
Error: rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File: 4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier: DXcBjbByoYFHHIPAJ1kSrPBThKDj2WulUqaR5lxoEwg=
Subject key identifier: 95:4D:CE:A2:29:75:99:AE:35:C6:FF:32:2A:EE:2C:82:F1:49:AE:3E
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer: /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial: 04E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number: 04E8
Signing time: Mon 26 Oct 2026 03:31:57 +0000
Manifest this update: Mon 26 Oct 2026 03:31:56 +0000
Manifest next update: Wed 28 Oct 2026 03:31:56 +0000
Files and hashes: 1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: IlmbTaCYkPFu0FV4KmYY0qhrPXRQddUANjyJsoEYxUw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 03:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Validity
Not Before: Oct 26 03:31:56 2026 GMT
Not After : Oct 28 03:31:56 2026 GMT
Subject: CN=6adec9ad-6184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:18:32:79:08:ff:28:30:78:23:28:c3:a9:
95:6d:c4:e5:a6:f4:47:ba:95:0b:25:50:a0:2a:35:
3c:a8:93:b8:39:2c:c8:2f:3a:ab:ca:6c:73:6c:29:
ae:bb:6b:de:b7:1b:84:9a:2d:e7:7d:bd:96:2d:50:
02:15:14:de:db:f8:48:25:af:6e:d2:de:2d:d5:db:
11:40:e1:74:bd:1e:0e:ba:69:82:db:aa:8f:cb:4d:
2e:1f:8c:81:08:f5:58:d1:63:5d:2d:f6:a6:ed:4a:
1d:9f:86:07:db:ea:ae:f5:d9:db:5d:dc:1d:ef:e6:
d7:dc:4c:8d:f5:6d:96:27:42:4f:cf:7a:21:e8:7c:
71:d3:6a:a4:37:b6:3c:e6:b0:86:52:c5:c9:78:4b:
a6:35:24:53:45:1c:b8:2a:23:de:85:16:e8:aa:2d:
69:58:9b:2c:a4:44:db:30:1d:5f:cf:16:24:90:71:
73:2b:bb:40:e2:55:cf:28:05:ca:5f:a7:69:d6:b1:
8d:0e:53:42:c8:f6:03:a3:03:b8:aa:7d:b9:59:75:
66:71:10:0f:0c:c3:ec:63:24:9e:4c:a6:53:65:d6:
a8:71:08:d2:71:7b:01:49:ab:08:a6:98:31:bc:62:
26:be:37:d4:3b:f0:35:e0:f2:3a:3b:81:b0:18:28:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:CE:A2:29:75:99:AE:35:C6:FF:32:2A:EE:2C:82:F1:49:AE:3E
X509v3 Authority Key Identifier:
keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:22:db:9e:c3:1a:af:68:51:1a:a2:ce:e3:b0:00:94:4c:d4:
28:88:28:60:13:9f:66:44:4f:93:e8:64:fe:ed:02:e5:f1:62:
f4:bf:e4:36:06:81:61:97:2b:c0:dd:a9:7d:55:63:72:24:18:
4a:99:56:90:4d:d2:dd:18:b9:3b:1e:8f:68:f3:ce:d1:f3:46:
bf:18:ee:d1:01:50:72:b2:ac:1e:97:e7:bc:88:8c:e1:74:77:
e1:81:ad:fb:a6:5b:8b:37:9c:30:fa:14:17:86:0a:ec:8b:78:
a8:fa:b4:56:7b:52:98:8c:aa:48:5b:1f:f5:f4:e5:42:09:18:
29:64:9e:67:8e:6b:2e:83:43:ab:a4:f4:ae:9f:61:76:16:3d:
a8:d4:e6:ce:06:66:e8:11:fd:56:7d:7c:a7:3b:f9:48:94:f6:
1b:3f:9c:b7:ac:82:54:e0:99:3d:77:a8:c5:83:5f:ab:b2:e6:
61:6a:df:d2:d8:80:01:27:af:6d:5a:0e:33:95:a4:ee:0b:e4:
57:e0:44:12:b3:7e:79:99:4e:3b:40:2c:ad:67:9b:3d:03:79:
df:a6:53:f5:c6:c1:bc:23:23:ca:8a:23:1e:ac:86:8e:c9:ac:
90:76:55:d0:0a:b0:ca:00:a4:6c:d6:4b:2a:bf:4a:82:0c:9d:
10:ed:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:53:59 2026 by rpki-client