
Error: rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
File: d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft (raw, json)
Hash identifier: bvhQsr73UBIauXhUjhYkVqItKKmbMzjM7QfukfVwq1E=
Subject key identifier: 0E:9C:63:08:E3:79:37:E5:3E:83:6A:2D:DB:D5:90:F0:1A:75:48:0F
Authority key identifier: 77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
Certificate issuer: /CN=F367FC8BAF/serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
Certificate serial: 04BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
Manifest number: 04BA
Signing time: Thu 10 Sep 2026 03:30:52 +0000
Manifest this update: Thu 10 Sep 2026 03:30:52 +0000
Manifest next update: Sat 12 Sep 2026 03:30:52 +0000
Files and hashes: 1: d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl (hash: 5MbpzH2v9DjbdWirg3vU1s7PAUTJYVpJ94wfoAjU/7s=)
2: 5441A5BA3E8F11EFB89E8F87762E951A.roa (hash: 4xIis8gARgaPEKIucmwJRXfmQHw2+Pjv/MDW5gWNjgE=)
3: D163C3CA3E8F11EF8DD4EA8B762E951A.roa (hash: Lkyx7ebIaCWwNF9O0UmMDuhIt39SWodpuHBtJiZV85g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 03:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FC8BAF, serialNumber=77412D7CC1053CE19D379CCC6007B925A1E74CA1
Validity
Not Before: Sep 10 03:30:52 2026 GMT
Not After : Sep 12 03:30:52 2026 GMT
Subject: CN=6aa2246c-80c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:4f:4f:b3:2d:23:32:85:cd:e2:38:4b:86:
b8:16:f8:34:3d:df:5f:8b:2a:f5:72:80:29:d8:3f:
5d:53:cc:02:78:0c:23:52:89:88:f7:fc:fd:ff:8b:
45:f7:00:41:98:a8:1f:18:e8:a8:ac:dc:7e:d1:26:
e8:fa:a0:e9:dc:57:8f:4f:3c:d4:09:1c:51:ea:e5:
f0:ad:61:af:af:34:e1:13:40:9f:b3:12:b5:92:65:
33:43:85:59:4e:47:ea:ec:30:97:02:f4:f3:23:70:
56:0d:42:eb:ae:36:0b:bd:79:61:4f:50:f0:12:96:
f1:21:23:67:47:27:7f:11:ec:31:c1:e4:ec:ea:d1:
e4:08:c1:ef:8c:0b:6e:6e:72:95:8c:52:6d:e4:df:
2d:97:a9:a8:0d:54:21:51:26:1a:12:1b:9c:95:f9:
b2:fc:44:91:0a:d2:b2:d8:37:e3:a5:a4:8a:e8:09:
e4:a5:30:98:81:14:d6:f4:1b:61:97:2c:d4:42:d8:
cf:83:eb:50:2b:3b:22:c2:0e:94:e9:de:1b:61:4f:
2b:96:9d:94:5f:8e:bf:bd:e0:fd:c5:6d:f4:e7:e6:
46:22:cd:c9:8b:0b:36:c4:e6:5e:ac:97:60:07:78:
57:73:a0:af:77:89:77:99:75:68:77:3e:18:ef:36:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9C:63:08:E3:79:37:E5:3E:83:6A:2D:DB:D5:90:F0:1A:75:48:0F
X509v3 Authority Key Identifier:
keyid:77:41:2D:7C:C1:05:3C:E1:9D:37:9C:CC:60:07:B9:25:A1:E7:4C:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/d0EtfMEFPOGdN5zMYAe5JaHnTKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/7B5474960EA911EE99CD2B764AD9E6FC/d0EtfMEFPOGdN5zMYAe5JaHnTKE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4f:c8:d8:40:30:44:2f:79:b5:3d:20:9d:17:e8:8f:20:78:
54:31:77:36:46:58:b0:4f:03:ae:88:87:47:e4:98:6b:f1:0f:
28:2f:cb:93:ec:59:81:13:5e:f1:7f:a7:f9:04:a2:96:46:d4:
7e:8c:e3:c6:6b:c7:ae:4c:60:0c:ea:0f:d0:fc:a3:32:29:0d:
b4:16:78:8f:37:8e:3e:66:68:fd:70:a1:0e:42:e7:99:82:80:
be:e4:35:c9:c8:70:23:8c:70:aa:23:69:e1:93:ce:0a:1a:70:
ab:a7:e3:08:cb:01:bd:c3:32:da:ff:ed:56:59:13:bd:4a:c6:
28:ea:67:0e:31:04:61:ab:35:d8:f9:68:cf:8e:c9:7d:75:06:
45:ac:ea:bd:92:8c:ed:ef:3e:23:2d:3e:fe:53:c9:44:f9:b9:
ce:ec:2a:16:a4:20:b5:1d:b8:01:64:ec:8d:ad:09:4e:19:7c:
a4:da:b8:1b:b2:60:2c:77:4f:c2:26:96:78:ec:ca:3e:46:b2:
5b:c1:23:c6:e9:c2:3a:d0:41:81:f5:1d:fa:20:34:a6:e3:02:
fe:e6:e5:e7:4f:00:a8:2c:19:e2:ac:ea:55:08:b2:f5:1a:02:
64:66:17:2b:6c:b5:cf:1f:d5:8a:cd:84:45:d2:42:d2:96:34:
60:24:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:00 2026 by rpki-client