
Error: rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
File: mwftdzFoum4LC-Pl3LLPeB96yCo.mft (raw, json)
Hash identifier: dXTZr+/mhnksIHsf9zl2pW56Zi75zgdEC1kywcK1L0s=
Subject key identifier: 21:85:A0:AE:D4:F2:11:DB:D6:2D:02:78:0D:AF:1E:5E:24:29:70:DA
Authority key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Certificate issuer: /CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Certificate serial: 0ED0
Authority info access: rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
Manifest number: 0ECE
Signing time: Tue 27 Oct 2026 01:03:09 +0000
Manifest this update: Tue 27 Oct 2026 01:03:08 +0000
Manifest next update: Thu 29 Oct 2026 01:03:08 +0000
Files and hashes: 1: mwftdzFoum4LC-Pl3LLPeB96yCo.crl (hash: Jns3cs9VlQZRGXz266CUed/Np8qN9AKp7jNsctI9F3M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3792 (0xed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037RI, serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Validity
Not Before: Oct 27 01:03:08 2026 GMT
Not After : Oct 29 01:03:08 2026 GMT
Subject: CN=6adff84d-6ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:16:54:63:62:89:5b:6b:1a:85:9d:0d:35:
bf:78:91:86:2b:4b:93:e6:29:17:d7:27:f6:ac:e1:
a0:a9:fc:e7:3b:be:eb:43:af:b1:51:9a:4b:84:db:
ac:e0:08:74:b1:a1:6c:20:93:ef:f5:33:7f:87:2b:
18:1d:57:07:a9:02:80:77:26:8f:a1:b8:19:c0:d7:
68:5f:53:cd:a6:a3:b1:62:51:d0:86:c0:89:f1:1d:
f0:72:43:2f:4f:76:24:c7:a1:45:36:8b:2d:d8:0d:
ca:4f:04:0c:14:2c:ad:8c:aa:a7:3f:99:eb:b6:c3:
29:a4:a9:67:a9:5a:36:e7:30:72:83:9b:d9:65:53:
a3:0c:aa:76:97:6f:f7:d3:4e:ab:a1:0e:0c:e2:aa:
4c:f1:e3:d2:51:16:ca:92:b0:9f:11:de:ff:9b:48:
41:b0:76:c7:64:cf:ab:cf:0b:8e:5f:75:fe:97:b8:
2c:87:c4:b6:c2:6e:5b:9d:e3:63:01:a1:02:0f:f0:
fb:de:5b:f8:a3:6f:8c:0d:d4:42:c3:40:64:41:53:
9e:3a:96:f8:a6:94:1e:fa:4b:ec:46:0f:0a:aa:09:
7a:0a:bf:f2:8e:5c:6c:ab:6b:d2:dd:24:3d:3a:aa:
6f:a5:85:3d:47:74:0d:46:de:b3:ee:1d:31:7d:1a:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:85:A0:AE:D4:F2:11:DB:D6:2D:02:78:0D:AF:1E:5E:24:29:70:DA
X509v3 Authority Key Identifier:
keyid:9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:41:23:16:3d:ac:6c:4c:73:ab:33:75:e9:c2:81:bf:82:60:
20:c6:8a:de:e4:01:d5:5b:06:be:09:65:f1:49:66:14:58:1d:
c6:08:d6:f8:85:4f:1c:9a:e1:a1:98:81:74:35:f4:4d:b3:a3:
ff:97:a7:aa:d4:9c:3e:91:0e:a3:07:2b:17:98:24:f1:06:fd:
a5:2f:9a:d5:57:68:49:f9:f3:94:6a:9b:8a:bb:4f:a2:13:74:
06:98:cc:85:3a:0d:04:66:aa:0e:80:d9:43:d6:54:fc:ce:21:
32:48:fc:61:93:5c:56:21:50:19:a9:39:8d:fe:14:cd:28:e4:
12:f9:d9:27:c6:64:58:bf:7f:d5:d6:83:39:f3:f3:fb:f7:7d:
8c:2d:a9:6b:6a:15:54:5e:c9:bc:94:5f:be:b3:1e:f3:87:7a:
51:25:8e:26:fa:b1:31:49:05:5f:4b:72:e1:3e:d3:57:05:d7:
50:21:76:c8:3c:34:df:86:f3:64:5f:bb:db:bf:e8:b6:9f:ae:
1f:92:67:6e:03:a2:30:3c:38:03:15:ee:fa:93:ef:e4:46:c4:
46:8e:52:23:cc:51:da:a8:29:cb:58:68:2f:45:29:c2:76:fe:
b1:38:9d:31:df:6f:70:46:9d:4c:23:ba:de:5e:5c:50:40:5c:
e6:86:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:35 2026 by rpki-client