
Error: rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
File: Jm1JTcM12iFKT7D2ephR7J4wu2s.mft (raw, json)
Hash identifier: au5EuaJXr5wACiP5Ky00lNrtVJLRP3fITbhIjv7I+AE=
Subject key identifier: C9:7C:64:9C:BE:54:87:EA:86:8C:28:29:3E:0F:3C:8F:27:23:F9:F0
Authority key identifier: 26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
Certificate issuer: /CN=F363A203AF/serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Certificate serial: FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
Manifest number: FA
Signing time: Sun 25 Oct 2026 05:28:10 +0000
Manifest this update: Sun 25 Oct 2026 05:28:09 +0000
Manifest next update: Tue 27 Oct 2026 05:28:09 +0000
Files and hashes: 1: Jm1JTcM12iFKT7D2ephR7J4wu2s.crl (hash: sCVVH6KE+XRhI8u1TnU33nxOmhLYlrnT3DSJUPW0oqQ=)
2: C20CD5EA0F3C11F18C19D2B7DAE4EC9C.roa (hash: 9DL2whMS7ZI7tnV/tidUr5/DmnfTdqpW1ue5JaKqkBw=)
3: FD7685AE0F3C11F1AE437FBBDAE4EC9C.roa (hash: DsgvYl/9xFquoIAVZuTIGhxVayNA81ChOAyEAjkTsiQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A203AF, serialNumber=266D494DC335DA214A4FB0F67A9851EC9E30BB6B
Validity
Not Before: Oct 25 05:28:09 2026 GMT
Not After : Oct 27 05:28:09 2026 GMT
Subject: CN=6add936a-a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:be:0e:5a:d3:41:42:47:cd:33:1b:2b:c9:
23:42:76:80:55:d0:98:8b:cb:d3:b4:49:a9:0e:76:
89:8e:34:a2:e1:c7:44:93:7f:0d:88:1a:3a:51:72:
97:be:bb:a2:49:7a:52:fb:84:77:08:0d:24:d9:cb:
91:18:b9:b6:12:35:d0:8f:58:9b:16:aa:53:ca:ec:
37:ae:81:fa:fa:28:21:5f:4d:dd:1f:b3:4c:0b:e7:
ee:2b:32:a5:87:1e:cd:ea:4e:e4:45:22:48:b1:ed:
85:03:27:e2:04:57:ff:55:04:0d:de:02:7c:1c:df:
e4:e8:8e:c6:67:45:3e:bb:13:1e:c2:82:5a:89:9c:
94:92:c8:37:f7:46:ef:05:66:25:36:7b:38:60:ab:
ac:48:a2:a8:3b:ec:08:82:39:b8:3e:8d:cf:06:03:
68:59:b1:41:1c:e2:58:3c:ff:81:3d:49:4b:be:fb:
19:6e:f0:6c:91:00:77:41:37:c5:04:07:b4:ca:78:
10:14:3d:1d:6f:f0:fd:ca:41:5f:36:dc:05:31:cc:
18:e4:46:ca:85:eb:7f:80:ba:e3:74:c9:4f:21:ab:
8e:33:d7:64:82:27:ab:28:0f:2c:2a:00:1c:b7:09:
79:18:a2:f1:90:86:b2:48:3e:8c:bf:e9:e8:8e:88:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:64:9C:BE:54:87:EA:86:8C:28:29:3E:0F:3C:8F:27:23:F9:F0
X509v3 Authority Key Identifier:
keyid:26:6D:49:4D:C3:35:DA:21:4A:4F:B0:F6:7A:98:51:EC:9E:30:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jm1JTcM12iFKT7D2ephR7J4wu2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A203/353A12F40F3C11F1B55D76B5DAE4EC9C/Jm1JTcM12iFKT7D2ephR7J4wu2s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:6a:a0:b3:a0:03:c5:96:2d:f3:54:2b:c6:34:0c:35:30:32:
fe:0b:99:4b:e4:ed:89:15:c6:a0:d4:83:e7:7e:fb:05:e1:b6:
4f:4c:09:10:d3:b1:35:0d:c9:7d:a7:26:4a:55:fb:78:7a:bd:
3e:f0:ae:59:82:7f:79:72:32:28:b1:e7:e3:3e:b4:10:65:c0:
0b:b7:26:51:91:d6:21:d9:c8:73:12:f6:29:ad:c1:cc:0d:a9:
d6:fe:d9:42:e8:55:2b:cb:c7:65:00:c0:32:f5:32:32:df:ae:
ee:87:f1:97:9f:26:21:0c:75:97:b0:c1:82:20:5d:c2:91:97:
ba:d1:1c:ee:37:12:75:d6:7a:76:46:49:58:a0:78:6c:6b:65:
4f:79:7c:fd:04:be:4b:3b:f8:84:b8:cd:e4:31:59:97:e0:06:
c5:b4:d2:03:45:5c:6c:05:e9:91:e3:b3:03:c2:ca:14:17:e6:
9f:12:e3:45:1f:a7:28:74:bb:67:94:7d:08:01:87:97:bf:fd:
1f:3e:57:57:66:8b:ca:79:77:72:6e:ee:09:fd:1b:e4:de:00:
c6:c1:71:ff:f2:fb:84:f9:6b:af:b5:b6:89:43:78:83:a8:8b:
22:74:87:73:2d:c8:b8:aa:4d:c4:ef:40:d6:7c:b1:77:0d:66:
86:f4:e4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:26 2026 by rpki-client