
Error: rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File: ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier: QVYakgI4/lN+dDtIJ2Pl3vDTG4NUNoUXPK6LdgMtJRw=
Subject key identifier: DC:BC:B6:79:81:BD:14:8C:92:3B:9C:1F:29:F1:35:1B:E8:2C:9C:45
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer: /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial: 05B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number: 05A7
Signing time: Thu 29 Oct 2026 03:07:06 +0000
Manifest this update: Thu 29 Oct 2026 03:07:05 +0000
Manifest next update: Sat 31 Oct 2026 03:07:05 +0000
Files and hashes: 1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: N3OeXfBbEpUwUk3DBbosikQmaFam/IibyzX25yTRk60=)
2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 31 Oct 2026 03:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Validity
Not Before: Oct 29 03:07:05 2026 GMT
Not After : Oct 31 03:07:05 2026 GMT
Subject: CN=6ae2b859-ec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:08:4e:4c:a6:94:0a:4e:74:a2:72:5b:47:
17:54:26:39:53:05:98:d0:4f:cc:33:88:b6:17:d1:
b3:8f:43:76:bc:09:64:dd:9d:b5:de:8a:30:62:ae:
00:31:bc:26:1f:10:dc:e7:73:c5:61:44:8f:d4:19:
7d:d0:0d:9d:4f:7f:ae:9b:a5:ca:76:21:d2:ab:d1:
46:94:2a:b2:a6:33:be:08:9c:b6:67:fc:88:53:3c:
3e:69:cb:70:b2:aa:02:b5:ae:b3:0e:8b:a4:95:9b:
4a:27:ac:cf:0e:c7:cc:b5:fb:39:3d:18:3c:45:32:
92:ff:05:9b:c7:db:c2:09:8b:3a:ca:0c:88:61:78:
21:a2:25:b9:dc:d2:48:ac:05:ec:de:c2:41:21:5c:
29:23:08:33:c4:0e:b6:04:7e:23:66:6e:6d:52:6c:
56:29:4b:ac:ba:59:89:45:79:b5:9c:1e:8e:d5:8c:
55:8a:01:bb:71:db:c3:2f:77:82:0e:12:1a:e0:ad:
cc:84:8e:6c:da:e3:a2:31:7c:24:ce:a6:96:73:d6:
ce:86:b7:6f:04:c9:ce:ab:19:c3:d9:1a:ee:6a:d7:
05:ab:87:03:82:40:82:f6:fd:e4:3f:aa:eb:d9:d4:
df:3f:97:03:be:b4:8b:44:88:1f:31:90:23:0e:3b:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BC:B6:79:81:BD:14:8C:92:3B:9C:1F:29:F1:35:1B:E8:2C:9C:45
X509v3 Authority Key Identifier:
keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:ea:d3:7d:86:a8:64:75:d1:f9:6e:d1:be:0d:b1:13:97:
9f:e0:8e:56:9d:db:1d:cb:01:0b:24:37:68:32:a8:28:09:9a:
9e:91:7e:bc:c7:8e:97:c4:46:40:f9:94:83:cb:0f:af:de:d3:
71:9a:be:56:00:10:58:f5:e0:4c:6d:97:3e:77:9d:73:84:78:
ce:bc:21:68:08:93:e6:97:e5:bf:4e:5d:46:fa:e8:04:e2:ee:
10:36:88:8d:fe:47:c0:01:fc:54:52:15:5c:4d:b4:51:42:51:
66:f4:9f:ca:c0:eb:67:19:2f:5d:32:b9:a2:e1:45:80:8f:10:
6b:bc:a2:f5:a6:ad:78:76:f8:87:f2:33:c0:f8:44:21:14:5c:
79:52:ec:d8:0c:0f:77:a5:8a:4e:48:9f:4c:a5:40:d6:25:bc:
ab:4a:7b:de:45:8d:a6:f2:1c:e4:63:93:2f:24:a9:8b:9b:ff:
bd:4f:a7:48:c7:7c:5b:b7:27:83:fd:d1:84:20:3e:21:7c:61:
5d:67:cf:26:1d:7f:ef:fa:17:c8:26:56:5f:f4:6b:8a:49:a4:
0c:4d:8f:63:a2:dc:e0:be:22:4d:4a:4c:7f:df:bc:93:b6:83:
8d:03:5a:43:5f:ed:1a:8a:a0:d4:42:12:ef:9c:dd:dc:9c:2c:
00:1d:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:16 2026 by rpki-client