
Error: rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier: VfUG9wII7/PdVEN2cEpf9NMmq7GwMY+S8hAJZqeWgzQ=
Subject key identifier: 06:22:4D:12:70:E8:B8:F0:49:B3:29:BF:A6:06:32:2E:6F:64:74:26
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 0453
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number: 0448
Signing time: Tue 13 Oct 2026 03:51:42 +0000
Manifest this update: Tue 13 Oct 2026 03:51:41 +0000
Manifest next update: Thu 15 Oct 2026 03:51:41 +0000
Files and hashes: 1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: Rgiww0OIJbJH4fdOaXyrISXoZZH735WYaiUASieuaLc=)
2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107 (0x453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Validity
Not Before: Oct 13 03:51:41 2026 GMT
Not After : Oct 15 03:51:41 2026 GMT
Subject: CN=6acdaace-5fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:b5:4a:b8:33:c8:ac:66:3c:81:21:f6:fb:
f9:e0:35:6f:56:24:a8:7e:87:77:ef:ea:e1:a6:db:
fd:c5:33:16:be:03:5d:84:90:99:cd:12:1b:0e:7f:
bb:cc:cb:4b:6e:44:a4:99:10:a9:56:f7:dc:9c:3f:
f0:63:31:72:f7:0c:f2:12:c0:b0:07:ff:8c:64:c7:
f6:9f:e1:dd:23:00:a3:92:16:28:d1:0f:34:17:77:
d7:6c:74:75:81:d6:af:5e:a0:f2:9e:37:11:07:d5:
24:92:a4:f3:d6:72:87:0a:b7:90:e8:27:f8:43:10:
55:9d:15:23:e3:a1:94:00:a4:71:50:f7:32:58:08:
be:81:ff:fd:2b:a7:9f:3e:bd:a9:39:98:b8:77:b0:
01:96:8e:59:85:0a:b5:7c:f4:76:0f:ce:ce:33:63:
f5:25:4f:f4:79:03:97:88:a7:b4:1c:9d:75:c0:fc:
ca:e7:6b:8d:57:a9:a3:0c:fc:3e:ab:3e:d1:88:de:
c2:39:12:ce:d7:fd:11:10:09:20:06:48:96:c2:ac:
18:d1:6b:6a:57:84:84:93:5f:2b:eb:4e:8a:c8:f3:
17:09:4d:b3:a1:d1:2d:9f:81:ed:e6:7f:e4:e3:2c:
63:0d:93:f3:16:53:bf:cd:a7:ad:13:c1:3a:b1:33:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:22:4D:12:70:E8:B8:F0:49:B3:29:BF:A6:06:32:2E:6F:64:74:26
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:07:a0:f3:db:d7:c7:4c:e5:4f:73:a8:fc:40:b4:11:1a:
e3:b4:5f:01:c8:54:50:2a:d7:ee:31:af:6b:a3:df:1c:5f:b1:
50:fa:b6:12:27:7b:7a:7f:90:d2:2f:68:5f:44:0a:8e:71:c5:
58:02:33:b5:79:11:cf:51:a1:48:4a:7c:43:70:e4:f3:c1:a8:
8d:f1:f1:9a:82:80:b2:a9:8b:33:9e:57:6d:69:80:a2:d7:0f:
a6:fd:eb:6f:70:93:e9:25:cf:ca:d3:69:98:5c:e6:b9:a6:16:
2c:32:bf:4d:54:59:e7:a6:16:aa:2b:2e:53:2f:f2:e7:d6:7c:
01:6d:d3:71:89:27:53:93:ea:22:00:bf:1c:47:d7:1d:4a:4e:
b5:3e:30:4d:fe:e7:8c:cc:db:d0:84:1c:e8:a9:cf:c2:d6:54:
a4:6c:f5:4e:50:c0:36:b2:ff:3d:86:76:72:b3:0f:50:1f:0b:
3a:da:0f:75:05:44:61:2f:6c:44:f0:5a:4a:ac:07:27:c6:cb:
d0:36:e1:69:7b:91:61:3f:8b:2e:9e:2c:50:bb:48:ec:c0:d6:
76:01:79:fb:14:d6:29:c6:da:44:82:80:d9:fe:6e:b4:e5:64:
34:11:1c:6f:84:17:92:c6:2e:56:c2:25:7d:22:94:55:a0:bb:
b6:5e:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:00:14 2026 by rpki-client