
Error: rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File: OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier: dgee1wNZ1AUDfgIwUB++EY5tZi6uItjk8OUZne3SPfE=
Subject key identifier: B5:C2:6B:90:50:1E:B0:8B:63:B8:3C:B3:2D:CC:78:92:F4:E0:0F:42
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer: /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial: 01D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number: 01D5
Signing time: Sun 25 Oct 2026 05:01:40 +0000
Manifest this update: Sun 25 Oct 2026 05:01:39 +0000
Manifest next update: Tue 27 Oct 2026 05:01:39 +0000
Files and hashes: 1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: X0t+D828t2MNIoFqFpHfh5dTaemE/tT2WuckhErLwaw=)
2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Validity
Not Before: Oct 25 05:01:39 2026 GMT
Not After : Oct 27 05:01:39 2026 GMT
Subject: CN=6add8d34-1ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:5d:d6:0f:3f:3f:b8:7c:32:22:b0:0c:1e:
09:c9:8b:82:9c:6d:36:5f:9f:f6:cd:e9:e0:d2:ae:
25:f0:d4:5c:72:34:3b:c7:05:3e:3c:4f:41:94:a8:
1e:bf:9a:cb:ef:ad:17:07:a9:bf:01:58:fb:7a:1e:
64:95:4c:db:c8:25:a2:ea:5a:31:f3:85:c3:b9:be:
1f:9a:2b:d3:42:86:0d:37:61:40:de:d8:00:ec:db:
3b:9d:2f:7c:8f:ed:2f:15:8b:5b:bb:e5:a3:71:18:
5e:2d:42:7b:7a:c5:7c:9e:34:28:11:35:cf:47:73:
64:68:4f:8d:a1:16:d2:0d:52:1e:45:e4:19:ef:33:
1b:50:dc:08:d2:d1:eb:05:fc:9e:e4:50:ff:1c:00:
03:8e:ec:91:f7:e5:df:0c:ff:86:87:76:b0:79:09:
cf:df:be:7e:17:2b:43:f7:5a:e8:89:8a:58:4d:41:
b0:28:b0:50:11:68:2f:e3:a6:73:a3:9f:f7:37:d0:
2f:ae:de:6e:66:d2:26:5b:b4:18:d8:6f:f4:99:2a:
4b:8c:7d:59:79:46:6f:3c:00:d0:c4:17:10:ca:7c:
cf:7e:76:fc:7a:96:bf:b1:6d:66:b7:37:d7:8e:52:
2a:70:bd:72:4c:f6:9c:ab:45:d5:39:a3:59:a8:25:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:6B:90:50:1E:B0:8B:63:B8:3C:B3:2D:CC:78:92:F4:E0:0F:42
X509v3 Authority Key Identifier:
keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:16:15:b7:7b:24:29:ac:e4:a4:cc:60:1b:a3:48:80:32:
51:df:ec:2d:d6:3b:9d:ab:f3:e4:1b:e6:53:01:fb:75:b7:5e:
73:25:82:9d:d4:1f:a4:2f:db:59:71:9f:a4:5d:75:ac:3e:6c:
14:3f:9f:76:95:94:fa:e7:56:d3:e0:f6:71:a2:a7:87:e6:42:
1a:2b:6d:b2:80:37:7e:0d:71:bb:74:f1:d0:ff:5a:19:ce:f1:
ba:5a:68:45:4d:1c:ec:8a:cb:18:79:c1:89:93:31:5d:94:61:
67:ef:2f:da:7a:11:98:d2:b7:92:1d:81:71:6c:fa:d5:2f:a2:
78:99:c0:f1:89:d8:cc:be:8a:57:dc:fb:4d:df:93:4f:34:0d:
af:a9:46:ef:24:c4:ab:a4:da:d2:07:b5:4a:ad:c0:1d:6a:8f:
72:3a:bc:8e:73:30:d6:f2:dc:83:be:9f:c8:be:fb:ae:0c:03:
30:27:a3:16:92:1b:d0:6e:9b:13:e1:eb:7a:bd:fe:8c:3f:92:
3a:05:0a:22:2f:6f:3d:bd:ba:bb:76:a9:8a:e8:2c:3a:fc:13:
43:d8:b7:77:c5:87:25:bb:84:0a:3e:6d:b3:0f:82:2e:ca:49:
91:5f:a4:fc:14:90:83:47:05:8d:dc:b4:63:6c:01:70:38:52:
86:ba:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:01:17 2026 by rpki-client