
Error: rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File: BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier: U+LnvFQYMuu/f+nAp2JseKubtWba7OrU2CcOqRybnBQ=
Subject key identifier: 88:32:10:37:1D:96:57:9F:F8:47:EF:6E:1E:6D:56:D6:E6:FC:1C:87
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer: /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial: 01EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number: 01ED
Signing time: Sun 25 Oct 2026 04:56:39 +0000
Manifest this update: Sun 25 Oct 2026 04:56:39 +0000
Manifest next update: Tue 27 Oct 2026 04:56:39 +0000
Files and hashes: 1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: lsy0ec5D0fA6a60xa5WlgSeiQEaIo2pgy/KYq6mvchc=)
2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Validity
Not Before: Oct 25 04:56:39 2026 GMT
Not After : Oct 27 04:56:39 2026 GMT
Subject: CN=6add8c07-83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:2e:42:8b:13:2b:fb:3b:ea:5e:e6:52:df:
fe:07:1d:2a:e9:15:83:81:54:d4:3d:f0:d1:a5:e6:
c1:25:d0:2f:bb:cb:bf:0b:3a:9a:ce:f2:e7:8e:29:
f1:e3:de:7c:2b:df:07:d2:02:59:32:bd:25:93:26:
a1:21:37:7f:02:fe:c3:a6:a0:cc:5d:9b:fd:84:9b:
4f:62:a4:0c:2d:2c:d6:29:90:35:ab:6c:69:2f:2d:
ee:f3:7b:77:89:98:80:4a:a4:42:6d:66:77:d8:59:
83:72:c8:7b:5b:77:ed:78:d3:e0:8f:0e:7f:c1:d5:
50:bc:11:54:9d:40:36:ba:b1:1c:ca:d6:3e:03:63:
03:8c:ff:c6:20:48:04:8f:24:d6:3e:8a:4d:08:fe:
1f:8c:98:de:ae:74:08:d4:0f:cf:4e:12:22:3f:e4:
36:b1:d7:9e:f0:5a:cc:73:71:0c:90:61:bd:2b:bd:
fc:a8:08:76:d4:0f:01:4d:a0:db:2e:8e:1a:93:46:
11:ac:57:9e:6c:bb:a0:91:34:cc:4d:a6:84:20:0a:
aa:f3:1a:a1:7b:50:ba:cf:dc:51:e0:e0:52:a2:f7:
34:ce:ed:c3:d6:1e:6f:8c:0c:ba:7e:f9:af:c8:99:
83:51:ce:e2:9d:11:68:68:b7:92:ce:db:3f:9a:12:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:10:37:1D:96:57:9F:F8:47:EF:6E:1E:6D:56:D6:E6:FC:1C:87
X509v3 Authority Key Identifier:
keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:86:64:6d:1a:c0:14:f7:47:df:85:c4:04:5a:fe:d9:2d:
2d:06:98:1c:ba:59:5d:00:9a:a2:60:75:c0:b5:df:21:05:a8:
67:09:4d:38:44:3d:1a:8b:98:19:98:62:61:10:2f:12:9e:5c:
d0:aa:e3:dd:ad:a1:d0:af:b1:0b:eb:34:60:99:ab:f8:e7:db:
0c:dd:05:0b:c9:3b:4a:0a:e7:d6:07:ce:3d:ac:21:97:5d:f7:
0e:cf:3f:01:55:19:3e:0d:07:42:1d:20:2f:07:94:b7:24:60:
8d:68:98:ea:42:1e:ac:00:bb:fe:5f:a0:7e:96:4b:e8:7c:26:
bb:2b:5d:04:41:b1:5c:5e:d9:e7:e8:b0:78:f3:ee:aa:11:d5:
73:7e:54:0f:74:67:fd:cd:bd:bd:84:3e:1a:fd:0e:5d:d2:a6:
d8:dd:19:ec:00:5f:db:69:71:0f:57:b3:14:aa:78:3b:9f:c3:
93:23:02:85:df:28:b9:a7:3e:76:77:b2:86:05:06:2b:8c:cd:
8d:9d:f0:5b:5d:b4:b3:51:3c:de:27:2f:5d:1f:46:41:31:7f:
46:d2:50:8a:ba:d1:62:fb:80:52:30:ad:40:e1:57:fe:32:6c:
9a:aa:5a:e9:c3:0e:6a:ca:d9:e3:79:c6:a3:65:ae:f7:74:5c:
4b:49:b5:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEREMjVBRjExMC8GA1UEBRMoMDRENkNBQzIzQjE0NUI2NkVENjhCRUQ2N0YyQzFE
ODc2NjVDRjVCMjAeFw0yNjEwMjUwNDU2MzlaFw0yNjEwMjcwNDU2MzlaMBgxFjAU
BgNVBAMTDTZhZGQ4YzA3LTgzYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTLi5CixMr+zvqXuZS3/4HHSrpFYOBVNQ98NGl5sEl0C+7y78LOprO8ueO
KfHj3nwr3wfSAlkyvSWTJqEhN38C/sOmoMxdm/2Em09ipAwtLNYpkDWrbGkvLe7z
e3eJmIBKpEJtZnfYWYNyyHtbd+140+CPDn/B1VC8EVSdQDa6sRzK1j4DYwOM/8Yg
SASPJNY+ik0I/h+MmN6udAjUD89OEiI/5Dax157wWsxzcQyQYb0rvfyoCHbUDwFN
oNsujhqTRhGsV55su6CRNMxNpoQgCqrzGqF7ULrP3FHg4FKi9zTO7cPWHm+MDLp+
+a/ImYNRzuKdEWhot5LO2z+aEjLhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiDIQ
Nx2WV5/4R+9uHm1W1ub8HIcwHwYDVR0jBBgwFoAUBNbKwjsUW2btaL7Wfywdh2Zc
9bIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRERDI1L0YzMDI3M0ZBNTI5RDExRjA5NTU4MkVBQURBRTRFQzlDL0JOYkt3
anNVVzJidGFMN1dmeXdkaDJaYzliSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JOYkt3anNVVzJidGFMN1dmeXdkaDJaYzliSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEREMjUvRjMwMjczRkE1MjlEMTFGMDk1NTgyRUFBREFF
NEVDOUMvQk5iS3dqc1VXMmJ0YUw3V2Z5d2RoMlpjOWJJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGaIZkbRrAFPdH34XEBFr+2S0tBpgc
ulldAJqiYHXAtd8hBahnCU04RD0ai5gZmGJhEC8SnlzQquPdraHQr7EL6zRgmav4
59sM3QULyTtKCufWB849rCGXXfcOzz8BVRk+DQdCHSAvB5S3JGCNaJjqQh6sALv+
X6B+lkvofCa7K10EQbFcXtnn6LB48+6qEdVzflQPdGf9zb29hD4a/Q5d0qbY3Rns
AF/baXEPV7MUqng7n8OTIwKF3yi5pz52d7KGBQYrjM2NnfBbXbSzUTzeJy9dH0ZB
MX9G0lCKutFi+4BSMK1A4Vf+Mmyaqlrpww5qytnjecajZa73dFxLSbVz
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:55 2026 by rpki-client