
Error: rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
File: U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft (raw, json)
Hash identifier: 91UA1n+zRiu5TJPx7nrlP+lDLClirbE7WyvvxaTF8Ao=
Subject key identifier: DF:A7:4A:E3:91:A1:65:EF:C5:6F:76:D2:9F:10:09:05:3E:6B:DB:F2
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Certificate issuer: /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial: 0143
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
Manifest number: 013C
Signing time: Sat 24 Oct 2026 05:21:16 +0000
Manifest this update: Sat 24 Oct 2026 05:21:15 +0000
Manifest next update: Mon 26 Oct 2026 05:21:15 +0000
Files and hashes: 1: U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl (hash: Aqj3nUH17U2a1TnQdwDfuLZxeWCkvUk3MR5gUHDuJkI=)
2: 43279162FCEE11F091E2CFB7DAE4EC9C.roa (hash: 8iWAoEcu2JRkaSfW7LLNHzaA85uJseksE0k+atfwJ1Y=)
3: B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa (hash: +mmFwnc73ilgRHTfnv5GGjohhpC1WWGRkLfhPedgtjk=)
4: C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa (hash: TZxQdHMqwlzzmOZhgJdbZKKdEmkCcevU8yASkdu/7dk=)
5: 67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa (hash: 6+DDMWurPSS0Etmmbqp8HRbgnzyjgRHUp+NQ0zReDcs=)
6: F0F91352FCED11F0817BD9B3DAE4EC9C.roa (hash: HxbFOGVGICyK7Qo30yLsCkbUxYdMBBCg5Bv1Lkdl1sw=)
7: 79A2B826FCED11F08EBD8BB3DAE4EC9C.roa (hash: A6E21hHJIX9e6bqxV8HLjdqokAtD3hBxiXscbQoJ16Y=)
8: 1A762274FCEE11F0A39F6FB7DAE4EC9C.roa (hash: k3B8WZ+3jMO7LWbkb2rUTFFzzMA1baZgUheZKGM3Zb0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 05:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Validity
Not Before: Oct 24 05:21:15 2026 GMT
Not After : Oct 26 05:21:15 2026 GMT
Subject: CN=6adc404c-dfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:ea:05:18:f8:6e:aa:43:14:1e:37:98:68:
b9:54:22:1c:e3:f3:d8:94:3a:27:e6:0c:76:6a:91:
ab:c4:8f:bd:5d:9b:86:ff:44:36:17:30:f2:da:d4:
0b:29:6c:35:c0:b5:ce:da:42:c7:da:95:f1:8e:b7:
00:c6:bb:ef:03:47:73:42:45:10:f6:c8:dd:58:4c:
42:ba:ab:21:51:10:8b:3c:f4:72:29:74:34:72:af:
a4:2a:50:28:2b:5c:b9:e0:fd:a0:6b:b4:d8:22:3d:
78:bb:ea:43:44:18:ac:e4:27:53:7d:5d:1d:21:0e:
0a:20:ca:13:82:f1:48:33:90:e9:cf:85:87:e5:9e:
87:97:57:d3:5d:9d:76:e8:49:d5:c3:68:45:33:02:
ce:cf:b7:1f:3f:a2:f8:5b:13:77:fc:40:de:fb:91:
7d:73:b3:7f:2c:36:7c:b3:d7:d4:5f:4b:70:57:7a:
fd:7a:2f:99:47:f2:05:ba:65:98:37:c1:73:0c:0c:
22:f5:29:d9:6a:f2:16:09:d0:b4:6d:fb:d8:fe:4a:
fe:8a:81:57:e3:f0:e4:27:22:5c:9d:b6:ea:12:32:
be:c7:b1:77:b3:93:38:37:24:f7:74:d2:d3:e9:d1:
b9:3c:38:d0:c0:dd:13:50:cb:17:94:0f:ee:eb:5b:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:4A:E3:91:A1:65:EF:C5:6F:76:D2:9F:10:09:05:3E:6B:DB:F2
X509v3 Authority Key Identifier:
keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:74:e6:b4:90:99:d4:a9:d5:0c:65:3d:fa:8d:9a:fc:27:17:
11:6c:f6:65:3f:9c:fc:2b:fc:a9:8d:78:25:4e:89:60:16:32:
33:50:a4:38:fd:78:1d:7c:39:23:b6:82:19:91:71:9e:db:61:
3a:f3:d1:f0:a1:c0:c7:e6:72:5e:1b:53:87:6b:fc:97:bf:d1:
a4:7a:65:5a:61:9d:82:85:e1:0a:5a:54:61:ae:db:01:03:7a:
d0:0b:dd:a0:b3:12:f5:cb:a0:c1:09:96:9b:d4:80:22:67:96:
bc:ac:17:9b:c9:76:d0:5e:32:d5:e1:a7:3b:ee:df:90:93:b1:
d5:6f:74:25:a6:c8:53:35:07:b7:8c:61:d6:4f:e3:c1:c0:9e:
f6:e6:74:4a:e8:82:e1:18:2d:a9:af:6e:72:bb:14:d4:7a:2f:
95:06:4d:bd:6a:50:94:89:e9:57:70:c3:cf:d1:5c:93:16:14:
12:20:a9:ce:1e:8b:80:92:bf:64:89:68:7d:82:9e:fd:7b:97:
90:aa:3f:de:1a:f0:e9:cb:2c:d9:c3:4d:49:56:96:d8:92:85:
57:50:4d:69:4a:30:de:87:28:71:41:da:aa:5d:9c:c4:07:d2:
2c:2f:b9:11:65:9c:b4:b0:19:f9:4a:06:e1:20:49:c2:89:f9:
36:0f:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:55:28 2026 by rpki-client