
Error: rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier: JEB6QNOIq9w7psPgicB5UEys0vlmF4WvN/eOQCm52iE=
Subject key identifier: 9F:6C:4A:CE:88:B4:A1:9E:00:FF:E3:B0:7A:26:B4:40:75:C4:0C:F4
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 0368
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number: 0360
Signing time: Sun 25 Oct 2026 04:17:24 +0000
Manifest this update: Sun 25 Oct 2026 04:17:23 +0000
Manifest next update: Tue 27 Oct 2026 04:17:23 +0000
Files and hashes: 1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: rOlBMf5ZIOpK8LGlrdnwswv4sfWVvLjCVHj1ivhRmM8=)
2: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (hash: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI=)
3: 83DC9676CDCD11F08E2794B7DAE4EC9C.roa (hash: 4Gl9Zow27JuQ8GOMSVeAJ+sgSeivkesNbYlt5t1Eo1A=)
4: 31C48A88CDCD11F0A70CB3B5DAE4EC9C.roa (hash: 443cxlKgy4pnPq2qfyUo04AC7frZpxKf8kr/vGjPde4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Oct 25 04:17:23 2026 GMT
Not After : Oct 27 04:17:23 2026 GMT
Subject: CN=6add82d4-3613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:64:e7:b6:3d:24:4d:9a:f0:43:fb:1b:81:
a5:cc:e5:0d:7f:62:14:89:94:d7:5e:07:43:27:f6:
58:ce:76:b9:50:4c:8f:ae:07:aa:ef:d2:98:15:c0:
1f:81:11:c6:7f:85:f5:17:95:8e:ca:08:1b:e0:cf:
d4:54:05:9c:5b:18:64:80:29:63:76:42:d3:95:a4:
0e:0e:5f:51:63:8c:1f:9a:bd:46:6a:34:9b:f2:17:
d5:47:37:9a:58:3c:b0:02:6f:40:46:94:12:33:5f:
65:3d:98:1d:a2:1a:62:5e:5d:eb:8c:6d:c3:7c:ed:
4a:f5:55:86:b2:2a:32:cd:c0:8f:3e:c4:c3:05:c1:
a0:6f:68:77:c9:e8:08:d1:e1:04:6c:47:a7:80:12:
bb:ab:e9:f8:66:45:bf:92:75:40:30:a9:d7:99:c5:
61:9b:31:fd:5b:3d:b0:ca:82:5d:8d:94:84:07:4c:
47:7f:e0:7c:de:28:8a:d8:10:d2:65:4e:80:b1:e8:
3a:fe:37:ca:06:78:45:f8:db:5e:35:f9:52:bf:dc:
4e:fe:1d:de:f1:e0:0c:ed:0e:ff:49:aa:ca:bc:3a:
35:14:5e:96:d5:c3:29:f4:b1:16:28:5b:81:fb:e2:
3e:75:88:67:e4:6d:6a:12:3d:fd:c4:e6:07:d9:53:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:4A:CE:88:B4:A1:9E:00:FF:E3:B0:7A:26:B4:40:75:C4:0C:F4
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:d0:4b:50:72:bc:c9:e6:a6:aa:7d:ec:de:f7:17:06:0f:63:
be:3b:b7:68:fa:62:8d:83:42:3a:c2:a7:29:22:e8:90:1b:19:
6c:a8:75:08:60:03:b3:70:ce:43:79:91:35:8d:bd:2d:56:a9:
4f:eb:47:e0:1b:0b:ad:9f:04:7d:d5:8a:e3:6c:0e:a3:d1:6c:
b3:52:05:ff:eb:de:70:46:fb:10:15:da:88:8b:a0:7f:8d:47:
f6:3e:70:d8:b0:c4:ad:31:62:f0:b7:52:53:03:af:8a:bc:56:
5b:56:14:60:2b:0f:d1:1f:6b:34:4e:91:33:6b:3e:ec:a5:03:
f1:28:11:5c:57:1c:1a:98:ab:98:ae:ba:5e:97:d0:73:d8:98:
cd:56:8b:f2:49:67:f0:f5:79:6d:70:fc:51:31:66:26:49:a7:
3d:70:6f:e1:80:ca:64:9b:66:00:1e:bf:9c:a8:69:fb:aa:ac:
4a:8a:bc:d7:8e:7f:70:b0:1b:b5:1f:f4:29:ee:0a:f1:75:bb:
6f:f2:8c:38:19:23:e0:93:dd:a2:78:16:39:a4:c2:d8:1f:ad:
78:43:46:60:b6:81:22:7f:e4:28:3b:24:24:d7:a0:44:31:f2:
40:8b:15:18:36:79:be:5c:2e:e4:f5:c2:03:5d:69:e9:3b:7b:
fe:2f:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:57:16 2026 by rpki-client