
Error: rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File: NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier: VaPdTuTx9CLA64ysgQauNM8Y3bf2xakVafr3pV0JGaM=
Subject key identifier: 29:18:E5:45:FB:06:29:E4:53:D3:A3:06:CA:74:5F:A7:05:56:0E:16
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer: /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial: 0B54
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number: 0B4E
Signing time: Tue 27 Oct 2026 01:16:22 +0000
Manifest this update: Tue 27 Oct 2026 01:16:22 +0000
Manifest next update: Thu 29 Oct 2026 01:16:22 +0000
Files and hashes: 1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: tF85qkeax8O+WeLEmbSUOBf6qHrzgIEwy3aSVA+WMlM=)
2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
4: C5B11B58483E11F1B8CB3DB0CE1D38B0.roa (hash: Y0ZCKfJAfWw5PWvP1AXpo5C8au43GtXQpd0r+podfi0=)
5: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
6: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Validity
Not Before: Oct 27 01:16:22 2026 GMT
Not After : Oct 29 01:16:22 2026 GMT
Subject: CN=6adffb66-568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:12:78:09:d5:8b:01:ef:df:83:4c:8b:17:
40:9f:a9:4f:ac:60:05:dc:4f:61:58:65:5c:8d:52:
43:9a:13:a3:14:0f:64:78:d5:e7:d2:61:3b:70:37:
3a:ff:9a:5a:b7:40:1a:e4:6e:4f:37:d5:f2:88:76:
00:1b:7f:55:77:97:fb:95:e2:06:fc:97:fd:45:ba:
9b:62:b1:59:94:4d:14:86:e6:f1:e3:e9:d1:9a:cb:
ac:b0:0e:07:77:5e:36:4e:ac:7c:29:22:53:2f:3b:
78:11:4b:ab:7c:be:52:76:18:d4:a1:20:99:ca:18:
fb:94:93:4a:e1:74:63:1b:b3:9f:89:4a:f5:c0:db:
a8:a5:b1:a9:3e:45:5b:c3:0f:dd:ad:eb:93:9b:45:
53:72:76:9f:92:13:8e:97:0e:6a:af:c7:d9:cb:e1:
6d:41:d0:20:52:cf:be:e3:38:ed:79:82:f6:5d:dd:
28:84:00:e0:93:d4:18:25:13:53:bc:36:77:89:89:
71:7a:6e:82:18:8a:fd:a8:da:76:9d:a6:a1:20:89:
cb:b2:18:d7:35:15:d1:78:d3:ac:ea:9c:f8:b3:f6:
5b:35:67:bf:55:ea:74:39:ef:fd:a8:f3:43:ec:61:
c9:f9:6f:95:47:10:2e:02:af:df:c3:f0:4f:94:be:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:18:E5:45:FB:06:29:E4:53:D3:A3:06:CA:74:5F:A7:05:56:0E:16
X509v3 Authority Key Identifier:
keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:dd:f0:1a:ca:46:f1:77:6c:43:cb:29:3e:a6:cb:2b:7a:
cf:f3:29:4f:71:3a:aa:25:00:a0:13:9c:98:45:f9:7d:1a:a9:
29:26:d0:9e:e8:43:2b:74:c0:da:e0:09:ca:f6:bb:35:07:d1:
fe:36:01:09:ba:ad:b1:08:60:4e:0c:bf:e2:ae:f6:2f:f2:f2:
05:5b:46:9c:14:3c:19:ea:0b:67:90:c4:f4:5f:7e:19:6f:42:
e7:38:84:43:6f:b7:8b:98:ec:06:8c:fa:04:77:8d:4d:42:6f:
ff:72:63:98:d1:7f:5b:4d:d9:e5:64:b3:04:63:99:00:fc:bf:
39:c6:ea:e0:80:4a:c2:39:db:68:38:04:bc:cd:2c:4e:3b:f7:
82:8a:7d:2e:18:03:70:42:4f:26:5d:bd:25:4e:27:a7:27:2a:
22:63:9c:04:9d:0a:34:02:97:ae:ed:d3:fe:ba:73:94:58:a1:
a1:a8:4f:0a:68:d7:df:b5:d6:d4:75:7b:e4:9d:5e:d3:cf:9a:
5b:e8:a0:64:eb:d5:a1:0a:8d:ea:8b:d1:2d:e3:09:d3:96:3e:
43:d9:bd:d9:e2:53:25:8a:af:4b:5a:3e:28:af:86:d5:6f:9f:
e2:05:43:5b:cb:97:36:34:98:a0:df:29:22:79:d5:85:08:6a:
bd:e9:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:11 2026 by rpki-client