
Error: rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
File: HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft (raw, json)
Hash identifier: Gnm5DJb1DLF0RnnrLuD0ivI7/Sz1cpdhZ/qwe+aDG2s=
Subject key identifier: 22:F2:4C:AB:5D:83:39:8A:09:ED:2D:3D:56:5A:DE:38:EB:F0:76:A7
Authority key identifier: 1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28
Certificate issuer: /CN=F3651254AR/serialNumber=1D43E41D01CF85FF940F6606E1646147D8728B28
Certificate serial: 0E64
Authority info access: rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
Manifest number: 11DA
Signing time: Tue 27 Oct 2026 01:03:33 +0000
Manifest this update: Tue 27 Oct 2026 01:03:32 +0000
Manifest next update: Thu 29 Oct 2026 01:03:32 +0000
Files and hashes: 1: HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl (hash: F2jvOCOZCUI31Iq4HiR/hrt4n0F5VHzakoR3ipRH6TI=)
2: 9CDD40145D9011F1AB2571E6CE1D38B0.roa (hash: KGMM0OIG8jtbNWwzj53Nnu0ZY76B36gv4XqspIdGAgc=)
3: 1F692D645D9011F1A42A5FE1CE1D38B0.roa (hash: uxAtL7RSV0BjHxdvqeNpVW2xDoTXmaoYGo4ecxWsfYg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3684 (0xe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AR, serialNumber=1D43E41D01CF85FF940F6606E1646147D8728B28
Validity
Not Before: Oct 27 01:03:32 2026 GMT
Not After : Oct 29 01:03:32 2026 GMT
Subject: CN=6adff864-d63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:21:5f:f0:b3:cf:8f:49:87:7e:ff:b1:f4:
5a:d5:fa:d5:55:71:3e:68:8b:a3:cf:39:ab:7b:4c:
6e:8b:83:8f:cb:8d:98:06:62:0c:ae:f6:a3:4a:7a:
b5:70:51:d4:cc:77:e0:e2:eb:72:3c:84:48:69:db:
58:e8:8e:81:6c:c1:9d:e1:b7:24:f3:4a:b3:30:88:
d2:3d:55:d8:e8:88:9c:48:8a:a8:ea:40:19:90:b6:
8e:ca:17:91:5f:34:3c:40:a3:cf:c1:4e:e2:bb:68:
62:7d:fa:f8:b4:cf:d5:7e:db:32:0d:db:07:1a:e2:
3f:d2:06:0a:88:0f:7e:c8:9e:91:b7:15:50:c7:d2:
eb:a6:33:dc:0e:b7:e7:05:16:fe:a7:78:0b:e2:ad:
26:7b:68:eb:d0:38:74:22:5c:8d:88:02:a5:2d:cf:
c9:8b:e9:a1:7e:ab:05:39:9e:90:24:54:d3:50:3d:
af:fa:c9:5c:3b:8e:27:eb:d0:8d:6d:7e:6e:f2:a4:
46:83:83:de:5f:b5:e6:38:3d:4c:7d:5c:43:f0:0a:
1b:6d:d7:70:0b:8e:b3:14:fb:4f:19:19:dd:e5:d0:
c2:c8:03:78:e1:f8:ea:50:dd:25:a3:1d:02:e9:5b:
e6:4d:fd:58:3a:ed:27:73:17:e4:c6:77:39:7b:bf:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:4C:AB:5D:83:39:8A:09:ED:2D:3D:56:5A:DE:38:EB:F0:76:A7
X509v3 Authority Key Identifier:
keyid:1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:6a:91:5e:eb:cf:89:75:f1:6e:ac:91:d8:d4:19:e2:b0:
e8:a6:6b:87:66:63:46:20:62:e0:50:0d:71:28:81:d6:bb:5d:
e4:96:f6:e6:24:96:82:4a:f1:2c:d3:0e:f9:32:12:df:c4:fa:
e4:6d:ed:20:9e:8f:56:ac:b2:90:aa:94:d8:18:72:5b:06:a6:
60:4d:b3:36:5c:df:d5:f0:53:c0:7e:65:37:86:3e:17:c3:c1:
7e:16:5d:ad:5e:66:cb:4f:99:66:c8:b0:82:e8:da:26:2e:f8:
82:97:4b:9e:5a:c7:22:c5:06:79:19:b3:fe:e9:bd:b4:57:ea:
b4:43:d1:31:df:03:4e:ac:4a:be:88:43:67:93:eb:00:ad:e0:
e8:ec:0b:a0:fc:d4:a9:4b:03:9a:e1:d1:f5:9d:6c:a6:47:6a:
b9:19:45:b4:ab:07:d8:18:6c:25:7d:86:a1:65:81:ae:03:96:
cb:0f:b2:87:a9:9e:e8:a9:3f:f2:2f:d7:1a:de:7f:31:d3:0e:
51:8e:dd:57:7f:1a:b7:c9:62:bc:95:85:ab:f5:51:72:3f:30:
e7:45:a6:7f:1a:07:19:f6:db:0c:10:2b:de:7e:f6:f4:f8:bc:
42:20:04:09:14:0e:43:e9:99:61:c6:5c:e1:b9:36:1f:2d:38:
49:e1:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:32:49 2026 by rpki-client