
Error: rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
File: HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json)
Hash identifier: dVI0yyQQgZFCj0awfDfEQQX2fOoCkaHuhiLbzN4D52A=
Subject key identifier: 98:5B:D8:BF:21:43:65:F5:DE:FA:8D:A4:FB:2D:C6:54:CF:DD:A7:A3
Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
Certificate issuer: /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Certificate serial: 0349
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
Manifest number: 0346
Signing time: Thu 10 Sep 2026 04:13:51 +0000
Manifest this update: Thu 10 Sep 2026 04:13:50 +0000
Manifest next update: Sat 12 Sep 2026 04:13:50 +0000
Files and hashes: 1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: fBx5pIS4HqQF6lYRT7vsz7Q6unM2nMsWUcmG1wv/E8U=)
2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=)
3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 04:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841 (0x349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Validity
Not Before: Sep 10 04:13:50 2026 GMT
Not After : Sep 12 04:13:50 2026 GMT
Subject: CN=6aa22e7f-dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:88:a5:e8:00:49:3e:37:46:ed:bc:24:04:
bc:c3:85:74:32:5b:05:13:bf:85:12:66:63:62:29:
9d:1b:76:2b:2a:02:3a:a4:df:e7:5c:c6:69:7c:f4:
8e:f9:51:2b:c8:73:e3:7e:b3:03:3b:97:a9:dc:c3:
2c:9c:9b:f5:1c:74:37:7c:5f:c6:09:19:90:b4:b8:
66:49:bc:cb:93:d5:bb:2b:05:57:bd:d0:2c:72:c6:
0a:c6:87:93:19:a2:82:fb:60:1f:ee:99:d1:30:b7:
bc:7e:d5:cd:6f:e3:54:06:6d:fb:98:20:b8:fc:b0:
78:d7:4a:6f:71:e7:10:00:da:96:3f:0e:63:67:71:
5d:b1:99:95:c9:3c:f0:5c:d7:a6:f2:0e:df:3b:c0:
4b:93:49:ed:32:95:f1:49:61:b2:d4:93:7a:f9:ea:
d4:24:ec:18:e0:10:77:dc:ed:e0:5d:ff:80:de:53:
3f:79:c1:52:68:83:5a:40:f7:f2:14:7e:a4:17:ea:
f2:a4:25:e5:81:31:f9:f4:1b:54:70:f1:06:0c:57:
79:8e:0a:e9:9a:1f:c9:f9:04:fe:6b:8c:2f:af:26:
ef:7e:f2:a8:1e:cf:0b:72:90:92:a4:c5:45:78:b0:
ea:70:23:1e:a5:57:54:1b:f5:00:74:26:12:c7:c4:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:D8:BF:21:43:65:F5:DE:FA:8D:A4:FB:2D:C6:54:CF:DD:A7:A3
X509v3 Authority Key Identifier:
keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:97:5c:9b:fe:33:a6:7a:3b:b0:0b:e1:89:5c:6a:0d:62:
cd:b1:d3:56:56:4b:1f:c4:d0:50:e4:fe:22:41:cf:b3:a1:20:
3d:5a:3e:91:d1:a2:c1:13:1b:48:19:2d:4b:12:bd:1e:4a:5a:
39:8d:0e:13:03:d9:77:eb:d2:a1:b9:68:b4:7d:8b:3a:f3:6b:
3e:79:8d:83:70:2a:27:77:f1:c1:73:17:43:7c:70:40:be:b1:
17:cd:bf:b2:01:0d:ba:43:ed:9b:01:f3:ce:f7:e1:3a:32:dd:
43:11:67:33:05:d7:fc:20:f5:92:cd:e3:0b:90:41:e2:be:da:
58:36:bd:26:90:7e:5d:ad:38:11:90:11:13:67:c4:fc:8d:df:
55:85:a2:a2:6e:ea:62:95:a3:9c:dc:97:d1:f4:98:9b:e2:64:
7b:02:ae:6d:04:23:a6:dc:cf:17:67:7a:f8:94:9c:0b:41:37:
02:61:0f:6f:6b:a8:45:75:5a:35:60:f9:03:1c:52:de:9b:51:
87:ee:dd:d4:24:fb:7a:82:e1:f5:e5:ec:15:17:66:99:78:4d:
08:e8:d9:e7:38:4e:f7:d7:4d:be:a8:a9:d4:5b:4e:33:af:5f:
9a:e2:01:3b:a2:47:cc:a9:d8:55:79:96:39:78:ac:2c:da:70:
3f:ac:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:29 2026 by rpki-client