
Error: rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
File: 4qOmjo-ihl0uVH2MskMPqyH8oG0.mft (raw, json)
Hash identifier: Wb6Jv2W3erB0k8jeZet5WHbzNXMGnAf9sVQ6M+TahA8=
Subject key identifier: CD:43:FC:17:92:02:D0:B8:77:51:45:C4:CD:45:BC:92:53:33:F7:02
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Certificate issuer: /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial: 0674
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
Manifest number: 0668
Signing time: Sun 25 Oct 2026 02:48:11 +0000
Manifest this update: Sun 25 Oct 2026 02:48:10 +0000
Manifest next update: Tue 27 Oct 2026 02:48:10 +0000
Files and hashes: 1: 4qOmjo-ihl0uVH2MskMPqyH8oG0.crl (hash: 2ktR59gVhGl/5cRouoGzRxBm1VhaK7MY82McYFzVjLI=)
2: 739D7AD08F1711F1B5BBEB05CF1D38B0.roa (hash: C1dI98NL6/tdxUWdDGKDIArnj5oStmQ2KhMo68g9PIQ=)
3: B41ABBCE8F1511F1ADFDD7FBCE1D38B0.roa (hash: s1G42q/+rggaEVHCV/2J3B1QONW6JRiuI9egBXa0Tkk=)
4: 0FB233288F1511F1A387CFF7CE1D38B0.roa (hash: jOGYD9BPRfjicPZCx0hyFiFakhm1XpLFV535ulNKrYk=)
5: 2460197E8F1611F1AB8ACDFDCE1D38B0.roa (hash: ilZDIa5C0BHYtgaJXcgc0lQnmDB9QvKYDZ1fGWV7IMM=)
6: CD05EC7C8F1411F189766CF7CE1D38B0.roa (hash: /mwV7gGqdpVexFItH+sJHrcIUl9JJukw6boHT6Z0okk=)
7: 6C0368628F1611F1A7FDF2FFCE1D38B0.roa (hash: aU5Sz4Hc8XihBcsO1Hs2fvVl7LPgM7/bd0A8Jy0JwZ8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Validity
Not Before: Oct 25 02:48:10 2026 GMT
Not After : Oct 27 02:48:10 2026 GMT
Subject: CN=6add6deb-5f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:75:56:c3:2d:b6:0d:d9:77:8b:34:63:71:
5a:2d:58:1c:d4:63:77:36:c5:41:33:a8:7c:40:65:
95:7c:58:4f:5f:9c:51:ae:52:07:df:d4:f9:e0:d9:
42:8e:3c:46:49:37:55:a2:bc:8e:fe:19:4a:5e:ac:
bc:64:77:f9:06:a4:03:5f:52:25:da:c5:84:a9:ad:
d1:40:97:b8:85:01:4f:c4:6d:fd:3a:67:3b:7d:ea:
c7:ee:6a:7a:74:36:d2:08:29:51:9a:40:97:1d:d3:
b2:a8:83:13:c4:57:a9:c3:89:fc:4c:d1:ad:92:ab:
59:05:0b:dd:81:b0:14:fd:99:dc:b6:3c:d0:3d:4c:
44:f1:bf:c8:4d:b0:4a:6e:2a:e7:15:dd:69:5b:6f:
0c:1c:a9:5b:bd:6a:87:c0:4e:57:4f:2a:cf:50:1e:
8e:94:92:df:7b:6d:f9:4f:42:7d:54:d9:66:fd:b1:
8b:e5:a1:74:78:45:7a:7a:17:e5:cf:f5:a5:23:5d:
fd:7e:0f:8a:5f:cd:72:c8:c6:6a:da:7f:97:47:c1:
c3:25:41:f1:fa:3b:a9:c3:fb:4a:4f:1d:60:b6:dc:
c2:12:97:6b:bf:7e:41:c2:81:6d:f4:67:64:6b:0a:
0e:40:ba:1a:43:9a:cd:9d:3a:45:63:48:09:d7:f6:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:FC:17:92:02:D0:B8:77:51:45:C4:CD:45:BC:92:53:33:F7:02
X509v3 Authority Key Identifier:
keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:34:8d:d0:19:c2:47:1c:a2:98:5f:b7:4a:e6:38:1a:2f:
4b:ce:b2:99:d4:ac:94:61:25:50:21:26:fa:98:5e:bf:00:85:
83:c9:a0:bd:28:4e:ab:6a:aa:dc:6a:e1:ae:34:05:4c:34:68:
f2:e4:8d:d3:9d:9f:1f:b3:54:03:12:df:6a:2a:22:64:ef:ce:
30:02:22:8b:8b:10:9f:1d:31:34:ee:24:a2:01:eb:13:9d:d2:
a0:08:35:bb:77:9b:f0:d6:ac:9b:b4:29:28:71:93:93:0b:f3:
ad:3c:a5:c1:07:8e:bb:3d:d3:41:7e:5c:98:23:6b:0e:e0:7f:
f9:dd:99:d4:94:3f:9b:e0:2f:25:f3:f3:73:08:c7:64:17:ab:
50:9c:4b:23:19:3e:b6:7c:85:c3:89:3b:00:42:43:76:7d:1c:
31:4d:44:56:49:2c:af:a6:3a:92:ac:7a:82:98:34:5a:a7:4e:
f2:a6:ce:e4:9e:89:c1:cb:ca:d2:71:ac:c1:cb:3b:b1:ce:de:
41:99:79:65:f7:50:28:50:18:0d:4d:0d:82:20:cc:a8:f6:19:
0a:aa:24:10:e6:1d:ad:d7:73:9e:68:4a:a5:74:75:55:00:d2:
6f:cb:34:d6:bd:00:d4:2d:e4:47:f2:89:3f:3c:a2:0b:ff:62:
ab:89:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:40 2026 by rpki-client