
Error: rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
File: X6EtceluL4GPuSSQs3lvC3cBZW0.mft (raw, json)
Hash identifier: fam44Ood+QQtjjhUWdwjwkD4h4FXtn/WgSJEVWTsSJg=
Subject key identifier: B9:F5:06:23:04:89:03:12:50:51:E1:9B:49:28:65:0F:D3:D0:70:A0
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Certificate issuer: /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial: 01BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
Manifest number: 01B9
Signing time: Sun 25 Oct 2026 05:06:04 +0000
Manifest this update: Sun 25 Oct 2026 05:06:03 +0000
Manifest next update: Tue 27 Oct 2026 05:06:03 +0000
Files and hashes: 1: X6EtceluL4GPuSSQs3lvC3cBZW0.crl (hash: izK0qeSkhS2/n5tmfOu6bX3NsJaTaPbBf3q4eV7zRsk=)
2: 261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa (hash: RDOBBGsvJhE0OkAO2/KgMOs6/gp2HdgBOnY1YQ2CAy4=)
3: 23AA3F847CB411F08F9595B0DAE4EC9C.roa (hash: 3MSrx7uq5AEGHOWAFB7THkIOfn/SgWoN7PEmoZN2Nzo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Validity
Not Before: Oct 25 05:06:03 2026 GMT
Not After : Oct 27 05:06:03 2026 GMT
Subject: CN=6add8e3c-f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:4c:c1:a6:2e:11:fd:27:12:1f:86:82:c5:
44:1e:5b:72:a8:ba:98:62:78:b5:8b:3b:a1:59:4e:
78:97:ac:0e:12:70:50:38:a9:02:41:7a:67:d5:8c:
8b:5c:f4:c3:d1:8a:56:82:a0:46:4f:4d:c3:75:25:
96:c2:08:27:af:21:32:3b:05:5b:32:d1:64:71:90:
06:be:2c:de:3f:96:85:46:7a:47:cd:18:af:64:0d:
56:59:33:eb:c8:8f:03:28:75:2d:7c:e6:de:11:67:
2f:9e:fb:af:e5:36:5e:79:c6:91:7c:94:9e:f6:ac:
e4:4a:3b:c3:af:d1:2f:e8:a1:0b:b1:90:15:ff:92:
c4:73:88:a0:a3:fe:75:6a:ba:67:ef:cd:33:65:d8:
c8:32:09:e5:5b:c0:91:de:ed:f5:14:38:9c:da:cd:
d8:75:0b:b6:df:07:a8:0d:64:b5:15:bc:40:ba:ae:
40:86:6f:1a:62:52:c8:ec:2d:62:83:01:02:9c:02:
b0:42:cd:74:41:68:b1:f4:8d:ba:38:0f:44:4e:42:
3c:9b:79:17:0c:12:1b:d6:c3:a4:18:a2:da:b9:3d:
b4:89:f3:90:a6:b7:2d:94:c2:ef:99:a8:88:18:b3:
33:41:79:28:77:3a:9e:63:3c:2b:22:6c:3d:39:54:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:06:23:04:89:03:12:50:51:E1:9B:49:28:65:0F:D3:D0:70:A0
X509v3 Authority Key Identifier:
keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:eb:c3:4c:a6:50:16:92:91:95:bb:80:76:8c:77:ac:95:b6:
cd:9d:56:ef:4b:d6:3a:50:93:e3:63:ec:15:82:3a:ff:5d:bc:
b1:be:c6:f8:d2:c9:58:4a:c7:03:c0:95:71:8b:6d:83:c9:a1:
89:4d:84:3b:cd:28:ae:db:a5:95:72:5b:99:0c:e3:ef:e5:cc:
21:c5:c1:a3:ae:c8:40:f3:e0:eb:d8:1c:24:7e:f0:13:ac:66:
2d:33:51:56:7e:fe:c1:f6:a2:4c:2c:92:00:7d:f0:74:41:83:
28:81:34:94:1c:fc:19:fe:c2:82:ba:89:fb:2d:35:b8:7a:d8:
14:33:b5:c1:1e:5f:30:81:42:60:e0:6c:a0:5a:4c:9c:a9:34:
b4:46:14:66:6d:d1:5e:f7:71:45:a4:c8:e9:0a:8e:1f:44:0c:
a4:63:71:2a:d3:84:fd:12:cf:10:e9:36:e0:e2:ff:ed:84:d3:
9b:1a:c7:b6:a4:5f:25:f1:10:d0:42:af:b1:31:8a:9a:9e:9b:
8b:a5:70:19:14:32:1e:5c:a9:f4:44:92:6a:66:8b:c2:9f:38:
3d:e9:2e:98:18:c3:0b:52:51:bc:41:03:bf:7f:10:f2:d5:da:
e5:2a:e3:e1:52:33:33:fe:e9:66:0d:b5:52:5b:4f:a0:d0:e9:
12:12:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:52 2026 by rpki-client