
Error: rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
File: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft (raw, json)
Hash identifier: pToCAwaZDE6OuxSr9iM6uBI+vN8LSh5tzTqKJBtTr0A=
Subject key identifier: B1:94:70:BA:6D:C9:5B:08:A8:19:79:61:30:1A:AB:37:76:32:EC:62
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 0744
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
Manifest number: 0734
Signing time: Wed 26 Aug 2026 02:27:26 +0000
Manifest this update: Wed 26 Aug 2026 02:27:26 +0000
Manifest next update: Fri 28 Aug 2026 02:27:26 +0000
Files and hashes: 1: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl (hash: OhzNHXNZw+zGqgb+XdjN0/wxIJhKMQYkRqXAppjU+mQ=)
2: 945E7DD6C09411EEB7EE3CB6775412E6.roa (hash: tYOnT9BqjQytDTUPG0XkVhwFzA0iw870t7nSn78qeKY=)
3: FCC2B53CC09311EE973207B5775412E6.roa (hash: nXq9HLYp0GlNmQIEUdb1IZ99wB3H3x5IMG8Jb1p7VY4=)
4: 8569FFFEC09311EE82CC19B4775412E6.roa (hash: qk3Riga7xUPf3FLu17cWPMbk3RmFvo1KiRk9xRM0fy8=)
5: 53A66100C09411EEA90F91B5775412E6.roa (hash: +3UIXUyKPa3bDPDxQDj5kfU3yXkutIrwCuUhyp487Lg=)
6: D675B9C4C09311EE81BFE4B4775412E6.roa (hash: yeVSsCWEbMjwZK7TCJavELf3uC42giGMll3LnNn7b1U=)
7: 3029805EC09411EE8A964BB5775412E6.roa (hash: 1o3m2JRCddBtFM+D9ve2QUFy2WmECuUP1FMBaEt3CSw=)
8: A7408026C09311EE8AB05AB4775412E6.roa (hash: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Aug 2026 02:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF, serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Aug 26 02:27:26 2026 GMT
Not After : Aug 28 02:27:26 2026 GMT
Subject: CN=6a8e4f0e-729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:bb:7f:86:a9:02:ca:fb:23:b7:0a:83:51:
b3:0d:2d:41:35:a9:16:58:a9:23:33:8c:95:28:45:
62:99:19:6b:cf:c8:fb:de:b5:99:c5:ec:6c:2f:a6:
3f:9a:7d:c3:32:06:58:be:9c:1c:09:3b:50:cb:cc:
4a:f5:b1:d6:ab:f6:a0:bb:18:ec:7d:29:b2:0e:c7:
0a:3c:d8:9c:bd:b2:9b:d9:10:89:ed:67:97:23:12:
8f:80:c7:0d:22:6c:f7:f6:e0:6c:49:51:2a:bc:7d:
72:bb:19:44:e7:3d:f0:67:23:72:87:57:d0:82:e4:
8e:bf:5a:67:4d:a7:5c:d9:b3:99:d2:e6:5d:f5:a0:
d4:2b:20:31:50:dd:af:81:4d:0e:63:c5:e8:56:c4:
b1:b4:8a:e9:df:05:4e:ec:c5:54:a6:d9:71:94:19:
76:86:53:b5:6a:e4:c2:bd:83:8c:fb:af:8f:4c:7e:
44:14:59:49:6a:40:bf:53:d7:05:73:c4:3d:6f:f5:
cd:6a:ed:0d:8f:16:88:73:92:36:cd:8e:e0:cf:3d:
7e:40:ac:7c:90:09:d6:8c:db:44:38:21:35:f2:2f:
0b:41:ff:49:54:87:2d:82:cc:4c:43:93:9f:67:38:
c9:d4:7b:2c:83:cb:42:87:20:ba:26:72:2a:a4:6f:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:70:BA:6D:C9:5B:08:A8:19:79:61:30:1A:AB:37:76:32:EC:62
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:7d:ff:5e:8e:e2:65:74:9a:a8:d0:0c:ba:fa:61:b1:5c:e2:
5d:d6:2a:c2:60:91:79:d2:87:fb:cd:f1:5d:62:1b:6b:fa:88:
0c:92:e2:4e:7c:93:c8:4e:be:6f:3f:6b:f3:3a:dd:1b:4f:6c:
43:07:37:d9:d9:cc:9b:6c:84:79:f1:91:af:4e:f3:39:25:33:
2f:dd:35:ed:2f:ee:07:1b:93:1a:14:ab:f0:e5:cf:f5:c4:14:
c8:53:82:5c:fd:c2:dc:00:78:ef:91:a9:a7:b3:c0:0c:8b:c3:
17:76:08:a0:42:78:d0:67:f4:6c:cf:59:9c:0f:6b:34:21:1b:
22:ad:ec:9c:6b:f8:57:76:ce:d6:24:86:e2:c5:3b:39:dd:a4:
ef:ff:69:d4:87:92:d3:cc:fd:52:89:e7:91:1f:22:be:37:5b:
8f:e4:c1:63:d8:11:07:d0:42:2d:15:b1:06:36:fd:31:e1:eb:
d5:e0:ae:d6:1e:df:c1:b1:20:cd:6d:cb:c6:64:30:5b:8d:42:
91:6d:d8:40:70:87:87:c0:d2:a0:ca:26:2d:e0:f8:b9:a1:99:
dc:2f:3f:ad:10:9e:53:a0:a9:3b:24:2c:8d:0b:59:24:7f:c2:
4d:ef:d3:2c:01:e0:6c:89:23:d9:ea:98:ef:23:5e:74:0d:2a:
a8:c5:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:17:55 2026 by rpki-client