
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File: ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier: ECCnJ18kZNJaFWcPU8otKuQfKHbwwJxAVAgH/bUjtHw=
Subject key identifier: DF:2C:47:96:2D:B6:0F:25:45:DB:1D:82:F8:C5:92:51:EC:A4:F4:D3
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer: /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial: 04A6
Authority info access: rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number: 04A4
Signing time: Thu 10 Sep 2026 03:33:28 +0000
Manifest this update: Thu 10 Sep 2026 03:33:28 +0000
Manifest next update: Sat 12 Sep 2026 03:33:28 +0000
Files and hashes: 1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: 29HVXIZI8IUJU+IrjxS56V8wu8sCNd8aAdlwBQVHH1U=)
2: 705538E8F23411F0ABE2AFDCDAE4EC9C.roa (hash: +jhpv0hpOYh5YDao9lohBm7A/3HpwqG1brbR9Ufglgk=)
3: 2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa (hash: Kw9yZHPeCDbD4dtkgjG9vBqQvYKkUDgIRAQiwyBUt8w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Validity
Not Before: Sep 10 03:33:28 2026 GMT
Not After : Sep 12 03:33:28 2026 GMT
Subject: CN=6aa22508-8804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:ae:46:46:79:ea:91:7d:f8:0c:68:fa:0f:
6d:b5:8d:0a:49:75:0c:68:a4:2b:39:44:f0:af:3b:
c4:a1:fc:74:7f:dd:61:4e:86:d1:ec:a8:c1:d8:10:
6f:39:28:5b:88:22:38:bc:91:e9:45:ed:af:fa:10:
c4:c9:2c:66:e0:2b:6f:e3:ce:a5:62:38:21:3c:09:
e9:d9:20:4f:59:3c:aa:db:a0:69:b8:e6:f9:97:39:
cd:fe:92:f7:5a:b9:49:09:21:88:fc:5f:4f:73:e8:
e6:16:d3:f3:3f:53:c3:4f:e4:21:1d:21:02:8f:ba:
fa:46:c5:9f:fc:d4:a2:c2:11:6c:29:8d:c9:12:c6:
24:b6:92:69:99:32:1b:60:78:9b:56:90:72:50:ea:
7f:c5:0c:e9:da:49:83:5a:ca:e9:c2:31:c9:b8:43:
34:7a:f1:fd:3e:86:4b:9d:1a:70:a9:24:cb:40:62:
84:20:b7:ae:d6:b9:fa:f9:62:69:0a:e4:42:f7:20:
98:bd:3a:1c:35:16:02:8c:1e:67:2a:c1:5e:82:c0:
69:4c:77:49:69:c5:8d:0d:de:fd:51:04:f6:db:ba:
60:9f:9e:c4:45:e0:cd:0b:fe:2a:2d:db:af:84:9b:
58:93:95:0d:6f:2a:94:67:25:ed:dd:9c:ab:dc:b8:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:47:96:2D:B6:0F:25:45:DB:1D:82:F8:C5:92:51:EC:A4:F4:D3
X509v3 Authority Key Identifier:
keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b6:f1:49:f2:f6:db:4a:09:9e:40:09:8d:fa:41:b9:90:82:
32:46:47:be:9b:4c:66:93:e9:36:e0:29:5f:bc:d7:de:a1:e9:
ee:89:5f:53:7d:64:c9:76:d4:47:a9:fa:51:29:78:7d:36:ed:
2d:f6:ac:a0:97:59:d4:ba:89:4b:64:56:33:a7:59:c3:8f:ca:
fd:fe:a1:94:b4:c0:6c:93:01:31:10:5f:ed:e2:23:65:e2:2c:
47:56:39:cb:4e:2d:bb:b8:91:36:90:db:ae:af:e0:b0:56:63:
78:d0:07:6f:c1:f9:ef:89:fd:f2:ca:83:8f:f8:df:e7:68:ed:
a9:1b:2b:ac:0f:ad:6a:e9:06:39:6a:16:75:88:cd:a5:7b:d7:
0c:b5:99:44:1a:cb:5e:1b:6b:4d:46:df:d9:ad:f8:c5:45:33:
77:0c:f0:99:bf:87:d7:7a:f8:a8:3f:86:70:fd:87:bf:b3:30:
ea:64:99:e7:a2:15:4a:52:bd:d7:87:8a:27:02:86:bf:04:e4:
78:f8:95:67:6c:66:bd:50:f2:da:04:31:6d:54:bd:45:74:e0:
97:41:85:6c:f5:04:dd:11:9e:97:5c:c9:21:a8:85:0c:cc:97:
85:3a:83:ba:70:93:cc:5c:34:46:d3:f6:02:45:ce:08:04:47:
1e:4f:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:28 2026 by rpki-client