
Error: rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File: CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier: Y8cEdSEyF6onzvSa1Ig9LCRhaz9wYON5sP9oJXT9GHc=
Subject key identifier: 14:FA:94:A4:77:BB:26:2E:8A:F8:7C:CD:16:8D:D9:1C:3D:47:6A:9A
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer: /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial: 0A00
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number: 09F8
Signing time: Tue 22 Sep 2026 01:41:17 +0000
Manifest this update: Tue 22 Sep 2026 01:41:16 +0000
Manifest next update: Thu 24 Sep 2026 01:41:16 +0000
Files and hashes: 1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: Lr0wIxD8Ad35OTeemEn/AVd4uLFShVbaB33YGp9wEW4=)
2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Validity
Not Before: Sep 22 01:41:16 2026 GMT
Not After : Sep 24 01:41:16 2026 GMT
Subject: CN=6ab1dcbd-1533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:03:9f:79:3a:0b:da:78:9f:2f:08:0b:c6:
7f:b3:d3:17:4e:be:7e:1e:0f:eb:44:d8:f1:b3:56:
0c:05:fa:6c:d9:e3:68:50:10:27:f1:af:ae:0b:91:
e4:3b:22:9a:60:83:ea:6d:13:25:f2:1d:cb:a0:ae:
2f:11:9b:cf:4c:f9:5e:b0:e5:78:fe:6b:c6:e9:5d:
68:e5:50:ab:f3:a5:e6:66:0d:94:c9:a6:4c:ee:41:
63:60:8a:d1:e3:68:62:52:35:e2:71:e8:0e:4c:15:
24:70:8c:20:60:1d:aa:6b:6a:d7:e4:42:90:8a:c5:
da:88:ab:a2:34:7b:7b:94:eb:6b:63:d8:d6:a6:6b:
4f:a8:b7:20:62:c2:e2:14:29:c9:2a:53:34:02:76:
ad:b1:0e:22:75:c3:8b:70:a5:32:52:61:0f:df:9e:
e9:52:83:98:4e:89:11:e8:6b:33:76:6b:b9:25:35:
e0:01:19:da:15:66:e8:3e:a0:e0:65:53:92:1c:4a:
ad:d4:cb:96:e8:ab:e9:e9:40:6c:f5:8a:d7:86:6a:
5d:21:db:88:f0:48:27:7b:a7:07:bf:24:e7:b8:e1:
88:62:e2:1f:b5:5c:35:bb:73:b9:a6:f1:64:cd:d3:
27:fe:e0:5f:c5:8e:56:a7:84:43:0e:38:4f:44:57:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:94:A4:77:BB:26:2E:8A:F8:7C:CD:16:8D:D9:1C:3D:47:6A:9A
X509v3 Authority Key Identifier:
keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:78:ea:83:0b:3c:9b:df:9a:c9:f3:c7:d4:97:d5:c8:b4:c4:
0e:ba:61:14:31:35:0b:2f:96:f3:01:0b:84:27:04:b9:42:d1:
9e:c4:59:04:02:f4:7c:65:a5:d2:87:d8:b8:02:a8:94:c4:0e:
c7:19:f6:ec:0a:79:3c:5d:6a:2a:44:08:54:5d:fa:b0:d3:7f:
55:7b:81:57:a5:03:91:d1:8d:30:75:13:59:12:1b:d9:d5:58:
cc:84:c6:a4:20:d0:e5:3c:40:25:6e:60:7c:47:d0:40:9b:1e:
f4:20:4f:64:c0:1c:27:c0:ee:80:3b:54:52:4a:9e:3a:1c:ad:
34:a3:90:24:d3:ef:53:e2:87:3a:ca:4a:d4:fe:db:a4:d4:49:
a5:c0:d5:cd:b7:fe:7d:bc:f8:26:e2:dd:40:1a:02:a4:ca:a4:
05:ae:60:b8:52:00:e3:5b:3d:a9:9a:d0:f3:12:8e:3c:66:0a:
95:19:fa:06:f7:ac:ab:81:66:2e:e4:3b:06:70:67:f9:13:f6:
ec:79:df:ae:31:d9:55:d5:92:ea:22:f2:6e:f1:e9:4b:b6:54:
ca:37:99:44:d2:90:0f:94:7c:ff:a5:95:43:55:19:cc:60:ee:
1c:9f:b9:4f:2f:62:26:fe:f4:5a:2c:fd:dd:a0:63:9d:f6:ed:
2c:e9:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:56 2026 by rpki-client