
Error: rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File: xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier: FuVfp30CQQac4qjfGhET8AFU330br/qtSDbcW9Kzl0Q=
Subject key identifier: F7:77:B5:F9:AC:C3:03:34:E4:60:5E:23:EB:FE:0F:33:F5:75:99:95
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer: /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial: 0790
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number: 078E
Signing time: Sun 25 Oct 2026 02:21:30 +0000
Manifest this update: Sun 25 Oct 2026 02:21:29 +0000
Manifest next update: Tue 27 Oct 2026 02:21:29 +0000
Files and hashes: 1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: 6Nh9YHSG+lALBZ3BEZABbqWW8ELy3LJI46mx+dOwtBo=)
2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Validity
Not Before: Oct 25 02:21:29 2026 GMT
Not After : Oct 27 02:21:29 2026 GMT
Subject: CN=6add67aa-034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:c2:af:95:73:ff:d0:ed:3d:65:4c:c6:c9:
57:e1:0a:db:a8:28:04:e0:07:f2:37:18:7f:07:54:
2f:e9:aa:82:14:d3:35:2d:29:1f:ae:77:f4:44:96:
ce:9b:96:ad:f4:d0:1c:66:9e:d4:33:97:97:33:f9:
77:eb:25:ee:25:db:c1:7e:83:70:a4:a6:bb:db:9b:
b9:4e:92:bc:77:0d:23:43:2f:aa:f0:98:78:83:56:
7f:e5:cf:35:a1:f9:e1:89:f4:52:d3:98:2b:83:61:
24:df:12:3e:c4:ed:30:78:ce:52:7e:11:16:24:ec:
f2:8e:b1:be:61:2a:68:d8:ef:15:4b:d6:79:94:01:
b4:3c:e4:d3:f7:5c:99:7e:55:64:c9:45:5e:7d:5d:
bf:d7:31:80:74:08:8b:46:98:3c:38:9e:c9:59:27:
f5:c3:eb:f9:23:4d:83:54:33:17:00:cb:de:e9:5b:
5a:86:15:47:d6:75:2f:90:d0:d7:ad:dd:ea:8a:5d:
a7:03:52:d4:c4:5e:8d:67:c7:83:2f:7f:61:92:60:
a4:c0:5b:f4:8a:14:35:3f:0d:ac:ef:77:2c:e0:3f:
f5:39:e4:c0:3d:6a:07:bf:8d:dd:2b:5b:4e:e4:0f:
d9:6a:f8:e2:06:ed:91:a2:14:8e:0e:41:2e:f2:4f:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:B5:F9:AC:C3:03:34:E4:60:5E:23:EB:FE:0F:33:F5:75:99:95
X509v3 Authority Key Identifier:
keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:bb:a2:6e:af:97:a9:94:1b:da:86:5b:56:36:0b:15:f2:
92:2e:9d:3c:df:2b:ea:5d:0c:b0:67:76:d7:ad:a8:19:74:45:
f1:d2:46:d2:7e:fd:3d:38:57:08:65:92:8f:34:b6:29:13:b4:
20:2c:ff:9d:60:9f:d5:81:c3:98:73:c4:c5:e1:be:32:a4:dd:
2c:99:cc:86:45:3b:87:47:07:ff:9e:43:18:25:8c:7d:ca:01:
cd:db:49:2a:4d:86:a7:b1:5d:99:1a:c3:bb:08:da:74:5a:a0:
47:59:3f:76:a8:17:b6:ab:ff:d0:0f:c2:0c:f0:e7:05:c4:93:
94:77:bf:b9:6e:31:c8:ac:8b:68:7a:f4:bb:0a:1f:4d:ea:f2:
34:43:61:82:9f:da:bb:ce:06:63:71:08:de:33:a9:1f:a5:ab:
96:42:36:07:d3:fb:16:5f:ba:47:40:6d:0d:34:aa:bd:48:b8:
d4:2b:c9:6b:2f:ce:2f:42:49:65:06:74:9a:cc:09:d9:51:51:
d6:b9:96:93:35:11:1e:12:97:20:01:62:46:79:93:e2:16:89:
dd:bd:a0:40:f8:0e:21:64:41:ee:68:12:28:e9:0d:da:8e:a9:
20:7a:12:39:29:16:0a:97:d3:b2:c9:19:cf:45:e6:b3:6d:a7:
89:27:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:43:59 2026 by rpki-client