
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: P9e4CmMy0/L+muIn+Fi9/Hv57snkGqGT270CWogwOIk=
Subject key identifier: A3:EE:B8:5F:38:E5:38:BA:F7:64:55:C3:15:3E:29:C9:1F:28:48:CE
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 04A9
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 04A6
Signing time: Thu 10 Sep 2026 03:33:40 +0000
Manifest this update: Thu 10 Sep 2026 03:33:40 +0000
Manifest next update: Sat 12 Sep 2026 03:33:40 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: /Kux8Je7r9rU2K/WtMV0RlqC6BdmMn1NE4Qzp2y9VEU=)
2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Sep 10 03:33:40 2026 GMT
Not After : Sep 12 03:33:40 2026 GMT
Subject: CN=6aa22514-b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:6f:c2:d1:49:62:18:c3:9a:d6:88:78:dc:
a5:c1:da:87:db:c4:aa:7b:d4:6b:f3:89:2c:75:5a:
14:18:4f:66:65:6a:f4:4a:50:4f:ef:58:b3:ee:f7:
8e:8d:1e:7e:58:20:41:c7:d2:44:cc:15:77:01:7b:
dc:f2:26:f2:bd:96:e5:32:0a:10:51:a4:ce:9d:6d:
e3:12:5f:9d:c6:19:d5:99:08:21:0e:71:d4:60:f1:
5e:cd:80:18:02:6d:eb:ad:04:3a:d4:00:9e:7e:be:
e8:fe:32:55:17:81:09:57:9b:b5:04:e8:cd:b6:fc:
4e:5e:d0:de:43:ba:db:46:38:ca:aa:59:1d:2d:e6:
42:f1:29:6b:4e:8c:ae:83:f1:48:2e:d6:94:5b:3a:
1c:3c:a2:52:77:37:60:b5:07:6c:d1:99:5b:1e:1e:
db:13:2b:2e:67:66:42:f2:d4:c8:63:77:40:07:fb:
01:94:2b:41:a0:cb:7c:b8:25:c4:03:43:73:25:31:
de:e7:a5:9e:37:1f:3c:aa:d3:54:e4:b4:62:d6:99:
6b:81:38:86:2a:43:c1:b1:dc:49:9d:88:40:b1:bf:
84:80:b8:2c:2e:f0:d2:c7:61:74:e3:46:f4:fc:27:
c4:53:b1:cc:70:fe:fd:b3:20:77:e3:60:d0:78:cf:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:B8:5F:38:E5:38:BA:F7:64:55:C3:15:3E:29:C9:1F:28:48:CE
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a3:31:14:a9:c9:8d:c3:b9:1c:5b:15:0a:a6:d3:a4:a3:28:
bf:ce:66:f3:e5:4a:a9:3e:7b:f3:4f:e6:90:45:b1:55:6b:9a:
c6:fd:02:8f:a3:fc:8b:26:8d:e2:6f:13:3b:b1:1d:b3:81:42:
ac:c5:ec:a2:c6:b7:c0:be:14:5c:84:53:f7:56:58:be:6f:ee:
4c:f8:c3:8e:45:fd:46:c6:33:ac:93:89:20:b1:b8:da:56:bd:
dd:ba:b9:42:04:14:13:9f:56:ec:97:2b:0b:bd:08:3b:af:53:
13:45:d7:ad:5f:1a:e4:01:77:3b:b3:1c:8f:a2:4d:e1:5a:d4:
08:44:57:d5:ef:df:37:3b:a5:c5:4b:d6:d4:16:07:60:e1:d8:
06:99:e0:49:1d:ef:c6:3f:cc:8c:30:c7:ef:cf:5b:e9:8b:86:
19:8c:21:e3:66:62:6f:a3:5a:85:92:83:83:bc:75:e0:c7:09:
72:76:77:4a:44:30:94:31:27:75:1b:4b:a9:80:4f:a9:bf:93:
b0:10:34:86:e3:c4:e4:df:51:48:00:94:52:1f:7b:7b:d0:c3:
40:fb:f6:9a:d8:ac:39:f7:a6:44:69:9f:a6:ed:3c:3f:e5:8a:
a3:ea:23:8b:35:ee:9a:ef:8e:37:cf:4e:4d:6b:fb:45:de:7f:
f0:c3:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:14:03 2026 by rpki-client