
Error: rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
File: qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft (raw, json)
Hash identifier: VwdP48symN0ol6rU0a6OYvVIgDSMDoqbw4Qt5ZejCjQ=
Subject key identifier: B2:A1:63:2D:64:F7:0E:C1:38:94:14:91:79:A4:3C:7D:85:57:D0:DE
Authority key identifier: AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
Certificate issuer: /CN=F367F26DAF/serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Certificate serial: 0AF7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
Manifest number: 0AE0
Signing time: Thu 10 Sep 2026 01:19:16 +0000
Manifest this update: Thu 10 Sep 2026 01:19:16 +0000
Manifest next update: Sat 12 Sep 2026 01:19:16 +0000
Files and hashes: 1: qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl (hash: rMLs0VPVhKq9FryPDBLuyooufzBviQOXFxhMKPac1nM=)
2: 7CFBEB4A8FA211F08D1E5FBCDAE4EC9C.roa (hash: f8ypJFzZi/+69BhBnv9bsOOJoTGmoh2yg/JFPVO+hyE=)
3: 60610198296211EF83AE3D3D7DDC24C2.roa (hash: UBGAw16NrChSPv8tNag0KqvL7//5uXFEiv/3dqV73Kw=)
4: D9AFC14C980311EE9C9EE232D25BE465.roa (hash: 3wIsUAj1b7QA8gDWmN43Tp1fe+wx4WBvqsu3o9Runpg=)
5: 0B265DAC188C11F182BD24E5DAE4EC9C.roa (hash: rPML4O6c9gJBf9ETeEWqZZUxyMsY3h9ZYfoknsJWcPg=)
6: 20289B309D8511EF8A56A467762E951A.roa (hash: G5InreV+s/mDjPnREuW/+fXZ42uW0S7SWpUVDZ23oTk=)
7: B9D9790A188D11F1A76C66F1DAE4EC9C.roa (hash: D3fxaNYXkOtJlbnpVPUhYfvM/B3R+LggxDLRf4MdM3s=)
8: DD377C8CECC311EE9147A3C0775412E6.roa (hash: NLvAngBkDWgdSocM3OP6MpCBbIBTpSnwK++fJeiXNgI=)
9: E44691A42F3211F09C2DD1BADAE4EC9C.roa (hash: lrbHcWPiIcB8N+/jAI7IqmQFwQtonM2D4rkcMKVtlnQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 01:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2807 (0xaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAF, serialNumber=AB19964619FF85343CC091180673A8AC528610F4
Validity
Not Before: Sep 10 01:19:16 2026 GMT
Not After : Sep 12 01:19:16 2026 GMT
Subject: CN=6aa20594-7fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:1b:2b:54:db:54:79:9b:32:35:bb:4a:bf:
70:79:8d:df:4b:b8:2a:76:af:c5:fc:f3:2d:26:3d:
82:dc:5b:f2:6c:d6:27:b8:3a:5a:c0:a4:cd:ed:48:
6c:64:32:f4:a7:40:8d:a4:58:ce:a7:a0:40:11:e1:
55:48:fd:df:0a:c9:1f:9b:72:57:7f:15:3b:d3:40:
39:82:b5:c9:d3:92:0a:e3:77:d7:4f:f0:b9:c9:49:
b5:83:1c:fd:97:8d:1e:84:8f:9a:e7:6d:ac:78:b5:
19:ec:d0:0d:8a:2b:a2:99:19:b5:32:99:a2:c8:98:
82:d5:28:f9:c7:f8:fe:0a:13:d7:19:cb:3f:ca:a8:
1e:41:a5:74:cc:23:a9:c1:f7:0e:b3:73:cb:23:99:
9b:5f:64:6f:92:b4:ff:b9:c5:be:12:80:21:d0:b3:
1d:79:67:f8:7d:ad:08:b3:f9:8b:9d:14:46:0b:68:
86:c0:0b:17:5d:95:c7:bc:18:2d:a7:26:0f:78:74:
15:78:35:f3:e8:b9:ea:a6:bc:48:65:0c:1a:3c:8e:
22:2d:6a:9f:9d:11:4f:b7:53:54:75:d2:4f:94:01:
da:41:73:c4:55:91:1b:d1:7a:61:b6:7b:50:bb:00:
df:c9:e8:63:91:55:e3:98:e3:38:1c:2b:49:32:96:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:63:2D:64:F7:0E:C1:38:94:14:91:79:A4:3C:7D:85:57:D0:DE
X509v3 Authority Key Identifier:
keyid:AB:19:96:46:19:FF:85:34:3C:C0:91:18:06:73:A8:AC:52:86:10:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/2D5854E870B911E9B7123D3FF8AEA228/qxmWRhn_hTQ8wJEYBnOorFKGEPQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:08:bd:be:e8:5b:00:92:7a:b2:45:70:f3:5e:3a:55:db:
9e:ce:75:1f:05:4d:9b:45:d4:36:8f:69:8e:09:3e:85:72:a0:
b0:78:ca:33:5b:93:da:5b:73:3e:52:8e:e3:27:c2:a5:bd:b2:
7a:64:1a:b2:6f:cc:64:9a:ed:9a:7c:d6:76:64:e9:f8:df:85:
62:4a:a7:36:d1:a3:6b:b0:92:01:76:1e:5a:35:b5:8c:9c:1c:
c5:f0:db:14:a6:3b:bd:06:37:1f:cf:0b:4b:f9:29:44:df:78:
39:4a:e2:63:8d:a6:02:ba:81:96:3f:38:0d:81:c7:bb:d3:cd:
dd:d0:55:09:3c:88:a7:ef:9b:b9:49:5d:f8:c3:46:83:6b:67:
d7:40:76:e4:12:8f:85:24:ff:30:c9:5f:e1:40:43:26:c7:74:
cf:1d:27:8b:4b:5e:33:9a:65:a3:93:4d:73:19:b2:96:32:2d:
ed:05:e8:10:eb:ec:d3:23:48:53:a0:a4:57:3a:47:57:25:ba:
9e:0a:ac:3b:dd:c9:7d:7a:07:49:96:cc:1d:cf:c0:67:f6:dc:
7b:f3:69:84:f2:5a:20:30:8c:47:6f:4e:c1:82:b4:22:cb:a9:
b7:f1:bd:13:f8:fe:b2:8f:77:1c:2f:77:07:1e:76:71:c1:bf:
22:2a:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:20:12 2026 by rpki-client