
Error: rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File: x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier: eHgDv9YlYkSK4k5SIIRyVrAsi+v48M4IQ8MSty1/fFI=
Subject key identifier: B6:24:6D:3D:69:1C:18:3F:A1:D0:DF:F3:3C:2E:8B:0B:F0:61:51:C1
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer: /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial: 03F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number: 03F0
Signing time: Sat 19 Sep 2026 08:12:59 +0000
Manifest this update: Sat 19 Sep 2026 08:12:58 +0000
Manifest next update: Mon 21 Sep 2026 08:12:58 +0000
Files and hashes: 1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: LfaUkQ8Sfh0AR3fsexeMELv8DWDLSMroDtGPYXuT67g=)
2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Validity
Not Before: Sep 19 08:12:58 2026 GMT
Not After : Sep 21 08:12:58 2026 GMT
Subject: CN=6aae440b-fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:fc:c0:a0:84:74:02:0c:1e:d0:d3:5b:c5:
15:e0:94:63:ce:c8:04:b9:85:30:8e:3e:f9:2e:d2:
6d:51:9a:f3:50:60:ed:30:ca:73:14:e5:8d:e0:73:
00:83:65:e2:82:20:44:0f:7d:cd:df:52:c0:44:5a:
00:ea:04:b8:2c:4e:c9:41:48:1c:d2:4e:b5:b5:48:
a8:2d:aa:f9:18:52:a8:0d:c7:70:0e:e8:98:1a:55:
ea:6a:1c:d8:dc:86:52:14:ed:97:5c:57:a3:15:f9:
73:89:e8:1e:38:d6:d3:6e:84:a6:ec:a3:02:3e:8f:
d4:aa:04:3d:92:38:5a:fc:6a:f1:c3:05:45:9e:f1:
cb:a2:25:b4:ac:95:24:0c:d7:61:0f:44:b9:9a:73:
86:af:01:a6:72:9e:55:65:d7:0d:e8:a5:c4:fb:9d:
22:cc:9d:26:15:02:b7:3a:ee:d0:fa:1a:b0:c5:2d:
06:d0:94:1f:1d:3d:8e:2d:f8:cf:22:b8:51:e7:7c:
ca:a5:58:a1:a7:f3:18:7f:18:fb:ec:9a:c3:30:c6:
13:d0:12:c6:e9:d8:4d:d5:be:3a:ee:f3:c9:66:57:
55:f0:85:9e:b5:6f:12:d6:72:a6:33:c8:35:ac:1c:
4b:53:96:d4:fd:03:83:eb:b3:7d:ab:af:cc:fe:67:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:6D:3D:69:1C:18:3F:A1:D0:DF:F3:3C:2E:8B:0B:F0:61:51:C1
X509v3 Authority Key Identifier:
keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:28:56:0f:a2:75:59:ed:68:ce:13:ed:0d:48:ac:ca:bd:a0:
21:0b:3c:c7:47:05:76:38:fa:47:e3:65:a3:dd:d2:f8:cb:5b:
24:96:5f:d3:7f:75:f7:2a:0a:a2:b6:c3:39:9a:37:1d:fc:8d:
4b:d9:56:87:b1:1b:59:c6:a9:07:35:c0:63:de:5e:cc:8d:26:
db:90:2d:3b:20:1d:b8:81:e0:a0:cb:91:e7:9a:ce:0d:8e:29:
bc:d8:a6:6c:57:43:ff:54:d2:ef:d0:cb:6c:dd:e9:6b:5e:e9:
a5:ff:1b:82:be:cd:7b:f6:2a:a2:7b:11:cf:8e:58:61:0f:a3:
ca:c7:cb:3f:7f:5c:ec:c6:d0:f5:4b:bd:32:f0:d9:c1:21:e1:
c1:67:bd:7d:61:de:a7:74:5b:f4:8c:6e:fd:70:20:a7:e1:24:
75:7f:c7:c7:f7:c9:36:6d:51:ce:21:4b:86:51:16:b2:53:27:
db:ed:46:14:41:ab:66:e6:20:f2:79:71:4d:93:d0:67:8b:40:
03:bd:ef:fb:75:05:61:62:b5:ac:b1:0c:54:7e:d9:30:19:2b:
ca:ba:43:51:9f:67:9e:a7:44:34:2e:0b:4e:10:1c:75:70:b9:
0c:53:97:98:08:57:02:80:de:ad:fb:8a:36:ea:d8:53:ed:05:
ec:ef:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:49:50 2026 by rpki-client