
Error: rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File: pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier: 1i8CKYwjXPhuwJIoQS8u3bik2XsZTXCVyItHwF+09jc=
Subject key identifier: C9:EF:12:D6:98:FE:CF:83:14:A5:A0:BD:4D:EA:5E:2B:C4:CB:EE:28
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer: /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial: 0E0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number: 0E0C
Signing time: Thu 05 Nov 2026 01:07:36 +0000
Manifest this update: Thu 05 Nov 2026 01:07:35 +0000
Manifest next update: Sat 07 Nov 2026 01:07:35 +0000
Files and hashes: 1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: 7vhegMrL53CsNgkWNUepgLlu7fSM8NxnV6PLvQlxMMc=)
2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598 (0xe0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Validity
Not Before: Nov 5 01:07:35 2026 GMT
Not After : Nov 7 01:07:35 2026 GMT
Subject: CN=6aebd6d8-b47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:a7:a2:43:98:c6:c4:0b:8e:86:5f:35:0a:
8b:f6:86:64:a7:a2:0f:8c:6c:85:24:a9:d9:88:37:
d2:a6:0b:c2:72:c8:28:51:f3:a4:bc:41:2c:42:0c:
d4:39:3d:77:15:bf:57:bf:17:05:6a:5b:39:54:8e:
f8:da:ef:0b:8a:54:b4:54:30:be:9e:bf:65:43:c7:
c6:7b:bf:ec:f0:ab:9a:82:5d:14:a6:0a:d1:61:5a:
0e:31:6c:ea:e2:07:ba:7f:72:bd:9e:cc:d6:71:a5:
f3:02:d5:99:5d:98:f6:8b:47:b8:f4:2e:3c:7a:fb:
62:c8:29:ed:2f:ed:77:36:05:c2:91:c1:f9:dc:63:
0d:73:91:49:09:60:ce:06:02:3e:15:2e:ed:3b:00:
e7:c7:ea:96:4b:40:60:9a:72:e5:bc:5f:f6:95:d3:
a5:05:87:f1:4b:de:bf:43:71:07:e0:f9:7b:e1:0e:
93:0c:45:48:77:93:b7:c8:66:3d:19:a8:fb:16:e3:
a2:59:3a:9e:58:3b:47:b5:e8:16:d9:eb:d9:1e:43:
04:67:90:c9:37:3c:69:04:cb:9a:0c:74:3c:37:15:
0a:0f:b1:83:4b:2c:81:5d:6f:7d:ca:5e:c4:c0:55:
30:3f:5d:70:bc:36:dd:32:b0:c3:70:94:b3:96:c5:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:12:D6:98:FE:CF:83:14:A5:A0:BD:4D:EA:5E:2B:C4:CB:EE:28
X509v3 Authority Key Identifier:
keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:6b:eb:9c:58:17:ef:d2:b0:07:19:5a:63:2f:06:1a:b3:
04:92:3f:df:68:e8:81:91:c5:14:61:86:ed:0e:24:90:1b:ae:
06:aa:65:47:a4:dd:cc:fd:6d:29:7a:56:bb:36:3b:1f:d5:08:
a3:d5:81:9f:21:6f:6a:30:2e:3e:f3:95:ed:c8:63:0e:8f:a5:
e6:3e:b7:ec:d4:29:7a:a5:30:35:f3:b5:cf:36:ba:97:03:d1:
ab:5e:29:67:19:38:49:bd:f0:23:f1:b5:c4:51:01:72:2c:d2:
17:78:bb:60:55:36:2e:75:36:aa:53:93:1e:e1:d5:12:a0:2c:
c1:09:7f:e2:2b:68:c7:1a:2e:24:bd:e8:b3:c2:3c:ef:45:ec:
fa:23:69:9b:59:09:e3:46:80:8a:54:52:e3:ed:4a:ab:59:bf:
a3:96:a7:c3:27:15:83:61:e8:51:3a:3c:78:87:ea:e3:0d:52:
1a:67:0e:9b:59:2f:8b:f3:72:1e:a6:4f:ca:0f:53:99:a0:ae:
d5:53:70:c1:e6:e9:60:e9:a6:9a:24:15:b2:29:68:36:65:c4:
bd:ce:ef:fa:76:0f:58:19:7c:18:13:e0:e7:fb:cf:0d:38:5e:
4f:81:7a:e5:67:16:c3:e3:be:c2:e3:a2:e8:48:91:bc:31:f1:
80:80:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:07 2026 by rpki-client