
Error: rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File: zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier: XUwy2sM3UOCBwnvxXxn/KQ0rPzCDeOkav0kzqA4admQ=
Subject key identifier: 07:29:03:E2:BC:9D:C2:99:C2:C4:88:30:37:68:67:B7:36:8E:E4:35
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer: /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial: 0452
Authority info access: rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number: 0450
Signing time: Thu 29 Oct 2026 03:48:08 +0000
Manifest this update: Thu 29 Oct 2026 03:48:08 +0000
Manifest next update: Sat 31 Oct 2026 03:48:08 +0000
Files and hashes: 1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: mx3U23dZ0WErkD7nTg/Qz7xTAdp+TnkJTvmjgZbiQ50=)
2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 31 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Validity
Not Before: Oct 29 03:48:08 2026 GMT
Not After : Oct 31 03:48:08 2026 GMT
Subject: CN=6ae2c1f8-1f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:80:85:6e:2c:b4:fe:14:06:3c:8c:41:8e:
25:09:45:34:b2:f6:fb:f1:f9:66:68:99:96:00:e3:
c1:d9:8a:c2:a2:97:40:4b:b8:cc:24:52:5e:a2:60:
15:85:f3:4e:89:9f:6c:e3:e9:a9:81:bc:d8:af:ca:
b3:db:46:bd:19:c1:25:70:c2:63:2b:e7:ec:65:b0:
72:f2:e2:43:36:2d:a1:bb:cc:16:7f:7a:2b:64:21:
9e:01:d8:f8:a6:fd:a2:93:86:60:c2:cd:98:51:cf:
c7:04:6c:eb:25:fe:7b:a6:ba:4a:5a:ad:77:f2:c3:
d2:91:69:a8:e5:2a:af:5e:e2:44:11:eb:c6:7b:07:
34:7e:e2:43:6e:42:dd:86:1e:f0:03:f2:8e:95:65:
48:e7:db:7f:b4:2b:07:68:1a:01:fb:b7:d5:8a:1b:
f4:9c:58:74:b2:4e:12:90:98:c8:05:16:2d:13:56:
73:62:b4:e2:14:5b:04:35:54:90:16:c1:5a:a4:bd:
fd:ce:3e:a5:bf:ab:cf:74:b4:86:72:0f:5a:e6:75:
86:a3:f4:d7:15:b5:86:c8:24:b6:42:4a:4d:5d:b2:
a3:d3:24:fd:12:84:0b:4d:0d:b3:6b:ca:66:03:9f:
55:b8:01:ee:3d:6d:8c:06:11:86:4c:05:47:d1:69:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:29:03:E2:BC:9D:C2:99:C2:C4:88:30:37:68:67:B7:36:8E:E4:35
X509v3 Authority Key Identifier:
keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b5:5f:2b:4a:71:0e:99:f3:43:b1:5f:cc:01:a0:95:a0:46:
1e:97:9d:02:80:77:e3:ed:5d:a8:57:37:07:d9:43:8b:88:7e:
a1:34:b8:8e:0b:ca:a5:22:a8:89:07:de:17:96:4d:e0:58:81:
fe:41:99:2c:b4:fd:fb:97:22:f5:d5:62:d9:38:9d:0b:cf:7e:
ba:79:1a:02:3e:92:69:a3:02:9c:7b:eb:bf:53:ba:49:61:76:
88:db:49:6c:cc:65:62:68:78:13:69:a2:d7:e4:03:d7:ea:3c:
dc:34:fa:b3:58:5b:7b:58:70:99:9e:87:9b:3f:01:09:fb:30:
c9:0f:18:8d:f4:9d:b9:2a:0d:d3:e0:ed:5f:68:5c:50:ff:b9:
15:f1:2f:9f:7b:d3:fa:7d:8e:c2:3c:43:90:dd:7e:27:fa:52:
52:98:04:44:46:25:b7:21:d6:b5:d3:ea:e1:fb:74:9c:ce:d4:
12:70:a0:f0:1f:79:09:d6:4e:f8:a3:c7:05:16:9f:2e:64:2c:
1c:fd:d4:2d:f6:2a:66:4a:00:d1:a3:65:3c:fb:2a:45:93:6a:
75:ab:ed:fb:b2:74:1d:6f:89:a1:4c:ff:37:9e:14:67:e7:3a:
fb:1a:ee:8c:a2:19:4b:86:88:b9:73:e1:74:1b:6e:9b:8c:7b:
7c:82:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:59:50 2026 by rpki-client