
Error: rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
File: VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft (raw, json)
Hash identifier: 9Bb5qgHmFlhKcMC+5/LbR432WJ++CQWYm3d5FyAOfcs=
Subject key identifier: 15:C2:98:9C:74:C0:C3:71:C8:89:F8:67:6E:CB:06:C1:74:C2:9F:E3
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Certificate issuer: /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial: 059B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
Manifest number: 0590
Signing time: Tue 03 Nov 2026 03:13:35 +0000
Manifest this update: Tue 03 Nov 2026 03:13:35 +0000
Manifest next update: Thu 05 Nov 2026 03:13:35 +0000
Files and hashes: 1: VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl (hash: Pd/j63n9dj3MQzsmFCi3lSZCuiwVD3nbDXkKgM48CVg=)
2: 593D37C4CC4911F1B83A6CE3CE1D38B0.roa (hash: a9Pkhm+C2fyuHhtcOGhWgWXSlnw5q0kgMAyvd8YOCnM=)
3: 38091F36CC1311F1AFFBE6EDCE1D38B0.roa (hash: f9KkcvYIzrRlbKzLzx/6gUwY6/Pzf04lBDEV2wTEXuc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Validity
Not Before: Nov 3 03:13:35 2026 GMT
Not After : Nov 5 03:13:35 2026 GMT
Subject: CN=6ae9515f-4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:4c:ef:12:35:be:e7:a6:d2:5b:07:60:98:
27:5a:9e:a4:d1:48:73:c3:27:1a:a3:ff:1d:06:8d:
c1:82:a4:19:44:6a:44:7b:13:c8:ed:2d:c6:fa:50:
62:1a:1d:a4:7a:4b:f2:f5:ec:1e:be:2d:97:6e:9a:
08:c6:6d:ce:a5:1b:f0:74:c8:40:0e:7c:27:bc:7d:
4f:ac:2d:2b:8c:f8:11:43:e7:59:73:76:f4:c6:67:
b1:a7:0f:84:41:7d:db:fa:ac:fe:6b:b0:33:42:1a:
44:ab:4a:bd:e2:b4:4e:39:ce:39:b3:81:96:f9:4b:
5e:7d:af:8a:8b:9a:9d:49:ef:a7:fd:e5:7a:72:11:
6e:98:9d:70:f2:f1:ec:eb:c9:98:d5:91:cf:aa:25:
df:9a:ea:43:ec:0f:05:66:c9:a5:53:f1:b5:5c:9c:
54:00:57:d0:6e:95:f5:a6:16:25:43:9a:6a:c9:38:
6c:ef:d3:0a:57:0e:2f:be:25:4b:04:06:e4:49:cf:
0a:5b:40:73:cc:84:34:39:23:c6:4a:5f:b7:d8:7f:
22:99:2d:3b:c4:b9:f3:91:02:74:f5:88:fb:f5:00:
aa:8c:6c:80:5a:fb:78:c1:5e:6a:21:33:1f:d9:a3:
67:b5:a6:b2:07:c8:62:fa:49:c1:b6:5b:fb:e8:fa:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C2:98:9C:74:C0:C3:71:C8:89:F8:67:6E:CB:06:C1:74:C2:9F:E3
X509v3 Authority Key Identifier:
keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:ff:a5:b3:51:ce:47:8d:40:fb:a5:9b:85:4b:05:f1:ca:
19:4b:85:92:cf:6a:96:08:7c:5d:04:f0:80:c1:d3:e0:7f:d7:
30:35:8c:e0:bc:5c:f3:65:a1:69:a5:0c:3f:0f:c6:64:2b:d0:
02:7f:c4:17:34:a0:f2:46:15:d5:06:0a:29:ac:0e:46:17:31:
70:98:a5:ca:9f:8e:d4:56:df:6a:0d:4c:aa:c3:3f:05:72:5b:
ef:25:95:54:08:5e:a7:f2:3d:77:37:bf:95:aa:92:a4:b8:10:
2f:d4:53:49:4e:27:9a:b5:98:65:1f:81:cd:8b:52:dd:11:c8:
b0:03:e7:70:c3:ab:80:6c:c8:d8:2f:25:31:79:d8:c3:d5:b7:
44:7e:33:f2:68:06:b5:09:c9:1b:19:f8:b4:2a:61:28:ee:b7:
83:a2:81:7d:e9:b6:ea:b0:f8:dc:9b:8d:e1:5f:55:6c:6c:28:
93:d3:65:54:14:2d:35:69:d0:74:29:b6:fe:7b:dd:f9:d9:b7:
6a:09:a6:d6:f3:2d:f6:44:d2:c8:35:2f:05:ae:93:7b:79:61:
16:7d:ac:02:66:3e:5f:45:e4:1b:d2:c7:83:9f:db:2f:43:df:
23:5f:5b:36:52:cb:b2:df:34:a0:16:1c:f3:8e:45:d6:3c:fa:
e0:78:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:44:32 2026 by rpki-client