
Error: rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft
File: VancGR8hNC75bUDv9ejRiqr14Q0.mft (raw, json)
Hash identifier: bdH+BgMVPDcXpqTfVfIB/HXqeIz27FgddxKzVlvQ0Qs=
Subject key identifier: 98:30:D5:C2:98:1D:F5:F2:B1:EC:92:22:D6:EE:62:2B:1C:6D:E4:1E
Authority key identifier: 55:A9:DC:19:1F:21:34:2E:F9:6D:40:EF:F5:E8:D1:8A:AA:F5:E1:0D
Certificate issuer: /CN=F362F8BBAF/serialNumber=55A9DC191F21342EF96D40EFF5E8D18AAAF5E10D
Certificate serial: 18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft
Manifest number: 16
Signing time: Sun 25 Oct 2026 06:01:17 +0000
Manifest this update: Sun 25 Oct 2026 06:01:16 +0000
Manifest next update: Tue 27 Oct 2026 06:01:16 +0000
Files and hashes: 1: VancGR8hNC75bUDv9ejRiqr14Q0.crl (hash: dAsRYBdQz0M2UWqhvo0T+SCVpNtF4w2HSfxIbWM22I0=)
2: C05D4446C18411F198CB8208CF1D38B0.roa (hash: RhoiysuAC6BH6iEDgC+r9WobQ8lzKQgiQJC9+UdUKDY=)
3: 9D594F58C18911F1B3A0BCA8CE1D38B0.roa (hash: PiNlcopcvcD00Jf6Tn6fk0GSPSghpNJ72wbYW8BQkS0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.crl
rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft
rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362F8BBAF, serialNumber=55A9DC191F21342EF96D40EFF5E8D18AAAF5E10D
Validity
Not Before: Oct 25 06:01:16 2026 GMT
Not After : Oct 27 06:01:16 2026 GMT
Subject: CN=6add9b2d-45ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:41:f8:77:36:c5:d9:c8:b5:5a:37:01:0c:
a3:42:d7:dc:a8:70:cf:b6:e3:d6:51:df:a9:4f:90:
29:16:36:49:4c:be:be:d5:33:b0:68:eb:cc:ef:49:
a3:85:01:31:91:5c:b2:be:ca:ab:3d:23:d3:33:07:
4f:6e:d2:5f:66:eb:be:d2:06:50:a8:37:4a:20:98:
62:00:a7:74:7a:13:6f:76:8f:99:b6:06:0b:4d:6f:
39:6e:0d:67:6e:ae:b6:ee:7a:c0:77:3a:b7:8f:58:
26:d4:c5:00:1d:9d:39:ed:fc:7b:cb:5c:ac:87:34:
89:24:61:19:58:1f:f8:bb:4b:18:0b:40:07:65:a1:
5a:71:33:3b:b2:84:71:20:c5:51:92:43:24:9e:bb:
5d:49:91:ea:06:c8:43:14:3e:93:53:5f:d7:b7:ba:
88:7e:f8:25:42:36:6b:3f:89:d5:10:25:b0:ec:a3:
1c:ec:04:73:06:dc:e3:cf:23:09:5c:16:8d:21:7e:
49:8e:f4:19:01:d6:f0:42:6a:38:52:a8:18:18:bd:
95:60:95:55:6a:5c:aa:16:a5:7f:8a:cd:42:40:79:
ea:24:bd:5c:b4:53:32:b4:d0:5c:41:24:ef:cc:4c:
d9:35:21:c1:5a:7c:20:67:ac:7d:c9:de:5a:03:b9:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:D5:C2:98:1D:F5:F2:B1:EC:92:22:D6:EE:62:2B:1C:6D:E4:1E
X509v3 Authority Key Identifier:
keyid:55:A9:DC:19:1F:21:34:2E:F9:6D:40:EF:F5:E8:D1:8A:AA:F5:E1:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VancGR8hNC75bUDv9ejRiqr14Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F8BB/0C8F7542C18411F186C31A04CF1D38B0/VancGR8hNC75bUDv9ejRiqr14Q0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:f0:78:d5:6e:b3:b2:a3:be:cd:6f:99:48:a2:be:d5:2c:
e7:d7:10:a7:22:d5:20:57:76:29:d8:1b:05:88:1f:cb:a6:71:
dd:5a:3b:ec:4c:81:52:74:00:34:2a:26:ba:4d:0a:b5:09:ce:
f9:96:5a:79:f0:c1:49:93:df:98:b8:5d:05:50:d8:e4:f7:65:
89:29:21:e8:91:f4:0e:45:11:d6:81:f5:04:b4:70:27:e5:14:
48:94:99:11:b3:13:b5:8e:79:34:8b:fc:aa:31:08:a4:a8:12:
25:e5:53:20:ad:77:bf:25:be:96:64:5c:7d:bb:50:64:5a:ba:
a6:6c:4a:ea:8e:0f:3c:5b:26:b9:96:49:37:0c:91:27:1d:5c:
3f:38:06:6d:cf:48:f5:be:b6:b9:99:a4:1f:d7:08:86:c4:1b:
c4:49:97:c3:65:cf:0e:06:ca:fb:72:fd:0a:76:d2:72:ae:b0:
1b:28:9e:c5:4d:6b:a4:1c:7b:e7:52:ea:35:04:a7:43:2c:8d:
b2:1c:21:38:50:12:76:d1:2b:d6:6f:eb:49:f4:dd:25:45:ad:
f1:f4:b6:f4:df:36:78:19:f7:a3:1f:00:af:91:ac:82:3c:53:
ba:85:37:b3:de:bc:82:77:5a:58:53:af:cf:76:f2:05:49:06:
28:1e:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:06 2026 by rpki-client