
Error: rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File: wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier: OVv/if7uRA4fdzu3RGjpEynNHgWO8rAAhZO7OXzTBsE=
Subject key identifier: C6:FF:7C:16:17:56:A4:54:D5:76:B7:BC:2E:C5:59:28:91:BB:A6:BF
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer: /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial: 0187
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number: 017A
Signing time: Wed 28 Oct 2026 05:12:31 +0000
Manifest this update: Wed 28 Oct 2026 05:12:30 +0000
Manifest next update: Fri 30 Oct 2026 05:12:30 +0000
Files and hashes: 1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: 8ug62Pg9ThEdDaCqaaRfKpdJM79X1wiHqcCOCb+Yeek=)
2: 1CB58EB0E64811F0B101CE82DAE4EC9C.roa (hash: GmVFU5Fj3JlQpS5TQySgt0n+nxZd6U1yLmPCADpRfXI=)
3: 41D32A18E64811F0ACFAB484DAE4EC9C.roa (hash: 5V7TJLQLLojrh3rp4usM3FHkPrvqeC97To9U71gTLO4=)
4: C80E96CCE64711F0B1A25782DAE4EC9C.roa (hash: Xp3ShwYXtvWjA34x0AJ/ol0TX61I2QAtRd3rhcxGiEY=)
5: 5C3C5D08E64711F0B893737EDAE4EC9C.roa (hash: nyLTo0rixLCs/a1IenOrfxepHmexkFvnayqGIGvxXKM=)
6: 66763C34E64811F09B639186DAE4EC9C.roa (hash: i+w6opL2Ipyqtzv1lD31vRg6ZPrTeRTbmSF8OnbTJXo=)
7: 840DD0AAE64711F084488A80DAE4EC9C.roa (hash: LEJhspwfo4P35G4GsyqKcA7wSNxsuLJZrV6m0oln0v0=)
8: 85C8DB5AE64811F0B8289886DAE4EC9C.roa (hash: Vnz8rTgtBR9ak9loA7xtyo4H19LHXg7iUEMpR1fptZY=)
9: EECB2F1EE64711F09EF7A882DAE4EC9C.roa (hash: 6+EHSpYkLMZkNikFTUcxHrLnTv0tuncTsjXIBMarg3U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Validity
Not Before: Oct 28 05:12:30 2026 GMT
Not After : Oct 30 05:12:30 2026 GMT
Subject: CN=6ae1843f-5615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:71:8a:e7:da:6f:a1:a0:91:a8:42:e7:7e:
e8:db:6e:4d:6e:ed:cd:57:12:28:de:94:d2:12:2a:
90:23:69:e8:03:31:7e:33:ef:0e:6c:48:43:e4:10:
95:e2:93:33:d5:06:5f:9d:55:70:89:8c:82:3e:d9:
39:4c:23:ec:21:cd:dc:c6:7c:5b:80:11:9e:5a:66:
31:d9:c9:80:88:3f:3e:29:16:c5:a8:4a:83:b4:19:
03:6f:1c:86:31:50:b5:22:57:12:34:2e:0d:1d:60:
ce:b7:84:b7:82:2e:8e:fd:8f:20:a0:8e:3d:ca:7e:
17:11:8a:d7:f4:18:43:d2:9d:08:06:ac:4a:7f:13:
f0:ae:ab:8f:20:77:c9:ac:13:79:91:72:01:4a:f8:
2e:df:bd:d7:21:f5:d1:05:17:bb:82:30:b7:5e:b6:
05:53:80:03:18:39:da:3d:43:d6:ec:a5:79:bc:85:
6d:01:63:77:c0:de:3f:2d:6e:81:71:e9:f8:8d:7c:
b2:94:72:ee:e9:55:3d:6c:ae:1e:3f:7a:b2:42:d0:
db:e2:0b:a4:2f:ea:4a:e3:f8:90:b2:61:c6:4e:71:
b1:70:c1:f6:f6:2c:b9:20:b2:60:8f:5d:4f:96:50:
54:9f:a9:02:61:ec:d4:a8:81:1b:4a:d8:ac:26:81:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:7C:16:17:56:A4:54:D5:76:B7:BC:2E:C5:59:28:91:BB:A6:BF
X509v3 Authority Key Identifier:
keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4a:18:df:73:f7:af:f3:24:81:52:f0:28:07:20:0c:ce:07:
7d:17:2e:ed:60:65:24:d2:f7:db:f5:38:e0:ac:0f:40:f4:a0:
63:63:a3:3f:c7:d2:c7:47:6d:c1:96:9c:33:85:d7:c7:f5:77:
08:0a:d3:a7:c7:9f:a4:24:d3:35:55:7b:eb:d7:5d:da:5c:d6:
d7:a8:51:c7:47:99:3a:0f:1e:30:23:1a:4d:66:42:85:81:d9:
2e:84:c3:19:25:f5:29:9c:65:f0:3d:9b:a0:0b:89:49:0b:65:
42:e6:c3:8e:28:95:3f:b3:f8:02:02:1f:e9:39:11:47:05:d7:
d7:66:d3:f5:d9:bd:f1:13:0e:c8:47:2d:e5:a3:2c:d2:7c:35:
53:ed:1c:1f:b1:90:4b:3e:41:f1:33:b3:cf:7d:ff:89:30:f0:
cc:60:21:d4:bf:f6:09:8e:8d:60:0a:2b:7e:47:56:64:45:7f:
09:10:4e:42:84:70:69:bf:2d:33:db:a2:29:ec:ef:57:10:97:
41:3c:72:8c:26:7f:ef:5e:0d:7e:66:b1:b3:80:ab:c3:8b:17:
81:01:26:fe:cc:39:36:56:05:9d:87:1e:d0:a9:78:ea:12:52:
8c:cc:93:d0:e5:6a:c0:7c:13:7d:33:64:44:2c:03:a2:44:a4:
19:57:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:22 2026 by rpki-client