
Error: rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier: rs+qkIFmydVkouz2QpLRdkhj97RmqXWIMxaFyJFByUc=
Subject key identifier: ED:C1:35:E1:E4:CD:BA:89:A7:15:13:5A:16:24:90:F2:9A:5C:6C:EB
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer: /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial: 0328
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number: 0326
Signing time: Tue 27 Oct 2026 04:24:54 +0000
Manifest this update: Tue 27 Oct 2026 04:24:53 +0000
Manifest next update: Thu 29 Oct 2026 04:24:53 +0000
Files and hashes: 1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: Ktd9DbIFiCEzTOTVgFI3MrSu2MVSSfxsD8UO15EHoRA=)
2: 49D10B8AFB8411F085B74285DAE4EC9C.roa (hash: xN+oPTiqjHmtNSoRYq6a05dMRfGXblz8z65sbXo+yJw=)
3: 2E19ACFAFB7811F08E942FB9DAE4EC9C.roa (hash: BxJKHTfkRZri9Zx6qUjCr6DC+VJKH2KXb6afgCKVgm8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Validity
Not Before: Oct 27 04:24:53 2026 GMT
Not After : Oct 29 04:24:53 2026 GMT
Subject: CN=6ae02796-c27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:69:ba:52:55:91:89:31:03:e4:f2:fd:0a:
b5:c4:ed:27:ef:76:e7:50:9f:d5:52:78:84:08:14:
3b:24:39:93:48:f6:bd:59:e7:6f:33:81:82:c6:c2:
01:93:67:c8:08:f9:0a:60:e7:f2:42:bb:58:d6:db:
83:31:7c:f1:07:8b:33:4e:4b:db:bc:ee:58:20:60:
77:a0:cb:a5:ba:10:ad:08:95:f6:78:19:18:9d:c7:
70:7a:68:f7:e8:9a:8c:32:35:0b:e9:ed:d7:18:c8:
4f:35:78:10:11:9b:e9:ee:b1:cc:e2:e8:75:79:06:
f6:b5:c1:de:a7:d2:9c:58:31:a3:d7:a1:86:4a:e1:
9d:b1:60:b6:d9:e7:e3:ec:06:99:99:92:3b:ef:10:
38:28:94:d9:9d:1d:1f:f7:6b:96:b3:17:c0:79:51:
55:f6:0a:ea:ac:4f:b6:0f:b2:9f:48:aa:8f:22:e7:
2d:be:7e:85:35:8d:81:57:80:ac:9b:91:d3:f4:4c:
be:e9:87:65:8f:94:8f:cb:29:a8:9f:26:cd:60:1b:
70:a0:da:0f:58:ce:1d:aa:5f:4c:d0:08:df:fd:e3:
39:12:c5:71:f2:27:4d:92:3a:79:1b:87:c6:e9:17:
44:79:b6:e6:01:e9:10:97:8b:68:eb:4f:d8:95:96:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:35:E1:E4:CD:BA:89:A7:15:13:5A:16:24:90:F2:9A:5C:6C:EB
X509v3 Authority Key Identifier:
keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:11:05:bc:6d:91:93:73:d3:e9:80:b0:e6:57:8d:51:ff:
11:34:c1:99:ea:0c:21:0c:80:5e:07:1e:80:db:74:7d:b0:ce:
a8:7f:cf:6a:52:d7:d6:3c:ce:4c:21:af:0c:05:9a:96:65:64:
46:06:be:67:e3:be:c1:e9:0e:7e:83:f7:8c:99:9f:7b:55:cd:
38:2c:be:15:dc:8c:1a:44:4b:d6:1d:d7:44:9b:e6:13:47:28:
f2:67:a8:3b:1f:41:59:41:dd:d4:3f:66:6d:04:5a:53:36:bf:
d6:d3:0f:18:b5:8b:ed:5d:4e:7a:b7:78:a2:df:67:8c:76:7a:
c1:fa:ad:6e:73:bf:e0:5f:3d:44:0d:8d:e5:41:5b:07:de:01:
99:d9:59:a3:2b:fe:5e:d7:fa:05:50:a1:7c:8d:89:89:ae:34:
71:4a:32:d0:8f:4f:b1:f8:69:eb:78:21:8a:86:79:52:a0:38:
dc:6d:9d:ce:d3:86:7b:f9:96:51:c7:e9:34:27:8b:1a:2b:bf:
9a:d7:06:2c:35:01:b6:18:75:b6:c6:43:47:97:e9:17:e0:b2:
da:6f:04:7e:dc:ea:f8:ad:fa:47:8f:64:66:4a:7b:af:63:21:
9d:85:e3:79:db:a9:f0:11:54:2a:70:f6:8e:4a:59:63:48:8c:
f5:f1:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:45:27 2026 by rpki-client