
Error: rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File: B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier: g/nGLcr7Srr5keUqzI05ZeQdyyv5+BFtG9O3ZnxHsJU=
Subject key identifier: D6:3A:85:18:F0:7D:DB:1D:76:63:CE:8C:6F:B8:D4:EE:85:AA:20:E1
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer: /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial: 024A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number: 0249
Signing time: Sat 24 Oct 2026 04:51:37 +0000
Manifest this update: Sat 24 Oct 2026 04:51:36 +0000
Manifest next update: Mon 26 Oct 2026 04:51:36 +0000
Files and hashes: 1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: 5oPuKn94Ox4g6tZp0NVDHuYOt8CLwoZg+NGOxOiehbw=)
2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 04:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Validity
Not Before: Oct 24 04:51:36 2026 GMT
Not After : Oct 26 04:51:36 2026 GMT
Subject: CN=6adc3959-74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:22:b9:a3:16:dd:09:0f:ce:aa:6c:f2:b2:
2d:2a:39:2e:da:7b:11:a5:5a:0e:06:1a:f5:3f:32:
43:f5:a0:d1:96:6f:01:cb:ca:b6:48:8f:25:de:d6:
5a:38:3a:9a:d2:29:63:60:23:80:2c:bf:36:25:8c:
b8:92:ac:bb:a4:64:30:f5:c5:a7:f1:42:9d:84:0c:
6b:cc:8b:28:72:2c:a4:3f:82:e3:4e:6b:96:29:3c:
b0:01:ee:ab:55:1e:76:43:df:27:21:a9:9e:53:96:
89:f4:2b:3d:f3:9e:99:f5:90:94:2e:f5:d2:1d:8d:
1b:e7:55:e7:d1:8a:d9:69:f0:87:07:27:e9:35:62:
9b:ce:3e:a2:a5:47:3f:c0:ea:e1:a5:e2:3e:08:b9:
53:f3:fe:37:a5:d7:af:57:c8:51:69:29:ee:e6:c6:
6e:c5:f9:30:e8:68:2b:4d:5e:f1:83:72:dc:19:37:
99:7c:07:c7:90:24:8d:c6:d6:b8:dc:aa:f7:33:de:
7f:dd:5f:64:cb:7a:2f:79:42:2b:d5:b3:bf:81:62:
64:1c:97:c2:0b:75:3a:c1:0b:07:c5:bd:07:f2:4b:
f6:55:54:c2:60:e5:fd:87:65:20:df:41:78:87:e7:
f5:be:38:b4:4a:8f:0e:3a:9c:e7:d7:94:20:0d:88:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:85:18:F0:7D:DB:1D:76:63:CE:8C:6F:B8:D4:EE:85:AA:20:E1
X509v3 Authority Key Identifier:
keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:57:a7:fb:e7:e5:f4:22:68:47:1d:23:6c:2e:0b:b5:a7:
2a:bd:f0:09:23:23:65:5f:e8:98:15:9d:00:3f:a6:61:5a:e1:
04:83:31:3a:0b:d1:4a:37:35:83:0e:ee:84:03:3f:5c:29:79:
20:db:e5:26:2c:82:f6:f4:1f:46:bc:f3:9d:ab:ba:80:76:4d:
4e:da:ac:2b:d4:3d:f5:36:a4:74:bb:ac:9b:6c:45:c8:cc:c4:
e1:ee:64:b3:20:47:a1:41:cc:6f:42:3f:e0:41:0c:1f:69:8e:
e5:05:b1:c4:1f:fa:d8:02:05:bd:54:86:f2:40:83:be:d4:8b:
5b:0d:2b:34:91:12:24:1f:ca:80:b2:2d:90:b2:25:8b:bf:08:
cb:c6:f1:d4:2b:a1:6e:59:46:58:cb:96:00:ec:62:6a:86:73:
94:ab:9e:ea:41:3f:2a:bf:0e:6e:2d:48:b1:ce:f4:21:7a:f4:
89:8f:a8:61:ae:28:ae:05:c5:0f:69:06:39:2a:cb:ee:41:12:
7f:ad:65:68:0a:aa:9e:fe:a5:9b:b2:53:bd:aa:a7:0a:36:55:
e1:3d:c4:f8:ea:fe:85:f3:92:66:31:fc:41:d7:7c:41:af:e3:
b2:13:84:0a:0f:6e:88:80:08:b1:65:81:df:77:48:6d:91:ea:
a2:be:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:47 2026 by rpki-client