
Error: rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
File: vN_wydKPGrRQYvSTuzVmysFCZG0.mft (raw, json)
Hash identifier: b25QOHXZ/ZkO0mmmPjDbvNkXsoVjr6Hh2D0coc7MlHo=
Subject key identifier: 76:D0:B0:A3:FD:D3:9E:3E:71:9E:C7:FD:DE:80:09:58:15:D2:17:5E
Authority key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
Certificate issuer: /CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Certificate serial: 0EE8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
Manifest number: 0EE4
Signing time: Sun 25 Oct 2026 01:02:47 +0000
Manifest this update: Sun 25 Oct 2026 01:02:46 +0000
Manifest next update: Tue 27 Oct 2026 01:02:46 +0000
Files and hashes: 1: vN_wydKPGrRQYvSTuzVmysFCZG0.crl (hash: hrDZXzJx7SkesiahOT2McFGXXOWqDMvD84fS+2QJcgQ=)
2: 5060B532B11911F0A511DFDFDAE4EC9C.roa (hash: m3tnQD+y8g5zm7h352wdDcvQa81e4C1vZsXhyLSMYMk=)
3: F7CE05E67D7A11EF88A9F065762E951A.roa (hash: CO1sEd4b6tDHp7VX2OHYT+QzzDJimiXxpvi4W3VBGpA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680C14AF, serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Validity
Not Before: Oct 25 01:02:46 2026 GMT
Not After : Oct 27 01:02:46 2026 GMT
Subject: CN=6add5537-7d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:bb:5d:73:4b:97:94:22:7f:7d:f2:f5:b9:
7c:bc:70:41:0f:02:89:66:2c:09:93:f7:f5:87:81:
c5:1e:3b:56:5e:76:a8:50:fa:44:6f:e5:15:2d:4a:
4e:c1:35:9a:7d:3e:09:bc:5c:33:4d:21:bb:0d:2f:
e6:be:b5:e9:53:8c:75:c7:18:fb:3c:7e:66:b9:3f:
c6:73:12:08:b6:ec:56:e7:58:d8:8b:aa:5d:4a:ac:
23:d2:e1:ce:26:be:1e:55:e6:a0:bd:d2:2a:2f:7e:
4b:59:25:bc:90:c7:19:9a:ab:aa:b2:9f:f0:98:20:
e8:a1:3a:0b:94:cc:40:70:17:32:f9:3f:49:1a:37:
62:a0:f0:cf:38:09:32:fb:9e:bf:b3:e9:63:5b:d5:
4b:b4:4f:59:1d:09:af:72:a9:6c:f5:ef:27:36:8d:
7f:7c:b0:13:35:b6:45:56:10:a0:ff:31:76:9c:bc:
02:9e:4a:27:46:5c:51:2c:a0:33:dd:5b:eb:72:8c:
33:0e:1e:b3:f9:1b:58:cc:bb:88:29:9c:a5:6f:14:
ae:8e:f9:42:cc:51:a6:b7:8c:e8:5e:4d:c4:3f:ad:
b1:d1:91:f9:f5:23:2b:be:f0:88:0b:55:dd:28:5e:
46:c9:b3:1c:32:f2:71:78:60:fc:76:f1:af:31:2a:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D0:B0:A3:FD:D3:9E:3E:71:9E:C7:FD:DE:80:09:58:15:D2:17:5E
X509v3 Authority Key Identifier:
keyid:BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:8f:7e:74:b1:3e:ff:fb:1d:46:93:57:1a:2a:a1:6d:32:
02:0a:d1:d4:68:b7:a3:3d:ad:fe:fd:31:27:2a:75:82:c6:c6:
08:f9:38:21:0a:71:d2:8f:16:96:5e:02:b5:6c:35:1b:c3:b1:
42:c2:63:9c:91:b3:bd:35:e1:b1:09:69:81:5d:50:30:f2:c8:
e5:95:32:05:94:0e:eb:fa:ae:2f:55:78:23:8b:88:c0:51:75:
f6:98:f0:0a:9f:9a:56:0e:6f:55:5b:63:f7:b7:f6:b3:0f:4a:
ee:9a:48:c5:0c:4a:0b:39:cc:77:e0:b6:28:b1:91:48:61:16:
7a:b1:a5:20:25:52:58:e2:81:14:24:2d:57:67:3e:f2:e7:b3:
4a:22:5b:67:a6:fd:ea:a7:c4:59:44:d8:66:99:b8:b9:42:94:
99:6e:fe:d6:0a:de:3a:68:3a:81:c8:83:c8:b6:6a:87:79:4f:
3b:0c:cf:4f:0a:a9:7b:9e:dc:00:f3:16:f3:8e:60:b3:4d:d1:
97:88:89:ac:28:45:c4:b8:a6:41:9e:33:ba:7a:f2:12:e2:8c:
44:29:b5:4e:aa:70:41:91:c4:b1:06:1c:ee:3a:2f:2d:7d:a0:
37:94:ea:22:07:79:4a:2a:0a:a6:3d:79:ac:a3:3a:ec:83:f8:
b6:c2:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:27:23 2026 by rpki-client