
Error: rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File: 2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier: t2FW9Kjtl/zmMrg4RVifVDWzmsW26MN4tVeww84QxH8=
Subject key identifier: 02:1C:FD:0C:96:2A:18:D5:D9:2C:53:C3:35:2D:41:5E:FE:30:7F:5E
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer: /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial: 0300
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number: 02EC
Signing time: Sun 25 Oct 2026 04:38:14 +0000
Manifest this update: Sun 25 Oct 2026 04:38:14 +0000
Manifest next update: Tue 27 Oct 2026 04:38:14 +0000
Files and hashes: 1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: NQgU/mK5Gd7hETrFWYQedk/KMwXAI/sqrNbvC7xuQUg=)
2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 04:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Validity
Not Before: Oct 25 04:38:14 2026 GMT
Not After : Oct 27 04:38:14 2026 GMT
Subject: CN=6add87b6-8ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:78:00:de:29:c7:0a:bf:74:3a:2d:9f:43:
52:93:ac:76:90:c4:d2:b0:ba:4d:f3:25:94:c6:de:
61:a3:f9:8e:bf:fe:1a:56:61:17:01:e9:06:e3:b3:
d1:bf:f7:fc:db:2d:cf:7e:72:7a:d6:73:57:a4:2f:
aa:cb:3e:88:10:61:41:62:f3:36:77:27:0f:bc:df:
cc:c7:d3:6c:70:a3:4b:cc:d5:b6:54:71:72:80:3d:
a3:b0:09:60:2e:17:d7:90:90:96:33:89:00:44:e7:
cf:f5:0e:6f:bd:9d:01:93:85:87:53:78:93:3e:cf:
07:b4:f9:70:6b:ec:2e:7d:42:66:39:38:c6:25:19:
ed:3a:01:5d:01:ef:b6:d6:39:ff:fa:8f:b4:de:db:
6f:da:5a:f7:6b:b9:4d:61:52:be:a5:6e:0a:c4:10:
e3:ca:5e:ae:e6:dd:38:6e:04:3f:e4:01:4a:75:ee:
54:21:54:a9:e1:08:cc:ee:c8:7a:56:d5:8f:7d:3a:
9f:90:92:cf:31:2b:78:59:7e:0f:5b:f4:5e:11:71:
e1:af:a7:48:cc:cb:b7:b0:f2:70:84:25:9c:86:a9:
24:3f:e2:ea:e3:2d:23:fc:86:88:6e:1a:11:3e:8b:
d6:dc:15:9d:ce:eb:ac:c4:65:8b:2d:7f:c6:8a:11:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:FD:0C:96:2A:18:D5:D9:2C:53:C3:35:2D:41:5E:FE:30:7F:5E
X509v3 Authority Key Identifier:
keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c3:95:27:8a:e5:1f:65:c4:29:bc:78:74:3c:fb:ae:d2:d1:
f8:eb:03:60:0f:fd:bd:de:f4:50:08:39:1d:51:a1:31:e5:26:
4c:8b:a6:3c:06:a2:c1:7c:a6:c6:56:91:fb:6e:08:0e:a8:84:
2f:68:c9:91:fb:98:46:96:bd:ff:42:e9:9e:4c:94:59:22:6c:
82:21:fc:d3:d0:26:76:42:17:81:56:0e:f6:8c:a3:07:05:d8:
c5:c0:35:4d:b9:ea:94:97:17:ed:fb:93:60:81:80:35:27:0a:
f0:f5:20:8f:b4:4e:26:dc:93:e9:3c:f9:05:f8:c7:2d:42:94:
fd:d5:ac:35:f4:e3:0b:80:f5:11:9c:d6:47:d5:c7:f1:c7:7e:
3b:38:58:37:03:b0:3a:7d:f3:40:32:c6:59:41:b8:c4:b4:7c:
e2:fe:50:68:74:e1:df:06:d7:ba:ff:59:a8:6a:aa:16:4b:a9:
73:c2:a5:67:9d:6c:03:88:29:4c:d7:ff:1b:c1:9b:2e:01:cb:
60:cd:d4:2d:7b:d6:5e:55:4e:52:c1:f0:26:86:64:11:4b:8a:
2c:3f:44:24:6a:dc:2c:e4:7c:be:9b:0f:61:d0:ff:48:3b:7b:
19:dc:51:ab:15:99:72:61:f9:58:16:f3:ea:0e:86:35:8f:db:
0b:a3:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:35:08 2026 by rpki-client