
Error: rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File: XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier: 0fv8pBbL8x5/ndD/kEnYzCuNcrpz4BPVt+ZcFXuHsos=
Subject key identifier: 20:7F:E8:04:62:1E:75:50:A5:17:F5:E2:B0:F8:27:CE:DB:B7:36:D5
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer: /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial: 09A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number: 099D
Signing time: Wed 28 Oct 2026 01:44:30 +0000
Manifest this update: Wed 28 Oct 2026 01:44:29 +0000
Manifest next update: Fri 30 Oct 2026 01:44:29 +0000
Files and hashes: 1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: TUeeotgW/zGQNSi9LdL5zLBpr5g512ClwXNOme46yX4=)
2: 77D590F096FC11F1A67B51E1CE1D38B0.roa (hash: N/uAtR74JfNpLcsvPKuPQbec3Fmc8dUXoAgKh+1azoE=)
3: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 01:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Validity
Not Before: Oct 28 01:44:29 2026 GMT
Not After : Oct 30 01:44:29 2026 GMT
Subject: CN=6ae1537e-7512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:4e:f9:04:da:9a:c8:cc:81:7f:a8:ed:93:
df:6a:ca:93:d9:9c:5e:68:27:db:51:d9:94:33:3a:
d5:b0:8c:dd:7b:d6:8e:be:f6:33:29:80:45:7b:91:
b4:84:64:81:82:f4:52:86:2b:ed:19:c5:05:a2:4f:
4d:7c:be:d0:49:e2:7e:1b:24:12:60:6d:54:28:df:
5e:3e:4c:46:57:fa:89:4a:e1:30:17:8f:f3:9c:7e:
93:c1:e2:2e:ef:f9:f3:6e:7b:21:66:ef:83:ac:bb:
24:dd:34:5b:7f:07:1d:80:c8:72:b1:f0:41:6a:3b:
55:34:87:a5:a8:ed:f7:a4:7f:f2:c4:d3:b6:6d:30:
0b:27:0f:c4:0b:3b:60:b6:a3:52:7e:82:68:a5:c9:
52:b6:13:07:a4:7b:d3:b3:58:86:1d:85:cb:fc:04:
5b:d9:a0:96:1a:bb:05:00:b7:59:0b:99:c6:48:bf:
36:bc:b2:5e:af:bd:3a:c6:19:73:cd:da:15:9d:6d:
3a:7f:d4:58:35:fd:99:63:7c:57:79:15:cb:5e:f6:
14:25:4a:74:02:2e:3c:38:27:7d:1f:52:c7:22:54:
54:65:09:7b:1a:39:d1:5e:39:4e:10:6b:4f:64:b8:
ba:c6:02:b9:de:b8:7d:09:c9:15:b5:57:f4:b6:3f:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:E8:04:62:1E:75:50:A5:17:F5:E2:B0:F8:27:CE:DB:B7:36:D5
X509v3 Authority Key Identifier:
keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:87:27:40:ce:5f:18:40:62:cf:7a:95:af:8b:02:21:e6:cd:
49:d3:ff:e6:b8:15:c3:7e:97:df:a4:89:94:b1:a7:f6:3c:c8:
b4:e9:bf:27:0e:19:bd:61:61:29:2a:05:6f:75:da:5f:12:3a:
d0:a8:93:b4:f4:54:b0:ca:8d:a1:49:25:2f:f8:6a:bd:d2:74:
87:80:d6:84:f7:3b:40:97:0f:f3:be:f8:cd:80:f0:9f:ce:ef:
c9:b8:ad:1c:90:5f:8a:03:2d:4c:c7:a3:41:cb:81:07:66:69:
1c:79:2a:2b:9b:8b:7c:e3:c9:77:1c:bf:40:67:5c:7d:e0:91:
af:3a:2f:4a:b9:b2:96:36:44:b8:55:80:5a:c6:d3:59:57:7f:
30:51:2e:13:1e:e8:bb:31:1c:cd:1f:91:6b:63:58:de:56:64:
ed:34:d1:8c:f9:0c:46:46:d4:02:c2:cb:b2:92:ab:04:78:c2:
a5:63:09:14:f3:a9:c5:e1:e5:18:d7:c8:f3:29:41:63:d8:17:
13:cd:10:40:2d:95:22:0e:b6:57:2a:93:06:8b:d7:31:e6:98:
39:e8:48:dd:5f:6b:99:b6:f0:f3:1b:85:b0:d2:e0:87:f3:aa:
ef:8f:25:e6:be:79:15:71:5d:9c:10:92:08:b6:3a:8b:18:35:
b4:ef:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:35:05 2026 by rpki-client