
Error: rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File: FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier: VSg8K4WXrA0EvwJRdtAkGLXMaoU5BfzFDyFKPeeSfHw=
Subject key identifier: 1A:F9:CD:BD:4C:2A:75:DF:C0:9F:87:1D:29:AA:8B:14:B9:CD:15:35
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer: /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial: 0588
Authority info access: rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number: 0584
Signing time: Tue 27 Oct 2026 03:10:40 +0000
Manifest this update: Tue 27 Oct 2026 03:10:40 +0000
Manifest next update: Thu 29 Oct 2026 03:10:40 +0000
Files and hashes: 1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: OUq7xUFJ/YPfdJi6BWfu/fUqVdrrge0cAeHsz9JR5Ho=)
2: EB9A40F6876D11F18C949AC0CE1D38B0.roa (hash: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=)
3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Validity
Not Before: Oct 27 03:10:40 2026 GMT
Not After : Oct 29 03:10:40 2026 GMT
Subject: CN=6ae01630-e1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:b0:4d:05:c1:f7:1f:1d:82:6b:b5:78:55:
a8:c5:3d:a1:f8:50:ba:7f:7c:61:c2:77:93:69:c6:
ac:0a:d8:58:03:7c:3b:b9:f7:af:4b:3a:ac:33:3d:
9a:05:1b:b3:9a:27:e1:9e:e8:a4:4f:86:ab:86:d6:
d6:f7:9d:9c:87:0c:db:df:80:5d:fa:d3:5b:45:84:
1a:dd:27:6d:26:ff:ce:33:41:74:48:1c:b6:b6:8a:
4c:c9:b3:e6:4a:d2:39:db:f8:fa:0a:96:97:00:88:
21:07:df:a0:09:70:1c:04:97:97:a8:de:81:c4:f5:
47:e5:5f:59:6e:96:b6:a0:05:d8:15:c9:f9:b6:df:
a2:8f:27:d3:81:ff:8e:cc:e7:7a:db:c5:44:4b:cc:
05:8e:95:86:a0:c4:5b:a6:46:70:c7:ec:16:55:4a:
45:18:4e:36:2d:e0:95:87:0a:0d:76:3c:e4:92:3e:
99:1e:80:f3:6a:82:14:46:e4:a0:80:5f:59:e7:1e:
92:84:c2:cb:40:a2:14:9a:85:d9:ba:fb:11:93:99:
93:f0:66:bc:18:d0:9d:49:cb:fa:e9:80:63:ee:f1:
73:31:f6:e6:7b:e9:46:d4:79:44:34:37:d2:cd:00:
b1:14:82:55:88:64:2a:39:e8:ac:bc:cd:ec:a9:81:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:CD:BD:4C:2A:75:DF:C0:9F:87:1D:29:AA:8B:14:B9:CD:15:35
X509v3 Authority Key Identifier:
keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:0d:e1:3f:55:5b:ad:2a:ea:b5:ee:92:1a:49:99:20:63:
05:60:ca:2d:18:31:cf:db:b0:9f:98:aa:1c:eb:c0:12:d7:2a:
ee:04:e7:26:5e:a1:fd:b9:f6:4d:37:23:e2:5e:a5:0d:9a:be:
c2:47:a2:a6:3e:a0:7e:7e:a7:e7:00:1d:0d:99:23:6f:77:48:
b4:df:7e:98:ba:86:11:09:36:b3:dc:85:78:7f:c0:82:85:42:
b2:52:d2:89:cf:74:75:f5:f3:f9:15:33:17:b0:84:9a:cc:56:
e9:84:4b:79:fd:50:63:44:1e:32:3d:69:de:6a:0c:37:90:a8:
14:3d:33:ea:fe:ce:29:50:37:5e:38:4a:84:8f:14:ec:d4:50:
bf:39:2e:ac:f0:59:48:ce:46:91:2e:bf:2e:42:c3:02:c1:0c:
1b:9f:6b:1f:d8:21:8f:02:e8:a8:da:6f:2a:6f:94:1b:f4:ff:
5d:ed:84:4b:3d:8d:1b:30:76:38:70:e4:1e:00:d8:01:a8:fd:
af:c8:a0:90:ee:52:aa:9f:86:1c:4c:a5:59:7e:a3:93:b6:7f:
5e:ce:14:87:11:a0:8d:f5:1f:64:ab:f7:b2:62:83:11:c0:dc:
f0:91:1a:7c:95:29:a4:9d:a4:08:d3:5f:38:86:06:67:1b:e9:
30:4f:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:24 2026 by rpki-client