
Error: rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File: PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier: sagTARoCRm1u3NYqNOPq1FG5Wkqlv4yfpgWSAvGCclg=
Subject key identifier: 1B:C0:95:C5:F9:D0:FA:A1:D5:24:78:0A:86:85:7A:4D:51:5A:DA:D0
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer: /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial: 0375
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number: 0373
Signing time: Sat 24 Oct 2026 04:15:26 +0000
Manifest this update: Sat 24 Oct 2026 04:15:25 +0000
Manifest next update: Mon 26 Oct 2026 04:15:25 +0000
Files and hashes: 1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: DNjMxtOgfXi/rD8p3vK2LG7lhKlr0KwA+xwqExh0Ebo=)
2: CC282C02DCA911F0B66908E9DAE4EC9C.roa (hash: aHMu4MSEjVffihBbMLwP18F/HBK4HKpDI2L3Hm8bfrQ=)
3: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 04:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Validity
Not Before: Oct 24 04:15:25 2026 GMT
Not After : Oct 26 04:15:25 2026 GMT
Subject: CN=6adc30de-fb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:40:ef:2b:7c:84:06:fe:f1:d1:0f:67:9a:
34:0b:02:31:59:7c:28:be:50:03:8a:3e:1e:62:fc:
19:a9:83:07:ac:24:4f:51:9a:7d:c4:c3:50:1d:e9:
8c:8c:77:f7:b5:da:18:13:29:1b:e8:24:7e:b2:59:
b0:2a:3f:a3:2c:96:95:20:ca:36:37:23:bf:26:e9:
4f:03:1c:84:fb:c6:32:f9:0d:4e:84:67:4a:af:ee:
42:9b:77:bd:4b:90:ae:09:2c:37:ec:07:91:9b:af:
a0:58:b8:2d:00:07:79:5e:5d:53:e8:e2:70:ad:c7:
5d:92:ac:fa:3c:a3:83:eb:40:f5:a3:cc:7c:8f:79:
1e:a1:ce:59:eb:69:bb:47:e5:48:c5:87:7e:1d:d7:
05:b2:b5:ef:d2:ba:aa:bc:d0:49:0c:e9:49:f6:fe:
65:3c:77:ba:3b:47:d7:2b:b8:e7:f7:b0:c5:90:de:
3f:91:fa:e9:c0:cd:e7:c9:91:53:d5:77:af:f3:03:
7a:bd:2d:7f:91:a4:c1:c7:1f:9c:53:9d:0a:10:f2:
fa:de:95:32:bb:6f:66:a0:99:00:f5:a2:42:84:0d:
2f:c9:3b:e1:52:7a:23:eb:76:b3:14:2b:51:2f:2c:
2d:59:6f:e1:28:63:4e:79:2b:c7:a2:cb:fd:0f:29:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C0:95:C5:F9:D0:FA:A1:D5:24:78:0A:86:85:7A:4D:51:5A:DA:D0
X509v3 Authority Key Identifier:
keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3e:2b:f5:c2:3f:bb:a1:ba:10:a3:de:28:19:f3:2d:90:59:
e4:68:b0:4e:09:51:fd:37:e9:72:e9:32:f9:2f:a5:61:7c:2d:
bd:0c:ab:88:96:b7:f2:9f:95:9c:90:9f:50:13:1e:52:87:e3:
cc:80:f9:fe:5b:42:90:8c:1e:21:92:8b:4d:51:52:d1:a4:8e:
5d:3b:e8:d0:6b:6d:24:7a:ac:37:d9:49:f7:f8:ed:ea:da:7e:
56:86:cc:88:12:0e:f6:b9:f3:57:e6:b7:be:58:6b:ed:e4:3c:
a3:9f:19:90:58:a8:ff:cc:e8:0b:53:7b:a5:77:b8:0a:1e:20:
1c:a9:40:0d:f4:30:6e:e5:4e:4e:76:29:96:23:2a:c9:65:7b:
12:a7:2a:47:7c:f8:69:3d:02:87:c1:23:72:12:d8:4c:76:92:
77:2e:ae:cc:c3:fa:fd:dc:7a:40:ee:02:cb:f4:7e:23:71:26:
c3:ab:0b:24:08:d5:bb:bd:21:9f:63:ff:84:0a:d9:b5:a9:e2:
a1:44:da:a4:57:a1:55:22:48:89:11:ac:32:ea:c9:d8:9a:4a:
7e:0c:4b:3d:f7:0d:32:93:5f:c1:09:bb:5d:21:bb:91:62:1f:
4a:af:4b:5f:0f:29:bb:e9:11:90:14:fe:7d:61:1d:ec:e3:3a:
54:5d:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:10:26 2026 by rpki-client