
Error: rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
File: HWc407_GEdh98N50A9JdoPZOseA.mft (raw, json)
Hash identifier: xqhhX+5lO98m+Q5++cr3iHqJTLgqFSDKXSvyDHzSYKQ=
Subject key identifier: 45:04:FC:F0:90:F7:33:32:98:7D:5D:8E:C2:FD:02:4A:B7:5F:BD:23
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 02CB
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
Manifest number: 02C7
Signing time: Wed 14 Oct 2026 04:37:16 +0000
Manifest this update: Wed 14 Oct 2026 04:37:15 +0000
Manifest next update: Fri 16 Oct 2026 04:37:15 +0000
Files and hashes: 1: HWc407_GEdh98N50A9JdoPZOseA.crl (hash: p9K2tUEHFHgT6YmVWwqE/jesMaJvDpr1PpbT+4dterM=)
2: 315F293AEEF411EF81CB7343762E951A.roa (hash: V4KjGZgIPKcP1/MjXCNEypEICjJinDEh0PjdL2zARpk=)
3: 6B46698EEEEE11EF911C519D762E951A.roa (hash: Tu4GUApjh+qdeFTI+yn4KBIGDwp03a2AGvdYk9j0K9w=)
4: B68CCC76A68211EFA7605193762E951A.roa (hash: hVK4/Rx1S8B8kokV3evOakeSn1xgDl+NOOvc1/7Zypc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Oct 14 04:37:15 2026 GMT
Not After : Oct 16 04:37:15 2026 GMT
Subject: CN=6acf06fb-7064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:99:c5:bb:af:cc:57:01:aa:31:92:1d:04:
6f:ec:c2:fb:ea:08:12:73:98:e4:96:2b:b1:c6:8f:
b9:77:71:2d:60:e1:8f:bd:1c:b4:c6:34:23:84:bd:
84:db:93:b4:0b:4e:a0:7c:1a:53:a2:83:80:23:23:
08:8f:58:de:cb:d3:f4:ba:2f:df:04:71:9a:8b:62:
50:2d:cf:10:50:d7:26:78:b7:cb:cb:4c:65:8b:90:
44:d2:49:b2:92:6c:05:0f:d2:c1:a4:3c:ee:73:d4:
88:d5:b1:06:dc:e2:91:ef:3d:13:19:a4:5c:e8:33:
01:65:40:17:82:4b:9b:c4:cf:00:89:d9:a2:ef:83:
41:7e:fd:96:54:cd:50:a8:c0:9e:b8:22:f0:0e:59:
70:57:fd:ef:79:65:ff:78:bc:2a:08:d8:80:ca:6f:
c8:bd:3b:34:f1:ec:08:de:a2:96:53:27:9e:63:4a:
5e:3a:9a:7f:c8:b8:14:d4:a2:cc:29:e8:c8:0b:8f:
23:65:95:07:bc:2b:bd:5f:eb:32:4e:af:65:08:87:
53:52:f9:f9:d2:f1:9c:54:89:61:00:38:af:1a:d6:
17:97:4e:fb:6e:19:44:0c:2c:15:97:e7:32:9d:b6:
9e:1d:f3:54:16:8e:1d:6a:47:fe:db:5f:1d:0d:3a:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:FC:F0:90:F7:33:32:98:7D:5D:8E:C2:FD:02:4A:B7:5F:BD:23
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:5f:af:c1:c2:ec:bb:26:a1:26:3f:2a:fb:bc:d0:94:55:
10:38:24:cd:ac:53:63:f9:41:38:39:cd:c2:06:7e:db:79:2b:
07:24:fd:e8:52:ba:cb:ef:13:04:3e:70:8f:6d:db:4f:b7:17:
81:fc:b6:1d:af:6d:2d:35:23:63:fd:20:c5:74:91:89:14:2d:
45:29:ec:a0:e0:44:38:64:17:be:6a:15:39:47:5d:01:ba:33:
04:7b:85:c3:51:84:03:c2:6b:e3:39:2a:59:fd:9a:e2:42:2c:
04:0c:0f:3c:5d:08:6f:44:6e:61:d9:78:38:15:0b:23:58:a0:
c4:b8:9c:d9:df:6c:fd:ce:e7:2e:2a:d0:a5:48:82:3c:a8:54:
e7:a8:9d:01:54:b3:e9:82:94:8b:ac:43:e0:af:6c:43:98:d4:
20:e1:a7:1a:e1:8f:45:4f:8b:2e:fc:32:d2:bf:bd:d2:31:74:
49:d0:fc:4c:36:b7:13:c9:44:0d:69:68:c4:77:01:8a:91:eb:
2c:ad:59:22:0a:1d:7a:79:b9:cb:9b:22:1a:99:c7:0f:72:c5:
13:4f:15:45:76:f8:1b:96:2c:cd:e8:e7:7f:74:6b:a6:e6:2e:
98:bd:d4:14:29:51:fa:65:50:ba:11:1a:01:3c:66:f4:34:7b:
05:63:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:45:05 2026 by rpki-client