
Error: rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
File: a1799knJ49BMj10MwSmaYW_V-Ak.mft (raw, json)
Hash identifier: ozMWTpL0SDWaOgxeMuPTWlmgqBYW+u738tPK9s5mdOA=
Subject key identifier: 70:E9:EE:3C:A0:78:C4:97:59:82:95:F7:BC:16:F7:3E:5D:6E:6C:EA
Authority key identifier: 6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
Certificate issuer: /CN=F3644DAEAR/serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Certificate serial: 0837
Authority info access: rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
Manifest number: 0830
Signing time: Tue 27 Oct 2026 02:03:48 +0000
Manifest this update: Tue 27 Oct 2026 02:03:47 +0000
Manifest next update: Thu 29 Oct 2026 02:03:47 +0000
Files and hashes: 1: a1799knJ49BMj10MwSmaYW_V-Ak.crl (hash: gj2FaBEe2GKrHmI2wOOpXIET8DKOAybf/XM15MAdzck=)
2: A16239EC8C3D11F1BE7644A3CE1D38B0.roa (hash: 0JYmzfGx8sLMXKvehvd/IVdvY+JnR2awowJUxkVlje0=)
3: 4B70F5508C3D11F1878AED1DCF1D38B0.roa (hash: Br/bcIz5Bxo60iBuJqBn4eFX0dkWOUQkz1oUt9KXjyk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DAEAR, serialNumber=6B5EFDF649C9E3D04C8F5D0CC1299A616FD5F809
Validity
Not Before: Oct 27 02:03:47 2026 GMT
Not After : Oct 29 02:03:47 2026 GMT
Subject: CN=6ae00683-a20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:7a:77:25:5a:96:bb:91:d7:22:e0:3f:d0:
72:5b:ea:95:9d:2b:7c:c0:d6:e9:87:0b:38:78:07:
d7:7e:f5:66:29:1d:23:ec:ab:91:6c:71:93:7d:e9:
e8:1e:25:e3:5d:14:bd:96:55:ba:83:57:74:31:97:
14:b2:e2:bb:e6:3c:dc:55:4a:fa:f7:0c:a6:f7:a4:
4a:dc:27:bc:f4:ac:ba:1c:48:e5:66:07:3b:61:8d:
99:9e:78:1b:db:23:08:31:5a:b5:50:c9:5c:5d:7a:
89:17:a3:50:30:86:28:75:7a:cc:2a:a3:e8:2b:b0:
6b:f2:c0:d3:fc:4e:f6:a6:c4:9e:8e:f3:14:0f:f8:
40:e3:65:75:68:f4:a3:d1:ff:0b:d0:87:22:ed:2a:
56:01:fe:6c:c7:a1:8b:1b:ee:f0:c3:3d:18:7e:f6:
69:93:bb:37:be:55:90:94:8b:5e:3b:f5:77:6d:53:
58:52:0e:27:25:86:4e:ac:47:57:cd:42:ff:ce:f5:
b8:71:e2:c9:ba:e5:7c:44:67:ce:8c:dd:a4:1a:62:
ea:aa:da:4d:84:b6:75:46:8c:14:62:cf:ee:ca:03:
67:23:65:c8:96:6e:6c:f1:2c:26:6a:e2:45:9d:5a:
2f:cc:5e:41:0b:3e:98:d2:16:24:5f:ec:43:9c:3f:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:EE:3C:A0:78:C4:97:59:82:95:F7:BC:16:F7:3E:5D:6E:6C:EA
X509v3 Authority Key Identifier:
keyid:6B:5E:FD:F6:49:C9:E3:D0:4C:8F:5D:0C:C1:29:9A:61:6F:D5:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/a1799knJ49BMj10MwSmaYW_V-Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/04029C92970511EB8B925B30F8AEA228/a1799knJ49BMj10MwSmaYW_V-Ak.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:d7:c5:58:9d:34:11:c5:52:86:15:a9:b0:ed:6b:2c:e9:
9c:12:75:fc:e0:40:35:0c:fe:6d:f0:1b:95:36:ed:60:d6:f0:
ab:87:8d:b4:c4:96:c0:ca:40:3e:70:52:51:08:6e:e2:43:b6:
93:8c:41:b1:e3:3a:b7:63:3f:4a:6d:4e:14:75:3b:86:71:1e:
e3:03:55:49:ca:46:1a:fe:12:d0:88:da:f2:5f:5f:1c:d5:19:
c6:7f:0f:41:40:16:34:62:73:9d:d4:aa:11:b2:64:eb:c1:3b:
05:47:8a:1e:c7:8d:98:98:fa:16:c6:3f:6d:8c:1e:bd:e5:47:
62:76:45:c7:48:ec:19:46:07:67:0e:d2:a5:e2:29:5e:40:01:
70:0e:e3:5a:87:c7:1a:bf:f3:4f:c2:24:e7:1d:30:cc:e6:f7:
ce:15:ed:03:c2:26:98:40:46:be:bf:54:89:69:7c:fe:79:81:
87:06:22:18:d8:c9:40:8d:ac:ce:65:76:1d:b5:52:ce:c5:35:
5b:8b:c4:73:e7:ea:09:73:2a:b5:23:71:d0:49:82:e8:a6:a2:
10:5c:70:56:f7:7b:2a:65:01:fe:a9:50:fe:da:23:2e:7c:72:
e8:72:a1:9d:c1:8b:a2:fa:db:41:44:17:d5:ed:c5:b0:ad:a5:
5f:86:f4:55
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBUjExMC8GA1UEBRMoNkI1RUZERjY0OUM5RTNEMDRDOEY1RDBDQzEyOTlB
NjE2RkQ1RjgwOTAeFw0yNjEwMjcwMjAzNDdaFw0yNjEwMjkwMjAzNDdaMBgxFjAU
BgNVBAMTDTZhZTAwNjgzLWEyMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC39Xp3JVqWu5HXIuA/0HJb6pWdK3zA1umHCzh4B9d+9WYpHSPsq5FscZN9
6egeJeNdFL2WVbqDV3QxlxSy4rvmPNxVSvr3DKb3pErcJ7z0rLocSOVmBzthjZme
eBvbIwgxWrVQyVxdeokXo1Awhih1eswqo+grsGvywNP8TvamxJ6O8xQP+EDjZXVo
9KPR/wvQhyLtKlYB/mzHoYsb7vDDPRh+9mmTuze+VZCUi1479XdtU1hSDiclhk6s
R1fNQv/O9bhx4sm65XxEZ86M3aQaYuqq2k2EtnVGjBRiz+7KA2cjZciWbmzxLCZq
4kWdWi/MXkELPpjSFiRf7EOcP2tnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcOnu
PKB4xJdZgpX3vBb3Pl1ubOowHwYDVR0jBBgwFoAUa1799knJ49BMj10MwSmaYW/V
+AkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFLzA0MDI5QzkyOTcwNTExRUI4QjkyNUIzMEY4QUVBMjI4L2ExNzk5
a25KNDlCTWoxME13U21hWVdfVi1Bay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ExNzk5a25KNDlCTWoxME13U21hWVdfVi1Bay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDREQUUvMDQwMjlDOTI5NzA1MTFFQjhCOTI1QjMwRjhBRUEy
MjgvYTE3OTlrbko0OUJNajEwTXdTbWFZV19WLUFrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1OtfFWJ00EcVShhWpsO1rLOmcEnX84EA1
DP5t8BuVNu1g1vCrh420xJbAykA+cFJRCG7iQ7aTjEGx4zq3Yz9KbU4UdTuGcR7j
A1VJykYa/hLQiNryX18c1RnGfw9BQBY0YnOd1KoRsmTrwTsFR4oex42YmPoWxj9t
jB695UdidkXHSOwZRgdnDtKl4ileQAFwDuNah8cav/NPwiTnHTDM5vfOFe0DwiaY
QEa+v1SJaXz+eYGHBiIY2MlAjazOZXYdtVLOxTVbi8Rz5+oJcyq1I3HQSYLopqIQ
XHBW93sqZQH+qVD+2iMufHLocqGdwYui+ttBRBfV7cWwraVfhvRV
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:12:45 2026 by rpki-client