
Error: rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File: j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier: 30bc8ifPtI5uRSdlhhGkaq5HD0IB3CqBaLvzwxkeXWw=
Subject key identifier: 0D:38:97:FC:BE:89:D9:D6:DF:C2:A3:EF:65:BB:98:BF:68:31:18:60
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 0800
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number: 07F8
Signing time: Tue 06 Oct 2026 02:07:25 +0000
Manifest this update: Tue 06 Oct 2026 02:07:25 +0000
Manifest next update: Thu 08 Oct 2026 02:07:25 +0000
Files and hashes: 1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: Anroym6sNsTYbeFp+KpIWqP89OTqEN6A0kKZ4/nnWrg=)
2: E98217BCA6B711F1BCB809F1CE1D38B0.roa (hash: H05c3iJckwPKplJSHMZZ/f0htlgOBZ8SGY638Y0/+qM=)
3: A5F3DC22803011F18518BADFCE1D38B0.roa (hash: DF+u9s44Ut3/J+viKm+ou2FWZp3u6LhKP6V1fR+xehU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 Oct 2026 02:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: Oct 6 02:07:25 2026 GMT
Not After : Oct 8 02:07:25 2026 GMT
Subject: CN=6ac457dd-afea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:e5:2e:f8:67:b3:58:73:a0:ca:8b:19:f6:
29:a5:d3:ae:0b:5e:c1:5a:7b:a5:bc:a4:b5:16:8e:
9f:31:c0:65:40:c3:a4:e3:e3:b4:48:9b:84:ea:88:
10:bb:94:c3:72:35:e9:fb:81:11:39:3a:c7:8b:4e:
0d:26:3e:77:7f:44:52:ae:7b:ec:0c:1b:1f:29:3b:
7e:3e:f4:92:20:e1:ab:de:eb:94:16:5a:a5:37:c0:
cb:57:6c:e2:70:7b:c4:06:5c:e7:9f:de:ab:9b:a6:
9d:53:42:e4:80:79:98:68:af:07:95:fe:4e:6a:82:
c8:b5:81:01:29:cd:93:9e:0b:64:cb:4e:57:5b:b1:
3e:23:20:39:ec:42:23:94:a3:37:84:b0:7a:f3:6c:
6d:91:c5:b0:af:23:4b:38:3b:4c:4a:3d:92:35:3b:
5b:d9:82:4d:19:07:b9:e2:b8:a8:ae:e0:22:4a:5b:
40:19:6b:5b:46:21:52:74:4f:88:49:67:ad:f9:62:
42:6a:07:77:aa:77:b1:a7:90:55:1b:29:90:cd:71:
7a:5b:c1:fa:eb:c3:58:25:23:4d:e6:8c:de:34:27:
07:5d:44:15:98:e3:60:37:bc:07:79:83:b3:b1:b5:
c4:5b:69:3c:fd:82:bb:3e:9f:00:cb:2a:92:9d:5a:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:97:FC:BE:89:D9:D6:DF:C2:A3:EF:65:BB:98:BF:68:31:18:60
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:62:4f:15:aa:35:93:f7:45:05:4a:00:59:74:d8:c3:7e:
e0:91:52:d1:61:d9:f9:71:29:5c:c7:a9:57:ce:4b:70:b7:5f:
6e:23:10:64:02:10:38:6e:b8:8d:ea:15:31:b3:4e:ef:a2:90:
34:c3:2b:05:63:5a:b0:2e:04:61:f8:01:79:13:76:be:07:3e:
99:17:c5:08:4b:47:fe:95:41:65:c1:b9:d5:d8:64:a4:85:29:
92:f5:f9:d6:0c:03:3f:fa:01:13:68:dc:f9:07:0e:38:5a:29:
33:11:6f:84:87:c6:ff:b6:82:16:d3:a1:d7:ad:33:c2:4c:60:
51:0d:cb:50:9e:ef:ba:c0:42:85:36:49:fc:0c:0c:51:0b:cc:
ca:7b:e3:61:8d:25:52:6e:dc:41:ba:4e:e0:a1:bd:41:e7:30:
f4:67:e7:a8:25:66:18:ce:75:93:9d:bb:a0:59:19:19:61:1c:
99:fa:e3:cb:7f:a6:69:83:dd:ae:0b:3a:da:27:e9:f8:01:cd:
98:1b:3c:81:35:03:ad:ce:c9:ec:37:ec:2d:f9:94:f1:b4:e3:
0b:1d:ad:4f:a4:fd:60:c3:2e:9b:f9:ef:48:63:7d:16:7c:39:
3d:a1:e2:3b:49:c5:f4:07:9b:6e:fd:b6:fa:b3:ed:80:c6:e2:
bb:ef:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:22:21 2026 by rpki-client