
Error: rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
File: -MJNS9gKXwIabYXN0P8HaD3hcWc.mft (raw, json)
Hash identifier: tgEnNckPDRPjRyv8h7ULqtMZK/omcF7azgQ3Su/sNqM=
Subject key identifier: 49:22:C5:1F:B1:B1:9B:52:FA:A2:C3:0D:01:AE:79:D8:45:DA:6F:94
Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
Certificate issuer: /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Certificate serial: 0635
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
Manifest number: 0631
Signing time: Sun 25 Oct 2026 02:53:20 +0000
Manifest this update: Sun 25 Oct 2026 02:53:19 +0000
Manifest next update: Tue 27 Oct 2026 02:53:19 +0000
Files and hashes: 1: -MJNS9gKXwIabYXN0P8HaD3hcWc.crl (hash: uGSIYCPNC5XuiQh3FZ5MEC1XktMHklfT37V3uS2i3NY=)
2: A5C2EA3C8EFD11F1A7C6A7EBCE1D38B0.roa (hash: AvCgqa5zlcvalfse8/atLbCPh7tRWm6AcKPl3OV70Ps=)
3: 3987BD848EFD11F18EE676E9CE1D38B0.roa (hash: UCErMJTUHZPKL/8zL1wbyaEGRFi0ewPR0ivNDnehriI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCE84AF, serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Validity
Not Before: Oct 25 02:53:19 2026 GMT
Not After : Oct 27 02:53:19 2026 GMT
Subject: CN=6add6f1f-9f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:d5:b4:70:06:58:97:89:2c:e4:33:d1:c1:
cd:1d:91:19:74:c8:59:b1:5f:6e:9e:8e:63:25:23:
2d:e8:d3:18:81:99:d2:c1:11:79:b8:d3:09:9a:03:
f1:60:8b:1c:3b:f3:2e:a0:38:74:9c:5f:d0:7d:2b:
0c:72:df:df:c9:73:5b:12:49:97:28:0d:33:76:88:
8e:da:c2:9c:d5:b6:3d:44:18:6d:52:98:3c:41:48:
bf:ab:0b:91:f1:3e:86:f9:c1:d8:4c:c9:42:d4:1f:
dd:81:19:ec:22:86:95:2f:69:3b:5b:13:b7:86:c6:
2e:5c:33:01:3f:ed:e8:54:89:02:46:89:67:25:31:
4c:eb:93:5c:3b:76:20:a6:32:20:54:ea:b9:8c:b2:
97:3f:07:2b:dd:7f:22:70:cc:66:62:d2:2b:de:12:
ab:52:77:54:25:e6:20:ff:ca:9e:9b:1c:90:4c:92:
66:28:d4:ff:4d:c4:dd:5a:53:72:af:35:40:fc:1a:
85:51:07:e1:78:7c:70:7e:51:2d:f6:61:56:81:94:
18:7a:8f:39:ee:bd:b2:e1:d6:34:ea:c8:ac:6b:71:
42:26:3a:6c:06:27:49:29:5d:f3:30:2e:df:51:f2:
3b:a7:e2:1b:fe:37:14:ab:56:eb:87:4b:af:13:96:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:C5:1F:B1:B1:9B:52:FA:A2:C3:0D:01:AE:79:D8:45:DA:6F:94
X509v3 Authority Key Identifier:
keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:21:f8:09:72:b9:50:5c:07:2e:11:ba:25:39:21:67:d9:78:
c9:b2:46:aa:ca:d5:3a:bd:e3:3c:a3:89:ca:80:57:b7:19:52:
53:7a:0d:e0:a5:17:fa:71:9a:f7:7b:08:50:96:49:93:71:bc:
8a:00:6a:71:86:a5:59:6a:e2:89:f8:dc:6d:92:a0:fe:e5:6c:
03:c7:83:b5:6d:a0:11:a5:f4:8f:21:7b:19:5e:be:e1:a3:6e:
5b:74:a6:70:a9:8d:b7:63:77:41:d9:3d:38:db:a4:7b:d2:14:
9d:bf:ef:7c:a0:7e:23:f8:dd:a5:18:48:b2:b7:ee:e8:30:bb:
eb:d7:6a:63:2e:04:d5:5d:29:79:9d:05:08:4d:ad:92:8f:f1:
7a:02:1d:88:1a:a5:f2:bc:97:43:ae:92:78:23:7f:28:30:f3:
91:e2:93:5c:c5:f9:18:ee:e8:18:11:4e:8c:84:d0:36:9e:62:
84:9c:9d:21:c3:25:91:b9:16:4b:f3:45:d5:f8:0b:be:2d:10:
21:84:53:ed:43:b8:be:2a:81:c5:55:26:55:20:4b:5a:61:6d:
a5:57:52:01:a7:30:a5:43:0a:77:73:c1:a6:fe:6b:72:a8:72:
af:b1:de:5b:71:02:eb:b8:a2:dc:fc:30:6a:3b:61:d6:0a:52:
1e:01:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:08 2026 by rpki-client