
Error: rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
File: D4kdL9FUeF3D5rPHlmdkbAu09W0.mft (raw, json)
Hash identifier: a/I4+D/h4P0m7nZ8E98IsaNu5h8ogrG8RJPdQYRRe+I=
Subject key identifier: DF:B7:00:CD:3B:D4:89:CA:FC:9E:9D:70:A1:C2:9F:76:E7:07:C0:C9
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Certificate issuer: /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial: E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
Manifest number: E0
Signing time: Mon 28 Sep 2026 05:32:20 +0000
Manifest this update: Mon 28 Sep 2026 05:32:19 +0000
Manifest next update: Wed 30 Sep 2026 05:32:19 +0000
Files and hashes: 1: D4kdL9FUeF3D5rPHlmdkbAu09W0.crl (hash: La/bkJOYxBuTAksWj0d634/DC7F3sx6spuFz4YZUhu4=)
2: 70AA590E1E2B11F196DC24ADDAE4EC9C.roa (hash: uMkdtVFtuvQqxiv3P3QzJvhJoUMANuEicE2OUjLsOMI=)
3: A90F75EA1E2B11F1A74454ADDAE4EC9C.roa (hash: l0pI77i/3rExThBukFhyhrFHwyUmiyAZc83nnRzr++8=)
4: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (hash: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=)
5: CBEEA3561E2B11F1961C59ADDAE4EC9C.roa (hash: pvY9TQ8JUnIxht52zhSA0rWfrxaSQC/iSnp5NKbibUM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Validity
Not Before: Sep 28 05:32:19 2026 GMT
Not After : Sep 30 05:32:19 2026 GMT
Subject: CN=6ab9fbe3-4ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:ec:ef:5d:8d:aa:23:48:72:36:94:6a:f4:
ef:2b:ff:64:54:32:02:ae:a5:96:97:2c:8c:af:d9:
61:41:66:de:dd:6e:d7:ab:e0:33:f6:c6:a6:43:90:
dd:68:b7:58:56:a2:33:fe:09:4b:11:d0:cb:29:02:
3e:d6:9e:bd:8b:1f:c4:1c:22:b8:10:66:41:ee:e0:
75:23:4a:9d:d7:fd:0c:fb:4c:0b:b6:fd:6d:fb:f1:
a4:fe:5a:d2:0f:ff:5a:54:33:20:d8:77:63:01:41:
bf:5c:29:ef:61:22:dd:d0:58:5f:52:0f:c3:7d:a3:
15:af:06:68:a5:0e:75:de:ce:eb:2c:a9:ca:e9:50:
e7:66:b2:ca:d9:de:83:10:80:b9:c9:a6:8c:3d:06:
54:e0:b7:b5:4e:1a:36:d8:8e:03:e6:14:c3:19:73:
d6:e5:59:fd:71:b0:10:7e:dc:3c:85:13:06:6a:fc:
79:89:2b:48:7d:8d:87:53:e9:14:e0:31:08:1b:ea:
93:f8:23:08:6a:80:1f:66:fc:0e:a8:d0:14:eb:4b:
d3:a8:86:fe:fc:9d:db:0c:75:78:bd:8b:e6:60:d9:
13:bb:ff:cb:08:af:1c:c9:ef:fc:41:5b:f3:65:45:
a0:3c:06:50:16:0c:82:70:af:ae:ed:fe:0b:a4:67:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:00:CD:3B:D4:89:CA:FC:9E:9D:70:A1:C2:9F:76:E7:07:C0:C9
X509v3 Authority Key Identifier:
keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:15:2a:48:53:9f:24:74:cc:b6:f3:7c:b2:ad:53:64:3f:
03:d6:41:4d:d3:fe:89:aa:ab:e1:a2:79:83:43:12:b3:ff:1f:
bd:6f:c6:71:f2:da:16:f5:c7:8d:40:04:8a:4c:e1:c7:73:93:
15:4a:1f:fc:df:b2:f1:9f:2d:fe:02:61:e5:51:17:bd:51:52:
a6:61:31:cd:ab:93:9e:ee:e5:af:23:64:bc:ab:8a:5a:51:36:
5a:7e:96:f9:f0:ac:e0:4c:de:71:7f:f6:37:9f:06:e5:3c:aa:
09:25:dd:08:67:bc:0e:75:c5:fd:a4:ff:0a:00:fa:72:ee:02:
f7:22:bd:5f:21:ba:79:41:c3:be:8e:6b:c7:aa:5d:d1:3c:e7:
b0:ae:18:ba:74:e1:88:07:3d:5f:1c:54:8d:b0:6e:4e:36:91:
b0:6e:34:e6:ce:07:2d:0b:30:00:ed:1b:82:6d:cc:06:d6:6a:
95:64:5e:28:90:7f:a6:87:0c:68:5a:91:4c:cd:c0:8c:ec:73:
43:1c:eb:b7:96:91:cd:97:8b:98:04:30:84:7f:35:5e:7f:24:
93:f4:77:6f:dd:00:1f:16:b0:e9:d7:59:1a:c4:86:69:04:45:
02:48:b7:2b:03:00:4d:b9:8c:93:3c:ec:4d:75:bf:d8:9c:0a:
66:cf:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:41 2026 by rpki-client