
Error: rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File: IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier: vuowzprPZhY80+RGI4ZC5plGk73MQcvhn8FrxOMKAJY=
Subject key identifier: 82:D2:0C:70:B5:67:8A:E9:8A:38:70:8D:F2:25:2E:74:97:31:EF:74
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer: /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial: 05CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number: 05C6
Signing time: Sun 25 Oct 2026 03:05:08 +0000
Manifest this update: Sun 25 Oct 2026 03:05:08 +0000
Manifest next update: Tue 27 Oct 2026 03:05:08 +0000
Files and hashes: 1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: 6mu1Mt2GIf/hvpzbv4BHi7BpYRBIEpftHv6tSpOLPW0=)
2: 927918B47E9211F1B10E100BCF1D38B0.roa (hash: t1dmJ5rTWfJPttLndRXr3M5OZ9VvePtT9qEnQGPsMKA=)
3: 8CE3B23E846D11F1A56407E7CE1D38B0.roa (hash: Nw6b5ero/wWuFYNopyGbuS9j7QQwO11rcoEZb6aRGW0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Validity
Not Before: Oct 25 03:05:08 2026 GMT
Not After : Oct 27 03:05:08 2026 GMT
Subject: CN=6add71e4-8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:87:48:84:71:26:46:5b:42:f7:00:db:e0:
7e:79:aa:67:03:04:c6:dc:7d:7c:35:a9:14:f2:db:
e9:d6:4a:7d:2a:7b:a4:1e:32:84:5e:94:21:23:82:
34:35:21:83:58:75:bb:cc:3e:4d:d7:94:ef:ff:5d:
d0:46:67:a7:8f:d0:af:42:f2:ef:51:10:67:47:a6:
50:e8:c2:7c:79:ec:be:87:9c:3c:5a:7f:77:5c:27:
2c:ce:91:36:06:f3:23:6c:e8:e8:70:41:7a:27:a6:
dd:a1:d1:4e:b2:2e:ef:54:03:2b:f9:d5:36:ec:e2:
13:b7:a0:d5:75:b5:f9:80:71:4e:08:4b:5a:7d:6d:
de:c2:75:ec:0f:b9:fb:5c:0e:4c:8b:ab:bc:d6:56:
ad:fe:36:c9:3f:d6:c2:7f:c7:44:a9:20:6d:dd:c7:
33:80:92:b1:43:4e:6a:75:c1:09:97:ad:44:93:63:
c8:63:ec:a8:48:60:9f:8b:01:9a:cf:a7:1f:26:d9:
e9:76:a6:bc:b5:ed:cd:15:a4:60:ce:19:00:b0:7c:
0e:ab:01:4f:fb:8b:c7:68:f7:6c:9a:8d:0e:e2:2f:
77:1a:5f:4a:10:40:1d:5a:c0:37:ac:22:e1:5b:93:
88:a6:9b:0a:c1:3b:4e:78:39:d3:84:91:6b:8c:97:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:0C:70:B5:67:8A:E9:8A:38:70:8D:F2:25:2E:74:97:31:EF:74
X509v3 Authority Key Identifier:
keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:41:d0:53:e9:bc:ed:ba:28:ce:dd:78:bc:2b:3a:1f:a9:19:
77:c8:fa:37:71:9a:93:1e:ed:4f:46:0d:80:38:0d:84:51:f4:
58:b4:4d:21:af:c2:45:9d:0d:55:cc:ee:dd:66:ae:cc:f8:75:
81:f1:a8:93:11:13:de:32:ba:41:5b:55:e4:09:d0:09:84:68:
2a:02:c0:37:8d:08:0e:16:d6:99:3e:e5:9e:a5:d8:34:4d:63:
41:d2:fe:71:dc:eb:19:e9:64:90:3a:9a:bb:db:41:f1:07:f5:
c9:dd:03:eb:ad:9c:2f:67:ad:84:0e:57:0d:d6:58:2a:dc:03:
6a:8a:94:6d:20:0c:fd:b2:4b:9f:dc:c7:05:f4:ca:74:16:99:
39:d5:90:45:c0:5b:6e:67:f2:66:cf:16:ca:39:9c:00:93:53:
40:9c:b9:f0:14:ea:5b:d2:c7:aa:85:25:23:9c:ea:0f:24:f6:
5e:64:c2:40:a5:57:49:11:12:61:99:70:69:90:fb:7d:75:92:
58:96:56:62:3e:92:6a:8f:b8:22:7b:94:c8:d1:b7:01:47:b1:
15:4b:be:ae:aa:78:b7:61:10:fa:b7:4b:48:1f:88:81:83:9d:
95:b5:0b:60:35:d3:1b:d0:a2:b5:48:e8:87:12:92:52:6c:f3:
5e:9f:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:51:43 2026 by rpki-client