
Error: rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File: 68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier: 2OE7TxMarlnoUqcL3e3jJ8uVZkUu5Up0yhJNBo+B39Y=
Subject key identifier: 02:D9:24:5B:7A:2B:97:79:F7:4B:09:0D:93:A7:F8:D6:51:DF:DD:8D
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 0746
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number: 073A
Signing time: Sat 24 Oct 2026 02:31:31 +0000
Manifest this update: Sat 24 Oct 2026 02:31:31 +0000
Manifest next update: Mon 26 Oct 2026 02:31:31 +0000
Files and hashes: 1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: F2wHajqH8bk2TY82SsRqog7iyo0qA6p3z1gNhcLFFa4=)
2: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (hash: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=)
3: EDDA3E501C6211F1AAA4E2C7DAE4EC9C.roa (hash: lUvvBVjsEjqfAsAmA0WnRzU1lqUEU7lO27ZrISQKKFs=)
4: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (hash: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=)
5: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (hash: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Oct 24 02:31:31 2026 GMT
Not After : Oct 26 02:31:31 2026 GMT
Subject: CN=6adc1883-673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:15:82:a1:83:b6:18:c7:5f:a3:76:09:89:
57:db:cd:11:51:e2:85:92:41:04:88:24:c9:3d:c8:
c5:43:10:d8:ef:1d:85:b2:c3:da:41:bd:22:a4:5e:
d9:89:e5:25:69:fc:36:7a:db:d5:5f:34:e0:90:83:
31:90:09:f7:e6:72:75:6f:de:3f:60:5b:f6:a4:25:
5a:21:29:d2:67:77:11:17:53:ed:71:03:05:c3:60:
c5:8d:0a:12:98:10:b1:43:7b:33:c8:dd:a0:d3:30:
f6:b6:0f:97:93:68:46:0b:ae:13:b9:16:ae:b9:98:
3d:e1:b0:1b:75:36:e9:58:57:80:84:fb:8b:dd:79:
a4:4e:25:3d:95:b4:b7:95:1c:e1:f7:55:b7:7b:6d:
fd:88:28:af:17:d6:65:b0:db:69:ce:ef:97:d5:fd:
f2:27:67:ae:e7:75:35:db:77:b4:a2:e4:d4:90:37:
b3:9d:1d:e0:cd:ed:e2:8f:bc:04:3a:d5:29:32:ac:
1f:73:ac:35:16:f1:6e:2f:6a:ef:af:67:94:e9:e1:
87:e0:20:a2:e8:ba:1c:56:d5:ab:c7:95:33:b9:4f:
69:62:45:bd:ba:84:0a:d0:63:56:94:46:6c:17:b4:
d3:47:c0:f4:b3:64:49:a9:76:85:ba:05:fb:ad:cb:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D9:24:5B:7A:2B:97:79:F7:4B:09:0D:93:A7:F8:D6:51:DF:DD:8D
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c0:5a:ed:b4:f6:cf:4c:1e:d1:9e:da:87:20:e9:88:4a:5e:
cd:8c:14:ab:7e:d6:df:3f:91:61:f6:a7:70:01:1d:e3:a0:21:
23:d9:0b:b4:f6:b4:a5:60:25:ff:6e:c4:a3:b9:97:44:19:87:
a9:a9:5c:ae:58:7c:6b:d2:68:4d:2c:c3:89:91:4b:6d:04:40:
b0:6c:98:8d:3b:7d:7e:89:4d:43:04:44:67:e5:b9:68:b4:42:
74:22:a1:ed:f7:9b:a3:63:53:f6:64:36:67:be:73:4f:d8:46:
d6:dc:8a:fe:65:eb:63:31:45:b4:4d:21:ec:d6:27:c6:05:e4:
5d:02:6a:31:4c:2c:10:50:75:ea:4d:31:ba:e4:2f:b6:30:d5:
d4:16:e1:f0:0e:a4:d0:6d:be:35:58:9f:74:5d:e3:ba:45:d9:
f9:93:0e:fa:af:61:0f:c1:fe:bc:62:1a:7a:90:25:91:fe:48:
f7:ba:ee:2d:68:f9:6f:f9:74:f5:ad:10:2e:2a:38:ea:f6:74:
a4:25:7b:d7:44:de:ce:b5:b8:00:69:69:95:2a:ab:55:7e:c1:
65:ef:b9:be:0b:49:88:04:bb:b1:70:3e:ce:99:91:7c:01:d9:
b0:60:4b:df:99:c5:c7:84:0b:96:14:0c:04:5c:1a:49:98:64:
00:81:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:24:00 2026 by rpki-client