
Error: rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
File: j4wJefc86FLbmkuB95URxC-dGzM.mft (raw, json)
Hash identifier: FxLLF6KaFxSLX8jqwIKdUjDeWMpDyWtqZRDV7UPigg8=
Subject key identifier: E5:57:24:5D:79:3B:77:C7:25:DC:9D:83:2E:9B:6D:9C:0B:34:68:EB
Authority key identifier: 8F:8C:09:79:F7:3C:E8:52:DB:9A:4B:81:F7:95:11:C4:2F:9D:1B:33
Certificate issuer: /CN=F363AFA1AF/serialNumber=8F8C0979F73CE852DB9A4B81F79511C42F9D1B33
Certificate serial: 0977
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
Manifest number: 0972
Signing time: Sat 31 Oct 2026 01:48:07 +0000
Manifest this update: Sat 31 Oct 2026 01:48:06 +0000
Manifest next update: Mon 02 Nov 2026 01:48:06 +0000
Files and hashes: 1: j4wJefc86FLbmkuB95URxC-dGzM.crl (hash: Qhl494kNCti+6kUHNn9bkUdPV1+aViNsOhsF3W170is=)
2: 8D2F2D3A950F11EA81C70365F8AEA228.roa (hash: E1m+mH12Mpyg/MvJKWPzJArtMLQOdegnE9nX0zGb32g=)
3: 5F67E3D8950F11EA910FD564F8AEA228.roa (hash: bjjrHbYjjqSz0f2JiVlDTz/pMXp7IwzgwakXgKQfPxE=)
4: E7D5B60A565C11EBA0010685F8AEA228.roa (hash: 9moA2uR4O6SXo/cDdVAmYzRLzT5s7TKI9d7SrqHCCDw=)
5: CBB18C42950F11EABC145265F8AEA228.roa (hash: NS3lQRZZ/q1We+IHBAB6S1hM35Toq9Ye+MJO4+ToHgM=)
6: 29A04204950F11EA9A188864F8AEA228.roa (hash: ATvTE1NmkvGY3ukA763zN8Nw+MkGODpI7C3fXm1SBUM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.crl
rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Nov 2026 00:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363AFA1AF, serialNumber=8F8C0979F73CE852DB9A4B81F79511C42F9D1B33
Validity
Not Before: Oct 31 01:48:06 2026 GMT
Not After : Nov 2 01:48:06 2026 GMT
Subject: CN=6ae548d7-ab83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b0:d4:8c:fb:d0:04:83:40:07:e4:10:1c:c6:
27:d4:d0:3f:8c:01:41:32:22:ad:5a:b7:68:46:78:
b3:a2:e4:a8:e7:08:bb:fa:a1:79:cc:76:16:cf:c4:
47:50:7b:35:36:3a:72:36:06:bb:7a:7d:70:0c:7f:
5f:a5:4c:6c:88:b8:71:1d:c3:af:f2:5d:ea:89:e0:
c9:99:73:61:be:7c:85:fc:92:1b:c3:62:47:dd:47:
da:31:13:ef:21:c9:3d:a9:58:7a:01:01:05:0e:20:
4c:d5:9e:d4:0f:e5:d7:72:36:ed:a3:c0:bd:23:03:
0d:1c:9b:30:50:7c:ca:cd:bd:50:85:7b:35:5a:04:
e6:7a:06:59:9d:6d:a3:bf:a2:36:eb:11:d1:ec:43:
5d:2d:be:c7:b4:02:e3:57:62:04:cb:e9:db:e0:ac:
45:f6:2d:8c:18:31:31:77:27:3c:00:88:7d:04:cb:
d1:7b:80:01:b7:d4:bf:cb:79:6d:37:3d:50:e1:65:
9c:a4:fa:fe:13:ab:9e:79:98:70:7f:ba:79:0d:f1:
f3:fd:89:b7:c6:ac:d6:20:c6:6d:f8:46:64:15:db:
9d:a6:86:c4:65:dc:41:8c:2a:76:4b:5c:df:8a:6b:
4e:45:fe:41:8d:de:76:a2:be:b3:b7:0a:e2:84:85:
a6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:24:5D:79:3B:77:C7:25:DC:9D:83:2E:9B:6D:9C:0B:34:68:EB
X509v3 Authority Key Identifier:
keyid:8F:8C:09:79:F7:3C:E8:52:DB:9A:4B:81:F7:95:11:C4:2F:9D:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j4wJefc86FLbmkuB95URxC-dGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363AFA1/8FD2877E950C11EA8189FA61F8AEA228/j4wJefc86FLbmkuB95URxC-dGzM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:10:ba:d7:e8:4b:c6:35:e4:76:59:c3:ed:c8:2b:cc:61:
5e:67:01:d6:8d:19:dc:9f:a7:c6:bc:3e:16:4c:a1:12:06:24:
e1:88:db:1b:27:12:92:64:e1:f7:b2:02:7e:ff:e9:ae:15:4c:
10:3b:9b:97:6d:f6:ad:1c:d6:41:f8:94:5e:d7:8d:34:0a:32:
12:6d:6c:f6:43:1e:d8:92:9b:16:af:cc:04:a8:ee:01:8a:91:
43:1d:16:ef:37:49:f7:5d:a2:c5:a0:f3:8f:65:3d:c8:23:e4:
4f:46:a6:bb:77:12:f4:e4:82:25:93:d9:d4:de:05:3c:dc:81:
04:a0:a8:45:d7:ae:2f:bd:7d:3c:87:f1:a5:b6:cf:69:b8:17:
83:da:14:27:a0:f1:d3:b5:88:05:56:92:02:b0:bd:ac:a9:85:
d6:c9:ce:b9:47:cc:17:db:4d:20:83:0a:ca:60:22:89:dd:b7:
b5:68:2d:3b:33:7e:bb:42:2d:7a:a7:19:f5:6b:ee:d1:ab:4b:
1c:db:46:73:3e:c6:6e:2b:5b:06:64:f6:60:fe:4f:d5:41:9c:
30:7d:b2:04:2b:b0:dd:05:1e:30:43:44:29:28:f9:6a:0b:7d:
15:01:3b:2f:b2:a5:fc:ca:36:51:88:88:c2:06:42:00:77:d0:
0d:8f:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:11:12 2026 by rpki-client