
Error: rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
File: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft (raw, json)
Hash identifier: vicndZtjQFyzljkozBv+zI8lJjVgQyffj9f2b5w5Krk=
Subject key identifier: 7C:4C:8B:BC:4B:F9:9A:4D:B6:6D:71:B8:29:AE:22:57:9A:0C:46:3A
Authority key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Certificate issuer: /CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Certificate serial: 0669
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
Manifest number: 0663
Signing time: Sun 25 Oct 2026 02:47:59 +0000
Manifest this update: Sun 25 Oct 2026 02:47:58 +0000
Manifest next update: Tue 27 Oct 2026 02:47:58 +0000
Files and hashes: 1: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl (hash: oFEb+8dzbrqYWcFGWozjJaFYgb+99aT3gTKovk4JAxY=)
2: A621E03860AD11F184B819D2CE1D38B0.roa (hash: Jmq4unja5DzvfSBmhbdnQaMaFOiJ/5epzprsOMlWzMo=)
3: 0F017D1260AD11F1B5A1E2CDCE1D38B0.roa (hash: eS18DiySWyYvUU6o4IL9+Uz5q6U7DX44S61JdbmHeq0=)
4: 8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa (hash: eaUeu3KkKpNcCw9HrgYvB/pha9SYhwNNA6TnXg77ADw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AF, serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Validity
Not Before: Oct 25 02:47:58 2026 GMT
Not After : Oct 27 02:47:58 2026 GMT
Subject: CN=6add6dde-2c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:b3:b3:6f:53:c3:2c:8b:b1:44:18:58:a5:
47:b0:13:7d:1e:0d:64:29:63:ab:a7:40:46:c4:6a:
4f:bb:f7:6d:2d:87:6c:cc:72:41:37:59:f8:fe:b0:
39:67:62:bf:cf:8d:af:f7:21:c8:79:69:6b:cf:85:
c0:d0:29:3a:eb:1a:21:fd:f9:0d:cd:cf:56:ba:0a:
17:06:c1:82:d9:b3:8c:b5:18:b6:0f:9f:4a:05:4b:
55:13:02:ff:2e:50:f4:40:ee:08:ea:e6:ab:2e:5e:
9e:a0:0c:7a:38:89:56:3d:c8:c1:11:bd:f1:8d:98:
2b:fa:19:c6:37:af:b6:70:82:45:cf:c3:83:a2:e2:
92:9a:00:7e:95:a8:58:e1:d3:7b:71:ab:03:c0:b3:
40:d8:89:33:46:e4:dd:04:fb:00:ce:ad:b4:f6:ac:
27:63:2e:40:32:b1:72:14:73:86:c9:b7:e4:d0:83:
23:a8:2b:d2:74:89:26:3c:f3:40:99:fd:bc:aa:82:
e5:f3:f9:68:49:a9:36:81:fa:1e:56:37:2e:b6:ae:
8b:a2:c0:17:fd:50:60:18:ad:d1:73:27:20:82:0f:
49:47:fa:11:72:7b:f4:b2:f0:76:ac:00:d2:54:02:
da:71:43:1f:2f:a6:24:f3:06:c7:9e:2a:04:8d:54:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:8B:BC:4B:F9:9A:4D:B6:6D:71:B8:29:AE:22:57:9A:0C:46:3A
X509v3 Authority Key Identifier:
keyid:55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:53:03:47:3a:1f:4f:27:38:66:12:0a:dc:94:35:eb:80:
18:e3:33:8d:2c:ff:39:69:39:c3:44:e6:f1:ce:f6:50:6e:bf:
ef:aa:f3:87:47:44:72:f3:66:43:35:09:ed:a5:ba:ae:81:98:
e1:be:cb:51:5b:62:93:3e:77:21:27:c3:cb:8e:73:ef:99:5c:
38:e1:07:1d:71:20:77:de:91:f8:5f:13:68:bc:cd:ee:f0:cc:
a6:5a:03:6d:6e:d1:2f:3c:ee:f9:8b:42:8d:d6:8c:0f:32:80:
9b:c3:70:ea:3b:f1:ab:23:2a:cd:d2:76:d3:1f:70:f9:7a:b2:
b3:06:63:29:80:64:f2:76:e7:5f:5a:e4:35:13:6c:9f:04:52:
e5:7f:7c:93:55:86:d1:ef:25:be:1e:8f:f2:64:c9:1d:2a:9b:
99:b0:17:8a:39:f5:a1:07:8a:71:fe:df:d2:1e:40:ae:be:49:
5a:5f:f7:4c:36:af:4c:9b:22:ff:3b:9e:3d:7b:91:d7:a3:1d:
90:1a:92:37:3b:d6:19:22:0d:d1:03:14:81:03:b5:d6:68:03:
74:3d:0a:51:6a:f4:86:5d:f6:70:03:62:c1:37:61:02:35:32:
ab:0e:2b:29:35:76:77:33:14:8f:42:fd:37:8d:36:49:ff:60:
da:ec:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:50 2026 by rpki-client