
Error: rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
File: kGRTy4rcpLXHpuU7LsUREsTH_iw.mft (raw, json)
Hash identifier: bDJHFFb4Mn6l+gjWscXhz0EQ8tfaN/8wZWd5QGaQURI=
Subject key identifier: 5B:0F:C7:00:5C:36:76:10:60:F8:FE:A6:70:FA:9A:C5:04:B7:1E:2B
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Certificate issuer: /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial: 0717
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
Manifest number: 070D
Signing time: Mon 26 Oct 2026 02:34:30 +0000
Manifest this update: Mon 26 Oct 2026 02:34:29 +0000
Manifest next update: Wed 28 Oct 2026 02:34:29 +0000
Files and hashes: 1: kGRTy4rcpLXHpuU7LsUREsTH_iw.crl (hash: 5uYWLrJvUQkL1YHN06pu6yDkhD6dCkIyCZyJP5crcoQ=)
2: B40E3330F6B911F08662C98ADAE4EC9C.roa (hash: qIH7v3tewV7d2gF94EG5oa12N5PvjVd4AGukVgTh+H4=)
3: 8E2EE36AF6BB11F0B25C7596DAE4EC9C.roa (hash: JehNBRnKI6tF0LAk2UT74V0/bkjFQ/vJ7EmHfDOYPpE=)
4: 848FFDAEF6BA11F0866A2692DAE4EC9C.roa (hash: d9hiYsLzql+sur6XoXwbaHCb5CcbwNKoiWGzqCISMOU=)
5: 1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa (hash: 1XZwhvPB50gzM2XWj7n0L+r0jTbTyQwNMXT6DXbvlE8=)
6: E8FE15CEF6B911F08E0EF78CDAE4EC9C.roa (hash: qXptFQKXYrZyNgqoXJo0YFJwNcWrxR3AkAyWv8dlRHY=)
7: AF1D589C8A5211F1A99C74F0CE1D38B0.roa (hash: +YCyR0cl2AEX8HbJ8RxDRXYK0qmjPB8CbuozdNZzKek=)
8: 6C7DA1A4F6B911F0803CDE88DAE4EC9C.roa (hash: b0qIMRk/b9cvkRo2D02RcQLxf82o3W0jgTUE2T6aIxc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AF, serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Validity
Not Before: Oct 26 02:34:29 2026 GMT
Not After : Oct 28 02:34:29 2026 GMT
Subject: CN=6adebc36-1be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:15:07:6d:56:47:3f:24:99:b6:98:ba:a4:
d3:1d:c6:80:7a:83:11:f3:f8:b3:a0:43:43:05:bb:
67:04:dc:0e:0f:9a:c5:b1:2d:fc:4d:b4:eb:50:c9:
0e:b9:92:eb:e8:f1:0b:f5:73:63:17:02:80:e9:31:
90:31:6c:cb:c5:77:69:6a:43:7f:2c:94:92:1c:bc:
35:94:bb:0e:0d:7a:01:5e:7f:a3:fd:7a:aa:00:ca:
ff:0b:d2:a0:76:55:5e:71:19:58:9f:d5:c6:39:06:
00:ef:b7:16:7c:9f:df:b1:73:b2:ca:35:be:c8:55:
4a:1d:6f:6a:15:57:4a:97:34:49:b4:82:d9:22:e5:
f7:37:32:ee:9f:c9:a5:c2:b4:3b:c4:34:74:24:6e:
97:2d:b4:ac:cb:f2:b0:83:1a:6a:f5:9a:36:df:1f:
93:0d:4f:eb:ef:0e:4b:a9:e9:83:60:ae:2a:c0:35:
47:72:0e:b9:02:97:9d:9c:69:9a:b8:ff:bb:e7:82:
0f:f6:1b:b7:d5:03:03:44:6d:d4:22:f9:b6:5f:b6:
5f:b9:40:71:fe:bb:46:60:13:be:60:dd:da:cd:b1:
1d:7d:d0:fd:d6:2a:13:37:09:95:cc:bf:06:86:19:
d1:d0:d2:59:37:cd:93:ad:b7:8e:6e:0b:49:03:6f:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:C7:00:5C:36:76:10:60:F8:FE:A6:70:FA:9A:C5:04:B7:1E:2B
X509v3 Authority Key Identifier:
keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:80:d2:a6:91:62:f4:c5:f7:fe:ad:d3:55:50:69:e0:1a:96:
b7:12:1a:bd:cd:fd:bc:cc:94:cb:4b:48:d8:cc:b9:b4:39:af:
01:5c:aa:9c:da:e4:30:49:18:68:30:02:d6:1d:5a:39:72:b2:
4a:da:ce:6a:67:73:dd:59:66:74:68:c6:10:5b:69:b5:4b:48:
84:74:11:11:e6:0b:1c:34:c1:0e:8b:a4:ed:0c:60:86:0e:f5:
7d:5d:ef:b5:c0:56:b5:04:72:7d:f1:9a:fd:3b:a2:3a:96:77:
7c:e7:83:a3:54:3a:32:fe:f0:ae:99:25:38:30:f3:53:e2:29:
9a:17:ee:0b:f2:8a:65:ed:a6:14:d0:da:40:f8:a4:b2:b8:94:
ac:21:34:91:86:a6:4a:d1:4f:e6:f0:2e:11:0d:83:ab:10:50:
9f:ac:22:7e:28:5c:82:34:88:80:7a:51:72:8d:1f:48:41:88:
a3:b8:af:89:be:a3:09:ed:c3:9a:1e:8c:9f:e8:8d:0f:72:10:
1e:b3:24:d3:04:b7:bf:1e:3d:89:ad:f4:61:40:ef:4f:39:ca:
ca:8e:c3:41:95:15:05:e4:a3:19:d1:c5:13:e8:7b:71:4b:3f:
28:1d:42:b3:b0:98:fa:17:a9:e2:8f:ac:81:0f:c4:15:20:08:
04:72:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:32 2026 by rpki-client