
Error: rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
File: 1ijkyWq6nPsSRHeGe73xpENfD1s.mft (raw, json)
Hash identifier: nguufQhDRtSS7kkWhuP4OKpXWz1kIUo1anBYrUXZAUo=
Subject key identifier: A6:A8:3B:61:31:E9:15:69:A6:2F:BF:A6:06:30:CF:C5:C2:44:5E:D9
Authority key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Certificate issuer: /CN=F362412EAF/serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Certificate serial: 0438
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
Manifest number: 042F
Signing time: Thu 10 Sep 2026 03:48:01 +0000
Manifest this update: Thu 10 Sep 2026 03:48:00 +0000
Manifest next update: Sat 12 Sep 2026 03:48:00 +0000
Files and hashes: 1: 1ijkyWq6nPsSRHeGe73xpENfD1s.crl (hash: cF9fSxnop01csIEBzjn6hPeVzu8ActIF4pZB6fG9GR0=)
2: ED02D88AE81A11EE8623BCC5775412E6.roa (hash: mvHTVhODmwdELfP/e2cG297ECeboGj2BsOL9AUtxSak=)
3: D9673B327E3811EEA513EB3B4AD9E6FC.roa (hash: UqaCdDOXPbSropYSiVv8/KHGfuPJpE0IwMmtg9u2HE0=)
4: AD4DC7B2E81B11EE9D0AAC4C775412E6.roa (hash: Rg0rPDoDCNsPvE5jk03o2oztgTr1S1Uz/K+MpVZVO/k=)
5: 413308947E3A11EE832D2F404AD9E6FC.roa (hash: Eb0obFXe3E6DORP4MxW4QBN2bM/zRSA3RlnaOBqHUN0=)
6: A9A46126E81A11EEAA8ECCC1775412E6.roa (hash: wd/nf2EuVpjl0YLy2l9YBPgNolj8qZpz1sk3ozhlrnw=)
7: EA19B9687E3911EE8853E63E4AD9E6FC.roa (hash: O86LwkUf5r8SNUYChgmFxO/FC3RubzrEdUN/7g3zOxM=)
8: 1970B130E81B11EEACE154C6775412E6.roa (hash: 5vNOWkuS5OOw6HL2Agkgo+3kaWgHGPZi7TRSlYZvPNs=)
9: 48AE0434E81B11EE876ADDC6775412E6.roa (hash: wJr/eaxq68q6pHClMi9x3b4zYhBKBXGZVN5loE10NCg=)
10: 63F96FF2BEB411EE9F8AD251775412E6.roa (hash: ndpKTdXcDoxXSkEuWmu2k8nfK/ZfndTlZeUQ+gODKm4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 03:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362412EAF, serialNumber=D628E4C96ABA9CFB124477867BBDF1A4435F0F5B
Validity
Not Before: Sep 10 03:48:00 2026 GMT
Not After : Sep 12 03:48:00 2026 GMT
Subject: CN=6aa22871-8eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:c8:ee:8a:24:f6:1f:23:1b:29:5e:66:fa:
39:7b:82:0d:21:6f:df:5f:40:23:34:bb:fc:0a:0d:
4a:f9:c5:ed:3b:d5:1b:8b:19:c2:d8:3d:e9:db:ac:
5c:c5:84:c9:95:79:f2:18:bf:e4:5f:54:35:83:a0:
28:f6:89:0b:0c:61:da:27:f8:f8:48:79:81:7b:e9:
31:3c:0f:1a:cc:c2:ac:34:71:d3:ed:4e:c1:1d:9b:
61:d7:8b:29:b4:05:96:56:8f:c4:2d:f6:d7:1b:c8:
c3:81:82:83:be:4f:b3:61:65:9d:c5:fc:3b:cb:3e:
69:b2:01:d2:6b:d4:81:b7:21:32:fc:c9:44:53:90:
1f:ad:0a:5f:75:a6:08:a5:03:02:55:a3:f6:00:bb:
3f:86:19:4a:5e:36:4f:be:13:9f:a8:08:fd:a0:c2:
1e:b0:0d:fe:73:9e:55:29:c2:d7:42:fc:76:cb:d0:
ed:a5:66:55:60:12:59:5b:be:25:ae:98:68:28:ab:
24:6c:35:81:1c:a2:d6:48:86:a1:57:be:be:98:33:
07:81:e1:c6:0c:97:9a:a7:19:4a:82:9f:73:81:6d:
df:5a:bd:58:2a:ca:bb:d5:ee:1a:73:e9:d2:f5:f4:
78:ac:38:e4:cc:73:30:68:26:68:bc:c3:5e:41:98:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:3B:61:31:E9:15:69:A6:2F:BF:A6:06:30:CF:C5:C2:44:5E:D9
X509v3 Authority Key Identifier:
keyid:D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:18:cd:93:e6:e7:b3:db:15:59:17:65:23:af:83:56:50:12:
f4:00:64:cc:8f:a5:4f:34:bf:dd:a6:ad:c5:66:42:56:9f:6e:
d6:a0:95:79:4c:88:d2:bc:27:2f:b5:70:d4:64:fd:c4:2e:6b:
f5:42:07:75:11:6a:39:c2:a6:dd:53:c2:df:3c:98:e8:1d:ba:
1a:20:5a:a6:ee:bd:f5:d4:75:69:7f:1f:9c:11:63:48:5d:66:
b7:89:9c:7a:d9:b8:e0:ad:b5:2d:e8:81:81:05:7b:5e:9e:73:
b7:27:35:2f:23:4a:0a:89:4d:56:ff:2d:81:d7:a5:21:e4:40:
e2:92:0f:e2:d8:47:52:c3:7a:ae:96:82:4e:fe:76:3e:91:15:
c4:db:24:25:af:76:01:23:50:8a:18:4e:32:2a:ef:28:f1:32:
ca:7c:af:59:6f:eb:4a:6d:2e:7d:0e:7b:a3:d7:8e:c7:e8:31:
0a:d0:4b:de:da:38:31:59:ef:84:e4:3d:4b:8e:aa:b1:01:d3:
c0:d7:21:6e:3c:12:1a:4c:24:da:b9:92:d4:08:3f:1a:c0:ed:
80:7f:6c:60:d3:8c:7a:db:64:a7:b7:74:61:b7:c9:46:8d:b8:
02:07:49:16:5e:33:35:4e:c1:c1:d3:05:bf:09:b9:1a:4c:0f:
08:5b:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:46 2026 by rpki-client