
Error: rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File: X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier: MTBHUilywwiN7GpsvWq+mMKrNw/0u3x+Zp3GgCSha2k=
Subject key identifier: AD:74:4C:C3:BC:75:B8:04:AE:94:3D:33:47:50:BA:D6:C2:0D:62:20
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer: /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial: 064D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number: 064A
Signing time: Sun 25 Oct 2026 02:50:35 +0000
Manifest this update: Sun 25 Oct 2026 02:50:34 +0000
Manifest next update: Tue 27 Oct 2026 02:50:34 +0000
Files and hashes: 1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: 8pb3RzzIq1ycNQlU+wlUHObyVzPLbn7x+nj6z4MMZ+0=)
2: 50153A068CF311F19DBCDAF8CE1D38B0.roa (hash: 0NpHuM0JUl/0U3vLeXFUig4NhyIutie7qoCCLQ6O6zs=)
3: EE58E52E1D3511F1976FBC97DAE4EC9C.roa (hash: 2zXpu+BjJJ/YZS6CragLKC0p/JQpfEL/6yBthdYOWUs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A252AF, serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Validity
Not Before: Oct 25 02:50:34 2026 GMT
Not After : Oct 27 02:50:34 2026 GMT
Subject: CN=6add6e7b-2d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:14:17:0d:40:ec:69:bc:7e:ef:4d:f9:38:
07:12:f4:b5:35:3e:89:57:e5:52:e3:5e:d6:24:40:
ea:a5:18:78:43:ce:a7:02:99:4b:c8:0b:5e:f9:19:
ff:32:db:ff:b4:cf:cc:f5:04:f0:99:fd:1e:b2:ff:
ff:a7:c9:b2:94:6b:2e:7e:dc:4d:e6:20:7b:34:8f:
c6:a5:f8:c3:cc:a8:3a:7c:f4:93:2f:71:bf:10:6d:
97:a5:7c:3c:3c:24:2e:fb:a6:20:02:8f:59:03:84:
0c:51:cd:39:7f:0e:c5:f6:6f:31:4e:2a:bc:be:fd:
f5:37:30:16:5e:86:09:ac:3c:5a:7e:47:0b:1a:b6:
b6:8e:4f:df:46:40:c0:7b:0a:3b:e5:bf:2d:2d:95:
b0:63:e7:3a:3b:66:76:02:2d:a5:b7:6d:6c:4d:27:
25:8b:ff:04:d2:1d:f6:b0:aa:f8:db:c5:fb:8e:08:
6a:0d:51:ed:3f:4e:dd:4c:72:e4:d9:f6:4e:ee:cc:
9d:e2:c6:53:98:4e:89:4d:6b:3a:27:98:0c:f7:94:
86:ea:ba:b9:ac:23:cf:7c:fb:5b:e3:cf:84:e4:c3:
31:ef:ce:e6:f9:03:72:53:22:50:5a:0a:14:7d:44:
7e:44:9a:81:d4:93:a7:79:bb:d5:5c:f5:7b:a4:a6:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:4C:C3:BC:75:B8:04:AE:94:3D:33:47:50:BA:D6:C2:0D:62:20
X509v3 Authority Key Identifier:
keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:66:88:6c:81:b9:66:45:9f:0b:ca:78:c8:7f:37:c2:0b:
66:82:00:8b:d2:8a:e2:e1:db:b0:87:ca:ba:3d:8f:0b:bb:8d:
2f:d7:ee:12:86:7c:e8:e2:b7:f6:d1:98:e5:78:8b:6c:25:9f:
98:ed:4b:92:65:66:bd:0b:b6:af:99:a0:53:bb:80:4f:e6:4c:
cd:15:3a:56:9c:ff:66:9e:d9:1b:97:fa:df:14:51:02:17:d9:
5f:73:e3:80:ad:d8:c0:73:16:66:2f:bd:7a:dc:bd:05:36:c2:
c5:aa:52:14:51:71:60:90:4d:92:d0:31:ba:56:93:49:5a:29:
3c:26:e4:a1:a4:fd:d2:7d:59:03:a4:58:be:c5:8f:07:14:c2:
a2:8a:27:49:71:96:45:5f:e5:fe:e8:70:d2:88:fa:ac:86:41:
2e:87:9c:84:ba:4a:4c:50:ba:49:06:13:ae:38:36:f6:c8:68:
9a:ea:5e:f7:5b:d5:5a:89:01:68:88:bf:fc:57:17:8c:06:d9:
f5:c9:25:21:cc:95:9e:96:fd:45:8e:b8:ba:a1:54:c7:69:3b:
ed:8b:0b:51:b7:c5:c3:f2:62:47:97:ce:c5:4f:9c:54:b6:ee:
20:d1:76:d5:87:9d:82:22:e2:96:50:5c:3d:05:b4:a6:94:f1:
02:e9:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:52:36 2026 by rpki-client