
Error: rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File: JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier: wEfUNC76xtMDH7Wh+M6d0Pm/5iOX1LHgyKryPyO4Aws=
Subject key identifier: 29:83:5C:CC:97:8C:7F:1E:82:5C:86:D2:9F:A8:ED:62:2F:43:F9:6D
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer: /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial: 0EEC
Authority info access: rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number: 0EE8
Signing time: Wed 28 Oct 2026 01:02:56 +0000
Manifest this update: Wed 28 Oct 2026 01:02:55 +0000
Manifest next update: Fri 30 Oct 2026 01:02:55 +0000
Files and hashes: 1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: CTtw0d3VCKoBCdnZdU8ScZtRer0DyZzVkU7QhXmH5jY=)
2: 4AC87CE0B11911F0830CDBDFDAE4EC9C.roa (hash: BbmEW7gIRevtuQq0qmlAx+V5iEy5gjhSfXPW6vQnAiw=)
3: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3820 (0xeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Validity
Not Before: Oct 28 01:02:55 2026 GMT
Not After : Oct 30 01:02:55 2026 GMT
Subject: CN=6ae149c0-c663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:d8:c1:b4:73:8e:5b:22:fd:d5:7c:e3:08:
c8:23:49:62:8e:cb:ef:b3:55:a1:96:9e:9d:88:fc:
f5:8d:95:ec:3a:c4:10:46:b7:62:f6:e1:33:06:24:
ac:ec:8d:19:57:ee:f6:17:33:7a:7a:1b:0c:97:46:
bd:47:bd:3e:ca:2f:05:3c:af:c2:05:2d:ab:be:d6:
86:ce:05:cc:ab:c4:03:d0:bd:05:31:5a:61:8a:3e:
9b:b8:df:80:b3:75:aa:85:3b:fe:db:a3:71:c3:8c:
56:b3:82:b9:10:c8:3f:00:fc:4b:bc:5c:66:89:91:
4a:ea:1e:19:09:70:85:d2:a2:85:96:e4:fe:58:e9:
f9:51:3e:90:4d:40:47:dc:50:c7:46:f4:bb:cc:8d:
dd:31:b5:99:8e:05:73:4e:0b:b2:10:e0:1b:47:0f:
7c:ea:c2:c0:d3:dc:48:7a:e4:86:b4:d3:1b:9b:4a:
fc:f9:f1:a2:9f:a6:d3:77:a0:7b:3c:c7:2b:4c:fb:
6d:10:04:73:89:bb:6f:38:99:36:08:75:fc:e5:e6:
9e:99:4f:33:c5:9d:06:d0:0e:0c:8d:05:11:9d:84:
1b:d6:db:b0:c9:67:9b:9d:62:31:71:dc:9c:e6:ee:
31:b9:0d:10:d8:d4:c1:03:83:fa:8e:2c:0c:48:cc:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:5C:CC:97:8C:7F:1E:82:5C:86:D2:9F:A8:ED:62:2F:43:F9:6D
X509v3 Authority Key Identifier:
keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:5e:02:21:a0:35:74:49:55:ad:58:77:b7:0c:d6:5b:b8:9f:
a9:46:cc:a9:3c:61:35:f9:37:02:88:ae:18:2d:b4:4f:7d:29:
b2:a2:24:2a:0a:e9:1f:ee:4f:ff:0f:59:31:16:c1:7e:69:ba:
d7:d3:53:b9:f2:d9:de:d6:6c:9e:36:ee:3f:af:de:d1:9b:d0:
5e:38:d0:89:37:21:41:e0:fc:18:56:cf:95:7a:e9:70:69:4f:
2f:e3:97:b9:b1:86:0e:f0:dd:f8:6a:c9:c8:9a:fe:7b:02:32:
e6:cd:5a:84:0c:7b:9f:4c:5f:16:89:1f:1b:f7:3f:6e:82:33:
7f:ce:b0:2a:8b:02:67:49:ea:31:03:58:01:5f:85:18:dd:70:
77:37:57:a4:d0:95:23:c2:95:4a:ec:63:2d:d9:c2:a3:c9:76:
ca:50:18:10:63:91:cc:13:eb:13:6e:68:e8:56:23:48:d7:bb:
ec:a0:34:f2:af:26:00:b5:65:89:40:fa:88:1f:cf:bf:00:4b:
39:c0:d9:01:0b:17:ce:8c:b7:40:04:a9:bb:ec:7f:d7:ec:89:
91:29:c6:93:6d:1a:e5:9d:3a:fc:57:74:c7:53:77:72:b4:47:
dc:42:b6:cd:95:a0:0d:a6:8d:62:04:73:84:09:48:b8:e2:c0:
b8:d2:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:49:41 2026 by rpki-client