
Error: rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File: tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier: 9e8j1xkbkZr71RUl9YTj3hlCVH1SfmfeQOkRMU3L7sc=
Subject key identifier: F5:CE:E4:FF:B3:36:A4:3A:40:43:06:0B:3D:F7:5D:FC:E6:92:32:86
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer: /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial: 032A
Authority info access: rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number: 0327
Signing time: Wed 28 Oct 2026 04:24:41 +0000
Manifest this update: Wed 28 Oct 2026 04:24:41 +0000
Manifest next update: Fri 30 Oct 2026 04:24:41 +0000
Files and hashes: 1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: y8iLWpZEN4YHS/wFqAy4KKMe0NsamIIJf5YBqFguGW8=)
2: D4BB84D2FB4D11F0813767BCDAE4EC9C.roa (hash: 6orY5HDTrqcJDGgLrnlopPbVVmnOGIchGbKlp8nWwkA=)
3: E4F48340FB5611F0A42CE5F2DAE4EC9C.roa (hash: c43xolzw0tHDkUtxlVN9yifXJdNfipBBPwirCFEY2fE=)
4: A9F8F834FB5611F0A8B511EFDAE4EC9C.roa (hash: clMvWxZhI/yPXjk9yvhw+m8VCG7iFUmKLeS0+j0MYWg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Validity
Not Before: Oct 28 04:24:41 2026 GMT
Not After : Oct 30 04:24:41 2026 GMT
Subject: CN=6ae17909-605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:a5:c9:00:79:c3:10:4c:5f:aa:0b:77:26:
5d:cd:ff:15:2d:4f:60:eb:89:5a:d1:73:40:de:70:
a4:59:39:61:d5:f6:96:9f:1c:f3:2a:3b:a6:eb:95:
57:1f:98:3f:e7:fc:fc:dc:d4:dd:52:8a:0b:b8:22:
f8:32:3c:8b:97:7e:ab:c4:95:84:c0:c9:8c:58:f0:
ef:8c:40:ac:1c:ce:50:22:07:22:ba:3c:c1:79:50:
1b:12:6c:bd:12:0a:bd:ca:ae:ae:55:36:14:f3:d5:
53:d9:5d:ed:ee:f7:0f:73:85:64:5a:d6:d7:b4:10:
bf:33:c9:ed:7e:6b:fe:2b:9c:de:f2:18:76:b6:a0:
6e:04:c0:fb:a9:3e:2f:f7:14:39:5a:18:f7:e4:06:
14:da:d5:18:55:a5:f5:e2:52:1f:a2:6c:3a:95:86:
fb:01:c8:bc:49:1d:f7:b8:f9:d9:31:73:06:9f:cb:
c8:79:53:cf:18:a7:95:12:f2:b8:fc:2b:83:e9:94:
80:02:75:58:a9:40:d2:35:f7:9d:ae:0f:60:60:d3:
79:7c:49:ca:4e:0a:b1:53:5e:e3:36:43:cf:d5:09:
16:03:4e:de:9b:76:f7:8c:1f:4b:06:29:12:e5:14:
7b:fc:de:e9:7b:8b:6d:a3:89:0a:18:14:3f:a3:8f:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CE:E4:FF:B3:36:A4:3A:40:43:06:0B:3D:F7:5D:FC:E6:92:32:86
X509v3 Authority Key Identifier:
keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c4:f1:eb:a8:2f:a0:ae:b2:1f:98:ff:b5:db:bd:e5:aa:88:
cd:f5:5e:96:88:6e:56:0a:b7:b9:38:54:ea:38:9b:35:bc:e4:
a4:b2:43:6e:bd:e8:4d:24:02:8e:85:24:bf:63:50:7c:91:41:
09:13:53:d8:9b:bc:91:5f:c8:05:38:c5:eb:c4:9d:a8:e4:fa:
e3:01:ae:3b:6a:90:42:9f:b0:4b:9c:b4:e3:8b:38:71:8f:83:
18:26:16:07:33:f3:e5:6e:33:59:7f:d3:be:74:4e:1d:5a:a6:
0a:73:77:29:62:f3:05:4b:43:bd:34:04:3a:13:e9:66:b7:2a:
66:f9:a3:03:e6:57:b4:90:33:19:8a:9c:69:50:84:19:cd:23:
73:c1:5b:1d:20:59:0e:df:38:b4:29:b7:85:d3:9d:eb:81:c3:
52:f1:ae:39:14:1d:1d:71:d1:01:00:5d:bb:7e:79:bb:96:02:
1d:9c:25:d9:d2:f3:95:34:e3:33:5a:02:74:1e:61:48:eb:ee:
ba:ee:32:2d:f6:d3:58:74:a5:21:2b:20:3e:1a:a4:76:9b:4d:
30:e2:83:6d:d2:f3:a5:df:e7:b0:aa:ad:f7:9e:72:ef:e3:d1:
cb:ad:76:64:4a:60:fe:17:dd:85:ce:90:b4:2d:8e:dc:61:d2:
d4:8f:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:30:47 2026 by rpki-client