
Error: rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier: RfCGM3DB1bOdkXA5NjfjhlGZSCt+IeNZGZkQOOI5dcM=
Subject key identifier: F9:76:0B:B4:AB:41:91:FC:00:F7:FB:A5:FA:99:4A:13:95:70:AC:64
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer: /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial: 014E
Authority info access: rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number: 014C
Signing time: Wed 28 Oct 2026 05:17:34 +0000
Manifest this update: Wed 28 Oct 2026 05:17:33 +0000
Manifest next update: Fri 30 Oct 2026 05:17:33 +0000
Files and hashes: 1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: EiFVBNFMpSR9MwmuLHu3PPEDogzlTgwnZQKHFT783RU=)
2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Validity
Not Before: Oct 28 05:17:33 2026 GMT
Not After : Oct 30 05:17:33 2026 GMT
Subject: CN=6ae1856e-e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:0a:6f:93:4f:d2:43:5f:4a:9b:fa:91:db:
b6:11:78:8c:fb:bd:75:d5:6d:e3:0a:35:8b:93:cd:
cc:8f:6b:f6:c4:ae:39:46:4d:41:51:4e:cd:8e:00:
a3:35:17:e7:b4:fe:30:34:ec:b8:f9:07:60:db:9a:
f9:dc:8a:c9:b9:67:08:32:92:4b:d6:93:19:14:ae:
b0:49:da:3b:4d:16:25:9a:50:1f:d5:d3:e5:19:3a:
e2:f8:77:2d:8c:08:9b:9f:d0:47:ca:2f:49:44:36:
16:51:1a:2f:a2:72:d8:d6:3f:e3:09:82:53:08:25:
3f:4e:4e:53:38:ac:ee:d1:12:ff:72:97:80:4b:6f:
7d:df:eb:e5:c4:1c:ad:2d:69:c5:ef:e0:f4:e2:09:
8f:63:55:e4:cd:fd:0c:f0:07:54:f9:27:15:08:92:
dc:ef:e4:14:e1:4c:14:97:90:a9:48:b9:a1:41:ea:
b2:d0:91:0b:c1:c6:22:fe:4d:87:70:06:ea:62:21:
35:34:ed:0e:bb:97:57:01:73:a2:77:b1:62:90:39:
67:e1:56:f5:56:cf:97:90:61:af:f9:bd:0d:1c:8c:
5f:7d:a1:a9:f4:e6:57:7f:0a:64:b5:db:6e:b5:10:
66:89:62:4b:e0:5f:43:87:42:da:4e:92:ad:8a:16:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:0B:B4:AB:41:91:FC:00:F7:FB:A5:FA:99:4A:13:95:70:AC:64
X509v3 Authority Key Identifier:
keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:e9:5e:9a:ac:ba:73:47:79:bf:e2:53:d5:b0:c0:b8:4b:
4b:1a:52:96:aa:28:8c:01:ed:28:20:d0:3c:4f:df:e5:e4:8b:
b8:1b:a6:c8:3f:61:ee:9e:8b:b5:02:0c:5f:12:a8:21:88:8d:
d0:58:10:01:6f:0f:65:4a:6d:7d:a5:af:98:67:09:41:e9:92:
c0:7c:7b:3b:1e:0e:2c:8d:f1:e2:74:87:84:1f:d7:2d:e5:9e:
4e:15:78:26:2a:7a:78:f0:5a:89:1d:b2:ee:9b:0f:42:a3:9b:
ae:a6:af:bd:d4:09:0c:b6:19:4f:38:da:ff:13:60:58:98:c7:
93:d9:91:b4:22:67:7e:23:aa:19:cc:86:6f:1f:64:5d:95:39:
ee:e6:81:1c:df:1e:d2:60:36:04:83:1a:b4:00:63:8e:a4:90:
42:90:d5:3c:39:14:46:0d:9b:5f:3e:94:bf:71:76:38:8d:f8:
a1:3d:d4:93:a5:27:ac:61:69:75:af:7e:d8:e3:39:db:dd:72:
8e:0b:5a:fc:06:de:e9:5e:6d:b1:39:7b:f1:29:65:41:a8:68:
10:c7:cc:c8:b9:81:a1:5b:c2:78:46:9a:94:db:3c:9c:e5:9e:
ec:fb:0d:f0:81:ef:55:6e:02:13:d9:3d:39:40:b2:e5:52:5a:
84:be:e5:55
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0NDNjhBUjExMC8GA1UEBRMoQUNBOUM5QkVCQkU4RDA5OTdDMDY0RTJGQjM4RkZF
MjlCMzk5MDczRDAeFw0yNjEwMjgwNTE3MzNaFw0yNjEwMzAwNTE3MzNaMBgxFjAU
BgNVBAMTDTZhZTE4NTZlLWUyZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHDQpvk0/SQ19Km/qR27YReIz7vXXVbeMKNYuTzcyPa/bErjlGTUFRTs2O
AKM1F+e0/jA07Lj5B2Dbmvncism5ZwgykkvWkxkUrrBJ2jtNFiWaUB/V0+UZOuL4
dy2MCJuf0EfKL0lENhZRGi+ictjWP+MJglMIJT9OTlM4rO7REv9yl4BLb33f6+XE
HK0tacXv4PTiCY9jVeTN/QzwB1T5JxUIktzv5BThTBSXkKlIuaFB6rLQkQvBxiL+
TYdwBupiITU07Q67l1cBc6J3sWKQOWfhVvVWz5eQYa/5vQ0cjF99oan05ld/CmS1
2261EGaJYkvgX0OHQtpOkq2KFkJvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU+XYL
tKtBkfwA9/ul+plKE5VwrGQwHwYDVR0jBBgwFoAUrKnJvrvo0Jl8Bk4vs4/+KbOZ
Bz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdDQzY4LzZBN0IwMTY0RDM1RDExRjA4OTlFQTU5N0RBRTRFQzlDL3JLbkp2
cnZvMEpsOEJrNHZzNF8tS2JPWkJ6MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JLbkp2cnZvMEpsOEJrNHZzNF8tS2JPWkJ6MC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0NDNjgvNkE3QjAxNjREMzVEMTFGMDg5OUVBNTk3REFFNEVD
OUMvcktuSnZydm8wSmw4Qms0dnM0Xy1LYk9aQnowLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwXelemqy6c0d5v+JT1bDAuEtLGlKWqiiM
Ae0oINA8T9/l5Iu4G6bIP2Hunou1AgxfEqghiI3QWBABbw9lSm19pa+YZwlB6ZLA
fHs7Hg4sjfHidIeEH9ct5Z5OFXgmKnp48FqJHbLumw9Co5uupq+91AkMthlPONr/
E2BYmMeT2ZG0Imd+I6oZzIZvH2RdlTnu5oEc3x7SYDYEgxq0AGOOpJBCkNU8ORRG
DZtfPpS/cXY4jfihPdSTpSesYWl1r37Y4znb3XKOC1r8Bt7pXm2xOXvxKWVBqGgQ
x8zIuYGhW8J4RpqU2zyc5Z7s+w3wge9VbgIT2T05QLLlUlqEvuVV
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:49 2026 by rpki-client