
Error: rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File: jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier: Syq9XklORpyQbSmjbg3N0V+Qa9wau56lWblNuIP84D0=
Subject key identifier: 83:D2:9D:27:D8:AE:54:35:D2:B9:5F:BE:C8:CA:7D:A2:53:69:52:94
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer: /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial: 05F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number: 05EF
Signing time: Sun 25 Oct 2026 03:01:20 +0000
Manifest this update: Sun 25 Oct 2026 03:01:20 +0000
Manifest next update: Tue 27 Oct 2026 03:01:20 +0000
Files and hashes: 1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: jF5I0isBualfeudx1fdYVLOV2KFo6aDzyzPohYOvGww=)
2: 45D1D714068B11F1B2B0DFC5DAE4EC9C.roa (hash: k+Zzix2q4ja3ETayVUtqKJofOjoyeVoddBz/cw7MwUo=)
3: 7318CAFC068B11F1B3ADE4C5DAE4EC9C.roa (hash: n40nUjLwRlCqHskgafPlAGCOiGivJPI1YmSXzTyPafc=)
4: 01C2346A068B11F1BC83A6C5DAE4EC9C.roa (hash: 4GrU3dea3pBBteCk+wcUG3w5UC1FXBPW1sooz5OsDs0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Validity
Not Before: Oct 25 03:01:20 2026 GMT
Not After : Oct 27 03:01:20 2026 GMT
Subject: CN=6add7100-dd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:e9:9f:c8:a6:a4:75:fe:e1:7a:dd:fa:ed:
57:07:a3:03:d6:01:5f:03:38:7a:ef:04:9f:1c:cb:
3c:40:f4:44:06:97:8b:3c:65:9c:30:3d:d9:7f:7a:
88:47:1e:26:09:7e:11:42:4e:64:cb:2f:7a:f6:50:
3d:af:2d:4d:dc:c1:f6:fc:04:6e:e1:2e:f5:ee:10:
e2:64:1e:68:e5:e1:b4:aa:5b:2e:d0:bf:73:2d:e8:
6a:ed:d1:b5:0e:19:c8:65:69:88:53:00:70:e6:e9:
39:74:fb:51:db:84:56:84:69:4a:4c:b4:bb:0c:cd:
c5:b0:28:86:7b:d8:09:9a:38:3e:cb:f4:04:eb:3b:
f5:86:ea:37:62:a9:ae:78:bf:9a:4c:c3:78:77:b4:
90:f6:1c:53:28:d6:f3:13:21:6b:71:18:4b:9d:71:
43:55:ab:95:9e:77:91:b5:6b:26:53:2f:31:41:fc:
12:59:d8:77:78:92:e1:75:a7:75:54:91:e1:51:dc:
98:32:8f:41:94:bb:36:fa:f4:11:73:92:69:01:d2:
c1:83:04:08:d0:79:bf:cc:05:11:be:26:a8:24:51:
81:4d:ac:17:5c:f4:08:e1:4c:01:f0:97:bd:90:1e:
97:59:a3:bd:50:33:07:da:04:84:92:ed:84:60:ec:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D2:9D:27:D8:AE:54:35:D2:B9:5F:BE:C8:CA:7D:A2:53:69:52:94
X509v3 Authority Key Identifier:
keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:ce:cc:cc:ba:d2:f8:60:84:12:bd:c8:ee:20:40:85:1e:
19:36:5b:ed:b5:b0:f0:7c:49:51:09:5c:da:9e:a2:d1:e5:e9:
ff:fd:8d:a9:b1:df:da:77:a1:37:3a:5c:bc:e5:a4:d3:2b:26:
95:8b:3c:7e:2b:67:e6:ad:98:8a:e3:69:c5:1f:05:9c:ca:f8:
74:48:45:17:77:0e:eb:f0:e6:73:39:8e:85:28:1e:d7:81:c4:
88:97:7f:fa:4a:b4:02:b0:61:e0:48:9b:4c:1d:a1:e9:0d:16:
a4:59:88:94:10:e9:3d:52:c3:33:33:a4:cf:a6:85:7b:48:c0:
e1:ca:96:f2:7f:02:97:71:e2:d3:d5:8f:b0:0b:81:a1:d4:2a:
51:78:25:a9:8e:c6:85:d7:84:af:a9:c9:d2:3c:54:61:b5:21:
ad:86:12:1c:63:68:b4:87:b8:b7:69:59:7a:3f:83:37:45:9f:
c7:28:5b:d2:69:1a:c8:46:9e:80:cb:6d:7f:5a:c2:14:5c:cf:
30:e4:d5:5d:60:6d:0f:aa:2b:f5:53:23:22:d4:e2:94:59:c4:
90:6a:b1:5f:e3:23:ba:0f:db:dc:44:e7:03:d7:6f:05:b1:06:
a5:41:44:0a:7a:98:71:0d:7e:e8:51:2d:c5:15:ce:a5:09:5c:
aa:81:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:41:54 2026 by rpki-client