
Error: rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
File: KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft (raw, json)
Hash identifier: YnA50hExvLDxlbIyRbNAJsEtz2cSSIzT9jdv3DjJwlw=
Subject key identifier: FD:B9:96:95:98:1E:FC:57:7B:67:19:F0:42:72:EA:3B:7B:BD:B3:D1
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Certificate issuer: /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial: 0148
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
Manifest number: 0140
Signing time: Sun 25 Oct 2026 05:20:34 +0000
Manifest this update: Sun 25 Oct 2026 05:20:33 +0000
Manifest next update: Tue 27 Oct 2026 05:20:33 +0000
Files and hashes: 1: KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl (hash: lwJJHM2dQ9n/23aKCennJAP3uHdHCDDj1g4oNmJBcn8=)
2: 17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa (hash: oUTiQVRlxq9bUqRcd4ce+yhUVNhKDDkTPe1EsY3iBbE=)
3: 5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa (hash: Lb+wrneK44yBD0CAONsxLgg7KqMCARKbOXH5GvTo2qM=)
4: 08555AE2E2AE11F0B1962FA1DAE4EC9C.roa (hash: 3dtsbRMFUQeDPfQli+f46C9vMLlNlqAr7VBqoPX8KyQ=)
5: A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa (hash: 6WEM00ZKqEuwevPcgj7EKqQZy0f2qOX5R1pO+pIZTdk=)
6: 0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa (hash: l9uO6T9qnIveSVMO0EAfStM5WqM8vIz3UlicMoWrw2s=)
7: D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa (hash: AsFQ03ZNXkHPbbINQUBNQ5N+wl37nGduJvWmVv5sY+I=)
8: BEF7090AE2AC11F08942E698DAE4EC9C.roa (hash: FhBtGfwBJqyBaCCf7eyjt0uPvyWt1f6aEoLSZs81xgc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 05:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Validity
Not Before: Oct 25 05:20:33 2026 GMT
Not After : Oct 27 05:20:33 2026 GMT
Subject: CN=6add91a2-458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:08:a7:fc:b3:6c:b5:c4:02:1d:f9:f4:2c:
46:cd:d4:22:8d:cf:91:40:ca:54:1f:15:42:7c:e4:
6d:1d:fa:ae:27:ef:27:de:41:4d:c6:ec:0b:df:53:
df:05:68:5e:fc:89:80:c5:2f:a1:4f:93:4f:27:55:
17:d0:83:57:b0:7f:0c:47:d1:bc:de:0d:9b:06:d9:
0a:c5:93:a3:5c:6b:a8:08:a6:73:60:0c:06:7f:e1:
72:c4:ee:d4:fe:d6:6c:44:c6:35:5b:01:6f:81:e4:
f4:ca:2c:ad:46:85:f0:d4:da:47:a7:3a:0a:49:3f:
24:6c:5a:94:e7:f9:ab:d4:82:58:be:79:f6:27:54:
71:b9:62:0e:88:2c:b4:ad:18:0d:81:bf:29:de:cb:
cc:22:36:2a:94:7c:89:bb:af:c0:30:0f:13:a7:3c:
9a:5c:41:ec:14:51:95:b9:40:31:25:0a:35:73:7f:
36:49:a4:1e:a0:7b:f1:23:9f:fa:f6:85:40:33:84:
ee:0c:17:cc:05:07:d7:c2:6a:7c:c7:da:35:df:86:
73:11:22:6d:f6:eb:bd:47:f7:e4:ac:8b:ef:62:f0:
84:2e:c5:3b:a5:b0:75:2d:95:01:08:d1:40:5d:6e:
bb:c8:2f:ef:a9:d2:cb:0d:5e:92:5a:3e:86:fd:d4:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B9:96:95:98:1E:FC:57:7B:67:19:F0:42:72:EA:3B:7B:BD:B3:D1
X509v3 Authority Key Identifier:
keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5b:9b:3f:fa:75:ad:83:fa:3b:03:a5:35:fe:22:97:d5:e2:
c4:2d:e8:c2:33:7e:e6:e9:5f:96:10:91:43:6a:69:71:7a:2e:
f3:12:ba:a6:ec:93:0e:38:f6:48:e1:ef:4e:18:6a:2d:2e:7d:
e3:26:49:c1:fd:d1:8a:98:d1:1d:03:df:13:30:81:c2:cb:bc:
66:f4:86:48:b6:a7:e9:e4:fd:1f:68:d7:f0:24:2e:f4:19:33:
d6:fc:bc:e4:2d:70:df:66:5e:06:7c:b1:40:da:c4:0d:1e:e6:
e7:22:70:d3:b4:ac:59:ac:f0:92:d8:80:fe:66:c4:dd:e2:fe:
95:53:5b:5c:3a:c1:a9:18:d9:43:76:a9:d7:de:73:aa:72:b1:
e5:83:05:87:56:30:c0:b3:88:c6:ee:81:50:2c:69:bd:57:59:
18:73:59:17:e0:36:2b:fa:3f:96:fe:23:77:72:6c:09:d7:dc:
f4:68:f4:77:9d:95:f8:11:c2:86:8e:0e:c1:11:6c:57:d7:87:
ac:c5:40:69:19:13:33:42:f1:88:99:0c:9a:bd:59:ae:a9:8d:
6b:f0:39:83:a1:13:8a:8e:5b:e2:84:86:15:18:c6:21:ea:d0:
1e:81:f0:61:b2:b5:e0:c5:17:c9:a3:cb:d6:2b:4b:51:81:c6:
14:b4:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:05:32 2026 by rpki-client