
Error: rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File: NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier: ynWg9t8ZlXnFUYlH8E+/viHi+033uYy0QkTH3GEo0K0=
Subject key identifier: 23:57:B7:A8:C8:B0:A3:2B:AC:46:2C:AC:29:99:48:04:41:3B:78:2B
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer: /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial: 0B20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number: 0B1A
Signing time: Sat 05 Sep 2026 01:16:56 +0000
Manifest this update: Sat 05 Sep 2026 01:16:55 +0000
Manifest next update: Mon 07 Sep 2026 01:16:55 +0000
Files and hashes: 1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: /KqCsP4kv7LRWTsv0MV76iLkUrvJjFk1gcXpNfPZHtU=)
2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
4: C5B11B58483E11F1B8CB3DB0CE1D38B0.roa (hash: Y0ZCKfJAfWw5PWvP1AXpo5C8au43GtXQpd0r+podfi0=)
5: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
6: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Sep 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Validity
Not Before: Sep 5 01:16:55 2026 GMT
Not After : Sep 7 01:16:55 2026 GMT
Subject: CN=6a9b6d88-188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:37:b3:df:02:d3:98:13:56:2b:35:b4:3f:
d7:9c:49:36:7d:e3:74:79:08:72:28:f7:36:79:1b:
00:69:19:b3:fa:21:f8:1a:a3:a5:ff:5b:cc:b3:c7:
1f:4b:3b:b8:5b:ea:a6:d4:cb:23:86:9d:88:e5:01:
4c:05:41:7e:65:81:98:52:8a:e8:91:a5:3a:49:3e:
1c:14:11:6d:f2:dd:b5:fb:18:ce:10:de:d5:6d:59:
0e:d9:41:6f:e1:20:38:db:2f:a4:67:76:61:08:84:
69:26:a1:e1:5e:42:51:75:5e:2d:12:1f:29:3d:e0:
f5:e1:db:c0:8a:7d:28:35:67:be:1f:22:51:67:b7:
eb:6d:21:6b:d1:1c:e6:ff:a4:c2:5d:e1:88:e9:8c:
2a:57:d4:ca:61:ec:56:a6:1d:13:1f:2a:43:db:85:
71:7e:7f:8c:ac:5e:4a:8c:f4:22:f7:ac:6f:8f:ea:
0c:b6:81:13:ca:48:1b:01:5d:05:89:28:9f:98:43:
41:dc:08:03:3f:a7:e2:f2:eb:47:cd:d4:09:2d:7e:
47:0d:1c:87:7f:db:21:2a:57:0e:99:71:ea:49:47:
4a:aa:ff:5b:d5:4f:b7:95:60:b7:4f:d0:3c:4a:26:
c4:56:02:cb:38:8f:2a:68:69:2b:16:f0:df:d6:c1:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:B7:A8:C8:B0:A3:2B:AC:46:2C:AC:29:99:48:04:41:3B:78:2B
X509v3 Authority Key Identifier:
keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:91:4a:42:30:7a:e0:d3:ec:75:2c:b8:9b:55:d1:21:79:
a6:31:a3:87:73:c6:04:77:71:2a:89:ed:5a:bb:c2:d9:87:c4:
c1:77:58:63:58:46:17:a3:e4:5e:76:bb:79:e6:e5:c7:7e:8a:
8d:a8:e8:51:6a:4f:d9:d2:ba:01:cd:3c:fe:72:f2:54:bc:8c:
b4:d8:37:ac:cf:88:68:c4:e7:0e:9e:c3:0b:01:42:37:9a:82:
02:d2:6f:e0:53:96:aa:42:67:13:01:77:1d:d1:f7:d1:83:60:
3a:9e:30:1a:60:b2:90:98:e6:7b:68:da:c7:8d:14:bf:92:37:
63:0f:bf:5c:a9:6e:4b:48:4c:58:03:76:14:6b:2f:bd:3c:09:
5a:81:9f:23:84:43:c1:26:67:90:35:84:ce:e4:b4:b3:14:51:
02:4e:28:be:0b:af:94:90:76:8b:d9:a0:f5:18:9e:42:38:19:
e8:c1:0a:67:82:8e:ba:73:18:a6:b8:cc:01:37:34:bc:72:4e:
74:43:33:f3:fe:db:a4:f7:c5:38:9a:dd:b7:47:8a:ed:6d:4f:
fd:6b:1a:63:12:81:07:a1:82:78:40:8e:3c:e0:61:68:c5:34:
30:10:c6:f2:0a:99:47:3d:3f:9e:02:03:85:7b:d7:9c:59:4e:
c4:13:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:36:09 2026 by rpki-client