
Error: rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File: xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier: p5LyffqWR4UgGpY5sc7C62yFx5lERxvI0X4/Wpa7xCo=
Subject key identifier: B4:0D:64:F3:86:45:6A:61:41:CD:CA:1A:BB:70:7E:92:E3:0C:FC:09
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer: /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial: 0AF6
Authority info access: rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number: 0AEB
Signing time: Tue 03 Nov 2026 01:22:46 +0000
Manifest this update: Tue 03 Nov 2026 01:22:45 +0000
Manifest next update: Thu 05 Nov 2026 01:22:45 +0000
Files and hashes: 1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: UQbNA7oti9HcpAO4z9yqcBB/jyujV4twPeXtzjRGt0I=)
2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Validity
Not Before: Nov 3 01:22:45 2026 GMT
Not After : Nov 5 01:22:45 2026 GMT
Subject: CN=6ae93766-2c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:1d:f9:de:73:41:43:53:3c:45:84:41:f4:
ad:79:25:f8:57:15:6a:b3:47:b9:b3:ff:fb:9c:10:
e9:b3:89:17:50:27:3e:e5:e7:24:a9:ae:e9:2d:42:
8b:e5:a1:d7:c7:17:90:d6:01:44:d5:4f:ea:11:39:
b3:4a:6c:8e:39:dc:df:35:f8:06:a4:f8:35:42:be:
8b:01:6c:22:53:ac:84:a3:6a:a8:58:4e:2b:fc:49:
9c:6f:f8:12:26:e6:6e:cd:57:7b:fc:d6:8a:81:7e:
24:96:57:57:37:16:90:70:af:c2:14:2d:0a:1f:8c:
53:55:69:fe:19:97:dc:e6:ae:da:f4:a7:25:e9:bd:
b6:07:39:9d:77:45:8a:a2:30:aa:4b:c6:48:bd:aa:
74:6b:32:25:34:3d:63:91:1d:81:62:4d:c8:62:00:
6d:f3:a4:a6:49:c6:5a:c1:ef:b6:e8:57:fb:6d:c7:
5b:b6:cc:18:ac:eb:90:0b:a1:c0:90:06:2a:94:8c:
cb:f7:ed:68:1e:b4:cd:01:44:50:31:ae:99:f5:92:
f1:b1:38:51:1a:c8:2e:d4:ad:57:fe:29:a4:ae:8c:
25:62:99:e6:cf:21:18:82:c3:e1:69:42:50:07:35:
bc:4c:2d:c4:8c:ae:0a:35:14:4a:e0:84:03:2c:61:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:64:F3:86:45:6A:61:41:CD:CA:1A:BB:70:7E:92:E3:0C:FC:09
X509v3 Authority Key Identifier:
keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3e:72:da:d2:fb:d2:eb:ba:6e:4f:c8:d2:0b:dc:69:8e:f7:
f4:6c:75:a2:ab:8e:4a:ea:46:07:0a:86:b7:8c:82:f6:d9:60:
7b:81:e9:d1:7b:01:cb:b5:af:0b:f9:00:07:cf:af:d1:d0:50:
d6:66:13:94:86:c8:68:a7:04:eb:64:b2:a7:cb:bb:27:77:69:
6b:95:16:87:27:73:6d:c5:8f:a3:95:a0:7e:51:9c:67:ed:7f:
ea:bd:9a:ae:51:6e:aa:83:14:58:bd:fb:10:17:e0:d4:be:4d:
fa:30:41:87:60:62:89:3a:9d:8c:14:ee:39:d0:d0:35:ac:af:
04:6c:0f:43:e3:98:92:2b:c2:8d:a2:ef:ad:5f:40:d7:97:eb:
3c:26:53:99:be:e1:ad:12:63:65:4d:30:0b:ca:4a:54:1d:03:
6c:de:13:7a:23:e7:9b:1a:05:21:6f:7c:13:b9:ec:a1:6e:cd:
52:85:5f:03:7b:f1:f8:7b:83:36:50:74:2c:a5:da:ad:17:8c:
58:dd:cc:62:b0:d0:56:f2:1a:4c:bf:6d:49:d0:55:0f:7e:c0:
0c:b9:cb:ca:95:07:e9:04:fd:59:54:f6:bf:c4:1f:71:74:40:
aa:76:ec:35:14:e1:a2:2e:40:b9:91:a1:da:70:31:ba:38:29:
a7:97:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 10:34:12 2026 by rpki-client