
Error: rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
File: 3udgbTmfhJnqSZX7yd_BW7kYfWU.mft (raw, json)
Hash identifier: o/JN32umtAnuetjhwMsJwus57uCgcNYt2fIuHJ4Qew8=
Subject key identifier: 00:44:4D:7B:93:5A:BE:41:6A:26:86:C7:8B:63:26:44:62:9B:CF:96
Authority key identifier: DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65
Certificate issuer: /CN=F361D6E0AF/serialNumber=DEE7606D399F8499EA4995FBC9DFC15BB9187D65
Certificate serial: 0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
Manifest number: 0A
Signing time: Mon 02 Nov 2026 06:05:33 +0000
Manifest this update: Mon 02 Nov 2026 06:05:33 +0000
Manifest next update: Wed 04 Nov 2026 06:05:33 +0000
Files and hashes: 1: 3udgbTmfhJnqSZX7yd_BW7kYfWU.crl (hash: 55d088psLkkhQImmHD1/GgxkQM6il+qH0Q9hJJNqL+M=)
2: 59A12AE0D10311F1B604ABFCCE1D38B0.roa (hash: pwyqspgakmPDPa8Et55S+lcI1NNTVKJ5KkGTTnF6uTE=)
3: BC4ED6B6D10211F1A3C7F6F7CE1D38B0.roa (hash: +/unW82N1T6/W19O6X44mEwrdKCYN76rWIFlZis+JKM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Nov 2026 06:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D6E0AF, serialNumber=DEE7606D399F8499EA4995FBC9DFC15BB9187D65
Validity
Not Before: Nov 2 06:05:33 2026 GMT
Not After : Nov 4 06:05:33 2026 GMT
Subject: CN=6ae8282d-0ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:14:14:85:d3:f9:a1:d5:ce:27:d4:22:ca:
c5:79:50:24:77:41:dc:80:85:07:50:bf:9c:b3:57:
d5:a4:d7:ef:c8:51:df:a3:bb:f4:29:ae:3c:88:0a:
b4:0f:22:a3:9a:bc:6c:cb:84:58:79:d6:c6:3c:61:
db:5a:60:72:f0:ba:6a:f2:30:88:bd:58:a5:c6:32:
44:b6:71:e7:af:3e:2a:38:86:ce:2c:4c:90:dc:6b:
6a:80:cb:29:d0:af:4b:47:8c:8e:50:d0:d0:6e:e5:
22:cd:fe:d9:dc:25:6d:44:5c:b7:86:a8:73:1d:01:
03:44:85:c5:eb:75:4d:8b:65:bc:6e:7c:1d:99:70:
d5:10:d0:21:1d:67:0d:17:55:3b:2a:28:0d:bf:d2:
f6:6e:b8:be:51:30:03:b2:01:ea:56:c9:2b:35:8f:
c2:05:0e:b7:64:49:e0:f7:36:f8:14:d8:1a:36:69:
d3:dc:f8:ac:aa:ba:d1:28:46:4a:aa:e4:e7:3d:64:
a0:8d:10:9d:0d:e8:04:e9:99:df:0a:90:11:98:e8:
8a:ff:f6:85:9c:18:30:5a:56:cf:72:0c:21:ce:41:
c3:81:2e:e6:6a:a9:f2:3f:53:4a:ee:dd:a9:03:bc:
ff:b9:48:8b:1e:bd:22:c0:af:6d:2a:e6:a4:6c:78:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:4D:7B:93:5A:BE:41:6A:26:86:C7:8B:63:26:44:62:9B:CF:96
X509v3 Authority Key Identifier:
keyid:DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:45:33:f4:3a:6f:01:fe:85:09:9f:ce:1c:c4:40:17:90:dc:
fb:93:e7:e9:71:f9:eb:50:c4:0d:02:94:1b:fe:15:48:22:4b:
f4:b8:74:7f:39:de:5f:80:62:c4:c0:33:64:0a:3c:51:f7:f0:
de:31:b6:51:ca:ce:28:d2:60:b4:d3:c9:4e:72:16:ad:8b:d8:
22:c4:d7:8f:19:ad:98:56:31:7a:9f:89:cc:c5:28:c9:fc:49:
a8:22:a4:0b:31:c7:f4:56:f4:19:d1:e8:19:d4:2e:8e:bb:a4:
61:97:0f:72:28:0b:de:93:f3:37:d0:29:8d:9f:0c:5b:52:e7:
63:f8:51:94:4a:57:11:7c:75:fa:97:14:ce:ef:33:b1:4c:8e:
37:15:7e:ee:90:b6:84:d7:ac:2d:bc:cc:a3:2a:d4:89:f0:a3:
ab:72:e6:f0:9d:a9:d2:e7:c4:64:eb:40:b8:7d:e2:45:90:3f:
d6:f9:41:1f:b9:79:5e:5a:4e:53:b6:e6:30:1b:dc:90:b3:3b:
75:9a:99:3b:98:2a:23:f5:67:f8:ab:96:2c:61:6b:7f:c6:65:
57:c4:ff:3f:5b:68:bb:a8:0c:16:c5:f3:ce:91:21:70:3b:d3:
94:02:89:5f:60:6f:ca:b5:7a:29:39:87:47:ba:e8:f8:9a:63:
74:6c:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:48:52 2026 by rpki-client