
Error: rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
File: wOYNgogYoMFe_zoSBJ5ldVl-2as.mft (raw, json)
Hash identifier: jntf+9317fzVOIR7C6thcKojReaJcQMSx2weabIQoKU=
Subject key identifier: 18:C1:F9:CF:6C:E9:80:2D:49:44:71:91:8B:FA:04:4D:C6:9C:90:F2
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 0258
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
Manifest number: 024E
Signing time: Thu 08 Oct 2026 04:48:14 +0000
Manifest this update: Thu 08 Oct 2026 04:48:13 +0000
Manifest next update: Sat 10 Oct 2026 04:48:13 +0000
Files and hashes: 1: wOYNgogYoMFe_zoSBJ5ldVl-2as.crl (hash: 9KOJUVAsxubkBaKUlGnlUjrNJ0FZ6FHJxZoyh5L8Qgw=)
2: AFB09FE85DE411F1B0AD89D6CE1D38B0.roa (hash: lK9+gcJD82OD1cd0EMb+E1EuCpe3/JebmMS7KJQRTDY=)
3: 0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa (hash: 7LqF0h4HZlgH4xiK7+BEC8hYEvQZpFaEw4sMQ+xElKs=)
4: 459839D618D411F1AC5BCD9ADAE4EC9C.roa (hash: BfFfHk0YqSC5jIwTInr9vZ02QnCCqNGC6jKPrxhqZps=)
5: 02C3A866011511F0B85D595C762E951A.roa (hash: jjWJv8b3JwAacmiRwWHsf5c1g04d/JXZDr1YDZRSVgg=)
6: 6A3CAA065DE411F199794AD6CE1D38B0.roa (hash: 917FqsA/LK7EQ13YXGZzA5d97W1Nzk/ziVaJ/T9Mseo=)
7: 6B04BB22011511F0AF554960762E951A.roa (hash: 3WxUCfRbXJ1KMY5g7/PNsdsO7X5TUzWeRweVMnOzn2Q=)
8: 8A1C38AA011511F09CFA5260762E951A.roa (hash: 76MSxtrGiXL8x2iTNDj99rJpOIwY8C0w+GKIRo/LlHY=)
9: 5528519ED06111F0B42A39DBDAE4EC9C.roa (hash: dc3fqMjgMKVnImUXAIw9Qm0yHwzcLKrwq1GaH8jBDQc=)
10: 358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa (hash: HiXxXfq8y3MSa+ebFIcxUHo9G0Yk8MPlrY+KbF+ox9w=)
11: 3900BD24011511F0AB987C5E762E951A.roa (hash: KfnKWuYweFK309tVQ3urF8PcdLsH1nWr94hlvdL2KXs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Oct 8 04:48:13 2026 GMT
Not After : Oct 10 04:48:13 2026 GMT
Subject: CN=6ac7208e-ebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:5e:52:f0:37:c4:eb:56:89:b6:0c:79:d3:
c0:1a:5b:b4:38:ff:5a:20:52:9c:3d:fc:ee:4a:24:
84:45:66:39:ff:e5:ee:7c:62:5f:67:18:af:56:43:
7b:9d:1d:71:1a:d8:2f:71:5b:2d:93:44:56:e3:51:
06:d3:87:45:02:fd:d8:d1:10:42:de:2e:0b:96:cb:
73:dc:4b:9a:bd:6e:c1:92:7e:cd:43:b3:19:b4:d2:
68:c4:60:cc:d5:fc:e9:66:ad:35:bb:7b:30:0f:e6:
d9:77:7b:a6:c0:5f:8b:86:c2:15:93:e4:d9:36:16:
87:23:e9:19:a0:d1:96:34:8e:e4:46:c0:8f:c8:40:
e6:d2:0e:62:f4:8c:0f:58:07:00:51:43:ca:75:8f:
1d:40:39:e3:80:03:bb:5a:13:f3:4e:ca:a9:0f:2f:
84:8e:fb:26:a4:d8:66:74:48:83:d1:6a:eb:8e:79:
97:9f:90:6d:c0:0c:e6:6f:99:a5:06:c4:9a:00:c0:
fe:ce:b0:94:0f:89:31:d8:da:9d:af:2d:e0:c7:40:
ec:60:65:25:02:3f:dc:34:01:eb:e3:e2:73:4b:6e:
0b:0d:a7:29:61:31:84:0f:1d:8a:04:04:bb:88:b3:
e0:ce:f8:7e:66:ab:c1:4e:b9:e9:07:7f:71:0a:5e:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:F9:CF:6C:E9:80:2D:49:44:71:91:8B:FA:04:4D:C6:9C:90:F2
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:ac:3e:c6:b0:b6:3b:27:fd:f4:9e:9c:2e:cb:e7:dc:a5:
82:1f:ef:49:ed:35:c4:0a:0a:7d:02:72:b1:d0:90:1f:88:20:
ec:e3:b5:69:68:30:13:cc:cf:07:a5:d6:94:d2:50:9c:b4:77:
ec:e5:19:0d:b4:06:54:70:22:d9:35:3d:a6:02:67:2c:87:56:
d4:a0:f2:6f:0c:7d:c6:1a:fe:fa:57:7b:95:3e:91:04:d4:d8:
40:f6:b1:63:63:cf:da:98:d9:e6:6e:99:f6:f2:82:7d:93:af:
ab:f8:08:e3:d1:90:e7:23:88:69:b7:79:0c:7c:9a:29:ed:ee:
22:9e:0e:e1:a1:78:d0:37:8b:a8:77:45:8b:01:03:0a:02:6c:
0d:89:2e:d0:28:05:03:e8:05:75:4b:d8:9f:4b:be:cc:b6:32:
5e:5e:17:b6:86:27:5e:7f:97:b6:e8:70:33:d6:d3:b4:b3:c5:
10:a7:d2:d1:0d:5d:4c:78:a0:62:50:e6:1a:fa:91:3f:22:ba:
77:11:0a:6d:27:de:37:b3:a9:80:9c:6c:dd:c3:55:ba:64:76:
bf:9c:5a:7a:04:c3:42:17:e2:b7:fa:bd:18:7d:3c:2c:82:f4:
c9:5f:c6:00:f2:a0:cc:d5:42:31:3a:30:3c:8b:72:c9:9b:44:
bd:ad:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:53:02 2026 by rpki-client