
Error: rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
File: HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json)
Hash identifier: dTIZQ3G/TolSJVDT1fJE5+YSB3YkoPM3IpFVLK9Onqw=
Subject key identifier: 82:1B:5D:8D:2A:87:07:71:2A:3F:45:51:3A:27:B6:F6:DF:C8:CF:57
Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
Certificate issuer: /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Certificate serial: 0380
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
Manifest number: 037D
Signing time: Wed 04 Nov 2026 04:14:00 +0000
Manifest this update: Wed 04 Nov 2026 04:13:59 +0000
Manifest next update: Fri 06 Nov 2026 04:13:59 +0000
Files and hashes: 1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: 294Xo8oASJyilq7rpVV8NTwjTll8aMFPmsZb4oYX61k=)
2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=)
3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 04:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Validity
Not Before: Nov 4 04:13:59 2026 GMT
Not After : Nov 6 04:13:59 2026 GMT
Subject: CN=6aeab107-dd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:bb:8c:38:9c:9e:37:55:15:a3:43:6e:2e:
7f:53:f7:ee:c1:da:be:ff:af:92:c7:cc:f4:6d:42:
44:9d:76:11:b2:fe:38:40:8f:58:03:1d:7c:71:90:
84:33:d7:30:16:8d:11:b5:32:86:43:d0:88:36:ce:
6b:3b:a8:26:a1:a8:2a:24:54:76:48:51:e5:fc:e1:
17:1d:2b:65:c8:d4:71:61:c7:71:ca:20:18:1d:a2:
0b:1e:2a:43:0e:d2:5c:5f:f0:cf:65:50:ad:66:6a:
d2:24:2e:c1:be:2e:96:da:ec:36:98:91:04:53:fd:
e0:fa:8b:12:5b:13:0c:56:eb:be:08:fa:dc:df:75:
0b:0c:b3:9a:53:b0:0b:51:0b:49:88:6d:2d:8d:18:
e9:52:a8:06:63:5a:72:09:ba:dd:37:1e:ac:f6:54:
93:10:14:47:aa:2f:93:a1:89:a1:39:88:fe:64:ee:
8a:62:77:3c:fc:a3:fb:d3:7c:fb:2f:ef:5d:65:fd:
11:1a:db:f9:f3:cc:5a:e6:0a:6e:7d:9a:5b:29:31:
ef:5a:2c:f4:a4:35:bb:13:89:3b:6e:d2:f2:88:df:
16:d3:68:3b:13:95:f5:1d:3e:ab:0f:ad:f5:87:fe:
cf:05:0f:f8:4a:32:4d:22:4c:8e:5e:db:be:a5:5c:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:5D:8D:2A:87:07:71:2A:3F:45:51:3A:27:B6:F6:DF:C8:CF:57
X509v3 Authority Key Identifier:
keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:79:cc:8a:11:c8:93:fd:46:72:f7:ce:90:2c:41:c4:7d:
f7:d4:3c:11:c0:fe:99:b1:8d:f0:55:c3:b0:d4:2d:44:e8:ff:
71:fa:67:10:8b:7f:3c:85:56:e3:6f:76:d4:53:d1:cb:8f:6f:
ae:5d:c0:21:c0:11:3e:e5:28:b8:c7:83:fd:48:7d:4a:a3:31:
77:df:c1:ad:54:e9:91:4e:9d:97:78:56:9a:50:c4:d6:e0:d0:
c1:c5:e1:e4:00:42:44:9f:42:e1:74:1d:81:5f:02:a1:37:44:
ae:f3:52:76:46:59:94:4f:69:2c:df:07:27:80:01:33:b3:33:
71:59:5e:58:be:61:fc:d0:af:d6:aa:2c:48:af:f6:5b:73:77:
62:b8:48:e1:90:aa:4a:84:3d:59:1e:76:5e:26:f7:9e:9d:2c:
b7:b8:6e:72:d5:cf:a9:4f:e5:7c:e9:98:df:4b:3a:6f:d5:d0:
b5:ed:d3:45:81:51:6b:b0:f1:31:a0:54:b4:40:c3:58:1c:10:
11:89:0f:9c:1e:ba:19:eb:a7:4a:36:b9:d8:fa:eb:9e:09:0f:
49:af:4f:7d:b7:6a:7e:21:8a:a4:0a:61:dc:45:12:ca:82:97:
5f:ec:38:86:f9:94:9c:37:83:a8:e3:1e:02:8f:2f:19:f0:c4:
d9:bf:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:26:23 2026 by rpki-client