
Error: rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json)
Hash identifier: 5QwWsItLhKPuwpT5RqEQHgH2vdsUL5vdBaZR2BS+Vg4=
Subject key identifier: 45:E5:B0:DF:BD:46:8C:9D:32:93:53:54:90:91:99:2F:85:4E:DC:9E
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 0469
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
Manifest number: 0460
Signing time: Thu 29 Oct 2026 03:47:09 +0000
Manifest this update: Thu 29 Oct 2026 03:47:08 +0000
Manifest next update: Sat 31 Oct 2026 03:47:08 +0000
Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: Vpioxh5WbiAAvwRN3fA/vu3cv+xbO1lOBkgvVoZ4s0Y=)
2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=)
3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=)
4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=)
5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=)
6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=)
7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=)
8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=)
9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=)
10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 31 Oct 2026 03:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Oct 29 03:47:08 2026 GMT
Not After : Oct 31 03:47:08 2026 GMT
Subject: CN=6ae2c1bd-ab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:89:a2:66:5d:0a:78:ee:df:c7:cc:b2:13:
dd:8f:e1:1a:4f:27:ef:f1:50:bc:e5:59:05:25:e6:
bd:84:3e:84:c2:cd:d0:ca:7c:e1:ab:b2:96:c3:5d:
e0:92:79:18:11:8e:73:ab:6a:f3:23:e6:8e:84:77:
56:7c:7e:8f:8c:f1:71:56:f5:8d:1e:8c:f0:e3:b2:
ed:3b:e2:c2:dd:a1:77:83:41:6e:dc:07:ad:ab:3d:
91:96:5d:c8:99:db:52:43:b5:19:df:78:48:81:ba:
7d:cc:2c:29:df:52:9a:7d:2a:1e:00:b4:0d:5d:b5:
a9:34:34:a1:4a:54:b5:d8:5d:5a:44:36:77:74:2b:
96:cb:3c:fb:45:21:d9:b8:11:82:d4:4d:77:01:02:
fa:e2:c4:09:ec:a1:3d:e5:83:53:27:c4:34:1c:64:
0a:da:bd:f2:15:83:1a:98:01:7a:ae:b7:f7:a9:a4:
9a:de:4d:db:31:88:2c:30:98:aa:b6:31:38:8e:71:
ff:19:15:a7:17:ea:14:7e:f8:5b:23:29:af:24:da:
55:a0:46:09:b5:65:2d:a4:b3:6d:3a:7b:52:79:71:
73:f0:44:d7:57:fc:b8:27:24:b5:68:fb:b7:74:4f:
c7:21:1c:af:e5:b5:f3:72:3e:e6:7a:7c:05:c8:a1:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:B0:DF:BD:46:8C:9D:32:93:53:54:90:91:99:2F:85:4E:DC:9E
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:8c:8c:9a:82:6a:28:6f:6e:14:01:51:f5:fd:cb:30:4a:
c1:11:97:42:33:b9:ce:5b:7d:2c:02:b8:c5:bc:8b:cf:78:d9:
ad:5f:e5:01:41:c7:93:8b:51:4b:e8:e4:ac:a3:b8:2b:e4:b5:
17:44:9b:0f:fd:2b:9e:89:ee:82:ba:94:f2:f0:f8:33:bf:84:
ad:81:28:7f:20:0d:cf:e9:c5:03:35:11:fb:9a:6f:3d:ff:24:
14:e8:13:06:f6:15:a6:ca:37:b7:79:57:e1:ef:16:3d:24:e5:
74:3c:03:0c:8d:c0:2e:58:20:13:97:cd:d3:7a:81:18:37:87:
42:0c:4e:88:b6:cf:1e:de:ae:f6:85:01:2e:a0:3d:2f:a6:24:
7c:2d:9e:2f:de:9e:78:17:0d:ce:5f:97:10:a0:9e:a1:f8:f3:
48:0e:bb:97:16:76:47:92:20:43:de:c6:18:e4:21:d7:6d:f5:
cd:12:8c:c1:1d:52:19:de:99:f3:4a:5e:2e:f8:46:09:99:2f:
02:d8:87:50:be:f1:c4:f4:d5:fe:65:18:79:36:7a:0a:16:cf:
b8:a6:ea:9c:56:44:41:c0:4a:f6:f1:17:aa:96:bf:ec:3e:a3:
85:7a:88:b5:92:5c:22:f7:d6:47:be:36:00:0e:d8:71:c2:c6:
75:f0:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:19 2026 by rpki-client