f0:13:70:1a:cf:
f6:f2:47:7b:f5:d3:8a:56:78:2e:f7:45:77:a4:fe:13:b8:74:
f0:3c:f4:8d:8e:a8:c1:a9:7e:5b:1c:13:25:e1:e8:ba:af:99:
2d:61:dc:18:a2:29:64:2b:a1:20:e7:fe:c2:3e:29:6a:a7:83:
82:ad:74:2b:bc:43:e8:6d:05:94:7c:f7:60:b9:a4:9b:5c:66:
b6:d5:d5:c9:5b:97:9c:4e:25:19:cf:1b:ad:e7:f9:ff:d7:68:
78:aa:5f:a4:3b:cb:7f:ba:f8:2a:62:fc:76:cb:f9:4d:54:d0:
cc:95:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:15 2026 by rpki-client