
Error: rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
File: w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft (raw, json)
Hash identifier: gdvsXXsfClXKS8Jr2c3FJlTbTPSpC0fNMy7SyogSC1U=
Subject key identifier: ED:48:81:AE:A4:9D:9B:BF:B1:F5:25:2C:16:C3:62:81:96:AA:F8:80
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: 03FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
Manifest number: 03EA
Signing time: Sat 05 Sep 2026 04:03:26 +0000
Manifest this update: Sat 05 Sep 2026 04:03:25 +0000
Manifest next update: Mon 07 Sep 2026 04:03:25 +0000
Files and hashes: 1: w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl (hash: dx6iaV2vVajWR4iIBl/nO+RM3OdgkjZa4qOmo0bJBrI=)
2: 3B737D98EBF411EF92D3FFB8762E951A.roa (hash: pQmnrQ6q9u7W7aARZAIAyyTTaaaxPxFrGBxw2K6Ihk4=)
3: 2A9C4F82DB0E11EFB5D5F65C762E951A.roa (hash: NVW3v8GbViH2PMxW79Km4bUGB7n8gRCMb5uUvG/8ofI=)
4: 6878DD1E75A311EFB23C5586762E951A.roa (hash: VfrrZSL02g15laDfJe6nTjgG6CAFugYBtX2yjpd5cSA=)
5: 136813A8AB0911EFAABAE596762E951A.roa (hash: VwYAHtWC0OwThF8CtKnnBfqtYg/dU1jKuhLvi6pyo64=)
6: 3D3FB4EEFD8C11EFBEF68376762E951A.roa (hash: WZ+UxNc2jtefkjQfrz80B/fFxtNwMmYTFahRt37o5SQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Sep 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF, serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Sep 5 04:03:25 2026 GMT
Not After : Sep 7 04:03:25 2026 GMT
Subject: CN=6a9b948d-49af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:5f:49:64:e0:93:82:d5:17:b4:43:dc:c6:
05:71:f0:68:bc:2f:0f:99:b8:da:30:1d:73:f0:e5:
72:b8:4e:69:fd:e7:6b:5c:aa:fa:50:72:11:d5:f7:
9e:e1:2c:56:b7:77:ac:16:57:ba:4a:d7:34:6d:a3:
0e:5e:89:5c:7d:ae:a5:43:30:5a:23:a6:fd:8c:01:
8f:36:e3:f7:55:d6:77:b5:d1:7c:92:81:9f:31:c2:
04:0d:a9:87:79:46:95:8f:5a:43:ef:da:4c:a0:d0:
1f:d2:92:89:aa:62:ea:d4:12:10:b5:17:59:ee:6e:
58:aa:aa:62:a6:d7:78:fe:d6:0e:2a:be:ec:18:6a:
e1:3d:d1:c0:23:52:4f:99:26:9d:7a:3a:f1:1a:f0:
42:81:54:ee:fd:c0:df:6e:72:d2:b5:3e:76:b7:15:
c8:22:65:ef:c4:5a:26:9f:1e:26:52:85:cc:25:99:
ff:cd:11:61:ec:84:a0:2a:df:a2:f3:9a:8a:8f:f1:
c7:f9:c7:f3:09:76:d9:cb:9d:48:59:c8:e6:99:bf:
5a:bb:9b:c4:a2:6f:40:d3:6d:9f:6d:32:07:9b:25:
ce:bf:fb:8c:1d:02:c4:ad:1c:f1:44:82:80:6d:3d:
0c:45:c9:82:73:b7:0a:b9:a1:2e:b7:a2:46:3c:86:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:81:AE:A4:9D:9B:BF:B1:F5:25:2C:16:C3:62:81:96:AA:F8:80
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:8b:3b:5c:8e:53:b3:2d:c5:74:5c:d2:f1:4f:02:51:26:
8b:69:a6:e5:1f:bb:e8:46:98:13:38:12:86:aa:28:cd:8e:3c:
c8:d5:e1:94:91:81:51:56:c4:c4:13:00:2d:d6:54:d2:1c:3c:
32:e0:88:6c:3f:f4:da:f1:c2:85:f7:cf:16:10:53:87:0c:42:
21:02:70:8a:56:5d:0e:f1:54:bc:24:c9:d9:31:5a:1a:cf:8e:
ca:ff:d2:52:02:07:2c:8e:4c:4f:a8:8c:84:eb:d6:92:e9:c8:
e4:65:77:f8:3a:30:86:25:ed:48:6f:64:ca:fb:1f:d8:2b:55:
68:b2:e9:78:82:6f:2f:1e:8a:61:ab:76:e5:37:32:d8:ac:a6:
93:aa:5a:91:ff:35:86:b2:a2:be:4d:a6:15:de:05:a5:ba:0b:
03:0d:8c:dd:dd:fc:51:c8:47:8c:fd:78:72:54:6e:45:94:f7:
74:7f:6a:d3:f9:49:18:fe:fb:a2:ee:b4:76:fb:ea:39:ec:fd:
41:83:b3:ca:87:8f:3d:1a:19:d0:be:d3:2c:b6:43:69:45:36:
70:c4:27:5c:65:4e:9c:66:ea:47:d0:4b:8e:c7:98:15:a0:88:
95:b0:1d:fa:27:84:66:b5:d9:0c:28:9e:a6:d7:51:f1:9c:c9:
cd:4f:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:27 2026 by rpki-client