
Error: rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File: kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier: XpTW+3WHYgID8cu3W128qUmd0cuyA1N8tFGNQGx+m7k=
Subject key identifier: E6:FE:56:C4:A1:82:8E:49:50:6C:E1:74:0E:4D:1C:29:5D:BF:34:7A
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer: /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial: 0316
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number: 0314
Signing time: Mon 26 Oct 2026 04:31:52 +0000
Manifest this update: Mon 26 Oct 2026 04:31:51 +0000
Manifest next update: Wed 28 Oct 2026 04:31:51 +0000
Files and hashes: 1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: FtDOFTJcUPE7f3KiFk7Akl6eTWKWV/NMpApG8CnvQVU=)
2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 04:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Validity
Not Before: Oct 26 04:31:51 2026 GMT
Not After : Oct 28 04:31:51 2026 GMT
Subject: CN=6aded7b8-e9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:ac:31:0f:cd:2b:84:42:36:ee:79:a9:dc:
46:33:20:e6:3b:73:d8:bf:db:83:47:b4:a9:a4:5f:
b1:42:23:ec:81:28:4d:ce:67:ac:3b:63:fa:34:6f:
c2:97:3d:9a:6e:23:b3:68:f8:a5:50:a6:41:97:19:
4f:8e:21:87:9e:28:71:a1:5f:2b:bb:f3:b5:85:ba:
45:3e:2c:6f:f1:45:6a:f5:d1:3d:63:ea:2f:78:78:
9f:20:37:31:a1:83:5d:68:54:a7:12:30:99:cf:1e:
8f:1e:c9:0e:e5:45:13:de:8a:07:c0:e3:de:c9:1a:
15:d7:28:97:0a:3b:21:af:cf:00:bb:fa:4f:3e:b6:
33:86:44:28:74:cd:2d:03:5a:0c:2d:7d:a7:8b:73:
ed:3a:7c:4d:d5:d4:fe:5f:94:d9:58:71:79:dd:69:
71:41:5e:5a:10:8e:2b:3b:52:e9:a8:9e:c8:a2:1f:
bf:65:d5:5d:68:1a:c1:5a:4b:dc:4b:b5:0f:07:f3:
d7:47:93:b7:5d:94:9e:f8:c3:83:75:0c:0b:b1:9c:
9c:aa:43:3f:78:fd:8f:35:82:f6:90:1e:08:9e:6a:
2c:36:2c:e1:67:ea:0f:8f:05:f2:48:87:db:2d:01:
f9:ef:e5:18:7d:0f:6f:2e:2d:0a:9f:10:d3:3d:59:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:56:C4:A1:82:8E:49:50:6C:E1:74:0E:4D:1C:29:5D:BF:34:7A
X509v3 Authority Key Identifier:
keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:17:39:62:b1:c4:cc:3a:34:25:9e:6e:ac:82:5b:70:68:
9a:c5:bf:69:ad:9d:ce:e7:d3:50:4c:36:d4:c6:2e:b8:d4:b2:
7f:02:e2:65:46:62:bb:61:f7:59:e9:d0:10:49:a6:fb:ca:d7:
b3:6b:73:cb:7d:bc:c3:1d:b9:68:b2:c4:58:c9:65:b6:21:2d:
c8:84:97:a7:39:43:67:6c:90:f9:2c:3e:a5:73:59:80:2a:1e:
9a:8b:d5:69:61:f9:81:97:4d:c8:df:2b:58:11:71:5c:dd:5d:
ca:ac:ea:86:84:92:93:bc:47:d8:d2:62:28:57:c5:68:df:59:
b4:00:60:c8:21:9a:df:b8:eb:f9:64:23:a9:2f:90:31:0a:09:
62:7e:81:30:6b:11:45:d9:8b:cf:5f:7f:c5:ca:44:7c:2a:23:
b9:d5:50:5f:9b:4f:0b:06:9c:19:65:25:23:16:cf:e0:16:46:
20:80:87:cb:fe:a6:38:b8:b3:17:aa:13:13:6d:c5:be:e0:6a:
cf:02:f0:0d:3a:56:b9:0a:94:33:82:71:96:d4:1e:ee:9d:f8:
58:ed:ba:bc:03:86:42:2e:6a:dd:aa:05:4a:28:97:e9:b9:de:
b0:14:0d:4f:ed:27:59:c8:a0:82:5a:39:30:72:9f:2b:02:cd:
c0:61:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:44:23 2026 by rpki-client