
Error: rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier: bsdRUsepkWl9DHgHbESrAu/oq8CNJDmiQBbx4jCJpAc=
Subject key identifier: 97:DF:30:FB:A9:52:2B:BF:EE:FD:95:77:26:F9:8C:DA:22:F5:CD:CE
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer: /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial: 0776
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number: 0772
Signing time: Sun 25 Oct 2026 02:24:53 +0000
Manifest this update: Sun 25 Oct 2026 02:24:52 +0000
Manifest next update: Tue 27 Oct 2026 02:24:52 +0000
Files and hashes: 1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: gaXekL6UWbUpxdoGrdq7zpzl9dKJJ8snhVecy7Ict40=)
2: 41154872962911F1979923DACE1D38B0.roa (hash: 5lt3Yq+7+mrDu7Rgxl913ugiuhww8fYeSDHdmofrW5s=)
3: BE375CAA962911F1878869DCCE1D38B0.roa (hash: Y3X1SBiD4AkB1iF8TfEGnqcGwMoyf7vwpW8s0D8Pl5I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Validity
Not Before: Oct 25 02:24:52 2026 GMT
Not After : Oct 27 02:24:52 2026 GMT
Subject: CN=6add6875-1f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:ec:23:67:7b:f5:c4:43:20:cf:01:6a:f5:
94:28:c8:f5:96:2d:6b:26:4b:90:63:d4:cd:06:e1:
11:4e:c9:bf:42:b6:a6:33:b0:7c:97:bf:da:20:4d:
73:f9:ab:19:b7:ca:88:11:87:4f:cc:ef:d2:e5:1c:
f4:ab:72:72:1f:6e:ab:f2:89:e0:dc:16:ae:08:8c:
e3:7b:4c:2c:59:f1:e5:ef:be:df:33:7e:13:84:4c:
5e:d0:b0:77:64:0c:6e:82:db:5d:25:ee:6c:87:c2:
c8:8c:37:a6:39:7f:62:54:3b:42:30:1b:16:34:39:
d8:5c:0e:e8:69:c6:11:2d:b9:b7:d5:29:40:8c:26:
a4:96:20:37:c5:b6:7b:13:fe:4a:a5:1b:21:97:43:
49:ec:08:40:12:9c:6b:ce:2f:18:00:ca:3a:98:09:
3b:e9:68:60:8b:38:12:92:f6:55:34:f9:e8:3e:80:
40:73:cf:48:aa:2c:59:c4:17:92:23:4a:28:0e:e4:
e7:e0:12:a5:dd:d3:e1:a6:ae:34:f1:dd:54:89:5f:
c5:d4:d3:b8:e0:87:31:b6:a7:2f:24:e4:0e:aa:62:
cc:9a:c1:b9:bd:4e:94:09:37:8c:ae:1d:19:a4:f9:
bd:0e:ab:31:d4:63:28:c6:61:3a:74:cd:3d:e0:5c:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:30:FB:A9:52:2B:BF:EE:FD:95:77:26:F9:8C:DA:22:F5:CD:CE
X509v3 Authority Key Identifier:
keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:09:f5:24:fb:16:93:89:f2:6e:ca:1a:2f:b0:4e:1b:b6:40:
fb:47:d7:f6:c7:3d:44:b0:94:f8:2c:dc:0c:e5:1f:2b:ca:58:
38:b4:15:49:aa:86:35:90:a5:37:00:a7:ac:0e:40:7b:74:82:
b0:d8:a9:8f:ec:79:b2:c6:5d:bc:92:f6:c4:81:56:c5:f1:e4:
47:9c:b9:2f:09:bf:1b:78:9c:85:8f:f3:db:33:19:a6:35:43:
0b:af:00:e9:4b:59:b6:ff:60:98:be:ce:07:bc:36:12:1a:69:
89:0d:5a:68:76:8d:b9:a8:1f:f4:4c:8f:08:8b:25:0b:e6:2a:
38:68:f7:70:62:bd:a7:9d:6c:b6:13:b0:1f:bf:7b:14:10:1b:
a5:e3:ed:75:98:dd:26:7e:99:fa:92:5a:2b:2b:0a:c5:0d:78:
9d:cc:a9:64:01:9e:ff:af:53:c7:c7:f2:68:33:f6:2c:b5:45:
2f:ff:b7:d0:01:00:e2:a8:47:b3:c5:a9:dd:97:5f:4c:b6:a4:
f0:df:cd:59:90:12:25:55:8e:32:c8:1e:a3:54:b5:46:a7:46:
13:ee:8d:dd:d4:d5:c5:4f:07:24:20:f7:fb:c1:14:bd:d7:58:
f1:5b:f8:a3:a3:a2:ed:55:d3:99:ee:17:eb:c0:01:25:6f:80:
cc:27:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:54:29 2026 by rpki-client