
Error: rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
File: J3k9IV8IgF240LqJLTNvKat7sFs.mft (raw, json)
Hash identifier: b/RxrG4Z/YfkHeFb4mMe0GITmtDnEF4WNgNHdNnflek=
Subject key identifier: B1:04:F8:49:45:A5:59:B7:A8:F5:DF:06:3D:0A:7D:3E:EA:42:DA:9F
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 064B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
Manifest number: 0637
Signing time: Mon 26 Oct 2026 02:55:40 +0000
Manifest this update: Mon 26 Oct 2026 02:55:39 +0000
Manifest next update: Wed 28 Oct 2026 02:55:39 +0000
Files and hashes: 1: J3k9IV8IgF240LqJLTNvKat7sFs.crl (hash: Z9f9BJ2RYeoISgxmPalWj0CQw3GnquMoxm2g4dPDx8U=)
2: DD851EDE8AC711F1ADF3F9AECE1D38B0.roa (hash: iCDYgU2+SKpeQzQaU+mrTaji/0hiNcDZ+TL2MuxqLEU=)
3: C64E95D28AC811F184603AB5CE1D38B0.roa (hash: 7YEuA2VOavsPvBxjsk4vEJsovfUYi9Dd9ZYLz3aRjrQ=)
4: E87CF5D88AC111F18BD6DA09CF1D38B0.roa (hash: wAfY8kLqZnXXJoKn8K0yeemJEp7SpmtL2+EGPJfF7W4=)
5: 1642FE7A8AC911F1A47447B5CE1D38B0.roa (hash: FNM19ZjkMFO84jFscTN4Bb3t+zjkVvUyMhpR+gcZsmg=)
6: CC15C4C08AC011F19E9BC601CF1D38B0.roa (hash: CLEdi3dH6VLoAeQY7RC1HiDFnjkuwPHPEYCtOB/eMtU=)
7: 7E01BE968AC111F18CFBDD05CF1D38B0.roa (hash: wKdAINsDPIWS1ZmU8I02GrZCpDAtG4wE8mc2xedhZKs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 02:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Oct 26 02:55:39 2026 GMT
Not After : Oct 28 02:55:39 2026 GMT
Subject: CN=6adec12c-1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:e9:c3:86:eb:65:aa:09:4c:17:fa:30:d3:
3e:11:19:e2:55:3d:c8:d1:5e:b5:5e:71:cc:2f:82:
99:05:90:21:85:5c:9f:d5:e1:18:bb:19:5d:fc:19:
d9:33:8e:4d:1d:ea:f1:7c:2c:3d:e9:f5:f0:5a:ef:
ef:b6:31:2f:21:0b:33:be:80:5a:e0:80:77:90:35:
34:e3:16:05:70:a5:4f:2f:9d:bc:cb:43:8f:dc:90:
c4:9b:1e:10:74:8c:12:43:d4:e8:3b:a7:46:e5:ce:
8c:51:b0:77:89:2b:f2:5f:c1:01:a4:fb:22:f5:fb:
c6:fc:66:28:41:83:84:b0:66:ce:db:80:37:94:fa:
32:8a:5e:05:04:1a:cb:f5:41:e1:f5:85:ec:f7:b3:
3d:1b:42:7d:9d:8d:c1:8b:bf:55:f7:d0:dd:e0:62:
47:f5:b5:e1:7c:eb:83:cf:83:e2:a5:4d:be:70:a5:
6a:46:d5:d0:9e:2c:a7:86:16:90:44:e1:e3:b4:36:
2b:ef:b9:45:b4:09:02:f4:7e:5e:ab:58:ca:42:10:
27:22:29:bf:92:f1:e7:d2:c5:63:9d:85:df:d0:3e:
fa:0b:96:47:75:56:ee:6a:37:02:1f:b0:e0:66:20:
db:18:99:15:15:d1:d1:2d:3a:f8:91:9a:0a:0b:ee:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:F8:49:45:A5:59:B7:A8:F5:DF:06:3D:0A:7D:3E:EA:42:DA:9F
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:25:0a:57:5d:ba:20:88:b5:36:af:d5:c8:99:33:e6:c6:
60:5a:90:26:45:da:71:62:a9:75:b2:9b:10:d3:e3:7a:bb:7f:
21:05:df:7a:6d:e4:25:28:17:e4:22:dc:70:02:27:b8:35:c3:
c0:3c:b5:25:77:db:ea:bd:e4:8c:5b:07:44:9b:00:63:78:de:
86:ca:4d:44:50:31:12:d1:04:87:9e:f1:ad:03:8d:69:9b:e6:
bc:b0:a1:07:7d:fd:44:f0:dd:16:58:35:03:04:88:f2:ec:d4:
0c:6d:ff:a9:92:32:17:20:c2:5a:63:12:09:eb:e8:7c:39:ca:
a1:51:6d:b7:b9:78:d4:7a:0c:88:15:c5:74:6e:a3:83:1a:e2:
d4:17:99:c0:17:53:88:b5:41:c0:a4:7d:6f:b0:c2:75:17:0c:
aa:77:35:21:74:9a:5d:c4:19:9e:09:c1:3c:40:fe:0b:e1:07:
bf:f2:1a:a0:05:df:21:7f:66:7e:e7:1a:93:86:f0:7d:c6:ba:
d5:43:1c:96:30:47:b6:40:19:bb:d8:96:a4:3e:4a:71:05:1e:
22:48:e4:ba:4f:61:12:e8:d6:82:d7:fd:31:d9:b8:73:82:d2:
b7:50:87:ab:a4:91:9e:2a:ab:8a:46:b1:8a:b7:02:23:7a:bc:
4a:6f:04:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTREMURBRjExMC8GA1UEBRMoMjc3OTNEMjE1RjA4ODA1REI4RDBCQTg5MkQzMzZG
MjlBQjdCQjA1QjAeFw0yNjEwMjYwMjU1MzlaFw0yNjEwMjgwMjU1MzlaMBgxFjAU
BgNVBAMTDTZhZGVjMTJjLTFmNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxoOnDhutlqglMF/ow0z4RGeJVPcjRXrVeccwvgpkFkCGFXJ/V4Ri7GV38
Gdkzjk0d6vF8LD3p9fBa7++2MS8hCzO+gFrggHeQNTTjFgVwpU8vnbzLQ4/ckMSb
HhB0jBJD1Og7p0blzoxRsHeJK/JfwQGk+yL1+8b8ZihBg4SwZs7bgDeU+jKKXgUE
Gsv1QeH1hez3sz0bQn2djcGLv1X30N3gYkf1teF864PPg+KlTb5wpWpG1dCeLKeG
FpBE4eO0NivvuUW0CQL0fl6rWMpCECciKb+S8efSxWOdhd/QPvoLlkd1Vu5qNwIf
sOBmINsYmRUV0dEtOviRmgoL7uo9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsQT4
SUWlWbeo9d8GPQp9PupC2p8wHwYDVR0jBBgwFoAUJ3k9IV8IgF240LqJLTNvKat7
sFswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RDFELzU4Q0YzMEU0MjkyODExRUQ4RTY4RThGOEYxMjIyNDY4L0ozazlJ
VjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ozazlJVjhJZ0YyNDBMcUpMVE52S2F0N3NGcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTREMUQvNThDRjMwRTQyOTI4MTFFRDhFNjhFOEY4RjEy
MjI0NjgvSjNrOUlWOElnRjI0MExxSkxUTnZLYXQ3c0ZzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKeCUKV126IIi1Nq/VyJkz5sZgWpAm
RdpxYql1spsQ0+N6u38hBd96beQlKBfkItxwAie4NcPAPLUld9vqveSMWwdEmwBj
eN6Gyk1EUDES0QSHnvGtA41pm+a8sKEHff1E8N0WWDUDBIjy7NQMbf+pkjIXIMJa
YxIJ6+h8OcqhUW23uXjUegyIFcV0bqODGuLUF5nAF1OItUHApH1vsMJ1FwyqdzUh
dJpdxBmeCcE8QP4L4Qe/8hqgBd8hf2Z+5xqThvB9xrrVQxyWMEe2QBm72JakPkpx
BR4iSOS6T2ES6NaC1/0x2bhzgtK3UIerpJGeKquKRrGKtwIjerxKbwTR
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:24:58 2026 by rpki-client