
Error: rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File: rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier: iA3XgpghY7uy9M+OVTm3FO4ahqRDp/iZrNUEy1yicKc=
Subject key identifier: 6C:7B:A5:93:A1:E3:F6:C3:93:48:3E:4D:0F:A6:22:6A:0A:80:9F:6B
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer: /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial: 0863
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number: 085A
Signing time: Sun 25 Oct 2026 02:01:10 +0000
Manifest this update: Sun 25 Oct 2026 02:01:09 +0000
Manifest next update: Tue 27 Oct 2026 02:01:09 +0000
Files and hashes: 1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: Qr1ROiQCvwLk/UZLJfXXFnb2Xlc5p53nyPOKDLJJZ1Q=)
2: 5F38F7AE8A4911F1800CD0B6CE1D38B0.roa (hash: U/HuiLZ6Sss66UBXOUZ9CTnCo40rL1oFrzun9Wg0tRc=)
3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
4: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
5: DA2A3F688A4911F1A419E0BACE1D38B0.roa (hash: Ae7lcvyzgbbhhsWy4rPPoyYkCHmjQBD2D56BJGDzKcI=)
6: F82C96028A4711F19641A3AECE1D38B0.roa (hash: XHS/PlTbJJf38vr8Lm2UbPHtd7t1vmvBVAYeHGDnxMk=)
7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Validity
Not Before: Oct 25 02:01:09 2026 GMT
Not After : Oct 27 02:01:09 2026 GMT
Subject: CN=6add62e6-7db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:68:9f:a7:c0:49:d9:ef:cf:ef:a4:b2:98:c3:
0a:7e:b8:7a:5d:6a:bc:68:57:1d:4d:39:3e:65:4f:
ad:39:a6:ef:b1:0a:ba:f9:82:ef:05:63:24:45:5f:
4a:88:41:0e:5b:84:aa:7f:f4:9d:7b:01:56:93:8b:
3b:be:fe:8e:e3:bb:e3:9a:28:9c:dc:3a:ee:42:fe:
a0:b6:69:0d:0f:c0:d0:42:32:57:7a:3f:ed:e4:2e:
1e:63:2d:03:a9:55:c0:e6:ac:ec:5f:a1:e3:40:fd:
9e:ab:bd:63:82:9a:36:f1:bc:26:63:ec:a3:8b:b7:
f9:c0:53:61:ba:81:40:c0:23:c1:4c:d2:93:8c:44:
60:65:70:e4:ea:c7:da:03:b3:5a:ba:5a:a4:a1:69:
77:d8:f5:48:22:40:70:4f:46:8f:14:53:40:e1:57:
9d:f9:91:ac:2b:d2:7b:d4:97:de:8f:8a:19:7c:c5:
2b:32:61:a2:da:69:7b:99:38:f7:b8:99:40:d4:91:
c0:77:f3:16:7d:1c:7d:1f:68:63:98:d0:60:04:e0:
95:aa:7e:3d:16:0d:30:d0:cd:45:e1:81:20:b4:c7:
95:8c:95:d5:2b:e7:ba:54:05:26:a7:55:3e:7c:79:
73:36:fc:48:5e:d3:71:a2:00:b3:68:10:37:8d:2c:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:A5:93:A1:E3:F6:C3:93:48:3E:4D:0F:A6:22:6A:0A:80:9F:6B
X509v3 Authority Key Identifier:
keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:36:13:76:96:1c:2d:40:99:5c:f5:fd:79:70:44:1e:4c:f3:
5c:e9:f5:69:59:32:bf:77:58:8b:e6:76:2b:8c:d9:e9:d1:58:
8a:03:e0:98:5e:e4:a7:7a:8c:30:3f:ab:e2:e2:18:12:c7:1b:
b8:ff:d7:bb:a9:05:0b:5c:4a:62:c9:3c:41:b5:b7:7e:3c:bc:
9a:40:f1:9b:87:1f:fd:8a:a5:a7:c9:98:01:d9:bd:0d:dc:3e:
c1:e0:ca:68:62:64:4c:fe:aa:cf:a3:22:50:3e:d4:1b:4a:c6:
36:d2:8e:d3:00:26:ee:a2:84:e6:46:67:b0:97:23:8a:e5:2e:
f4:44:dd:77:d0:f3:25:38:71:d1:d0:50:55:a9:71:72:15:a8:
5f:79:03:56:e1:5d:40:38:49:99:39:ad:12:b4:f9:9d:24:ec:
d4:d3:80:fd:a5:f1:5f:69:5f:70:2c:9b:dd:e0:7e:7c:7b:27:
5c:6c:b9:e5:ca:06:49:be:a5:a6:29:5b:e9:f2:16:f9:6b:6c:
f6:b5:ed:ce:fe:45:93:86:8d:16:ed:e3:85:79:20:22:4e:af:
60:dc:2e:b3:fa:3e:3d:88:1f:57:79:89:25:4d:27:f0:1a:25:
30:2b:9c:2f:aa:04:8f:59:bc:1a:dc:66:46:72:80:94:4f:11:
7a:de:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:05:05 2026 by rpki-client