
Error: rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File: wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier: vTRmlfnqhRZvNa2AvpA+b9BmQ+IH0r9IY2rUdApkoYQ=
Subject key identifier: E1:A5:7C:2D:28:77:39:19:24:DC:DB:9E:9C:E8:F1:C3:C2:4E:C5:E6
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer: /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial: 05E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number: 05DC
Signing time: Mon 26 Oct 2026 03:04:54 +0000
Manifest this update: Mon 26 Oct 2026 03:04:53 +0000
Manifest next update: Wed 28 Oct 2026 03:04:53 +0000
Files and hashes: 1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: FTBVdUoAFm1roo7wFm5F8MGP11+QgI+7Epa7d9aCb+w=)
2: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
3: 49293CEC8C1711F1B40012BDCE1D38B0.roa (hash: UGIZ11vI+AloPkuFQufQtNgRRaZ7czAPvHXq/fiHA+E=)
4: F65069468C1611F19B4A1EB9CE1D38B0.roa (hash: PlId2XWtYjHJ/3qsp/QHOEHdxAmP0q8lXCpxMSmNdfg=)
5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 03:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Validity
Not Before: Oct 26 03:04:53 2026 GMT
Not After : Oct 28 03:04:53 2026 GMT
Subject: CN=6adec356-9b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:62:0e:43:86:ef:31:8e:ee:23:4a:a1:b0:
93:91:05:23:0e:4a:af:61:1c:92:35:49:0c:ad:13:
d2:9c:58:79:61:bb:03:55:a5:4a:27:47:b7:b7:60:
7e:de:65:c7:a9:01:29:c3:f4:51:6e:15:91:90:d1:
e6:d1:76:42:1c:c3:52:f0:8c:f4:e2:71:55:0b:27:
80:5d:9e:74:54:2f:a7:a1:a5:b8:fb:8a:62:ea:17:
69:0f:55:5d:64:76:90:23:d5:4e:5a:25:bf:6e:b8:
f5:61:f9:9b:7f:14:25:e6:86:cb:9d:be:bf:88:b3:
ea:4c:3b:bc:06:58:48:98:72:d8:c4:64:b2:a6:74:
12:69:8f:13:63:15:f1:a0:82:1d:be:78:d3:cd:c7:
e4:f8:15:39:f3:50:b1:4a:d0:57:32:23:f6:54:73:
b4:d6:47:93:1b:5f:1e:fa:b7:f3:5e:fd:f1:58:59:
78:a3:d2:5f:02:a7:2a:fd:1f:f3:48:4a:24:91:e9:
95:27:43:88:ce:68:bc:55:25:2e:63:5e:c9:41:7a:
79:5e:6b:22:f8:44:f2:1f:4d:cf:fd:ba:d3:75:42:
b7:9e:56:79:c9:5a:99:eb:7a:06:a5:b5:d4:4c:b0:
cc:d3:d0:35:ce:fe:2c:d2:1e:93:57:bb:54:4f:bd:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:7C:2D:28:77:39:19:24:DC:DB:9E:9C:E8:F1:C3:C2:4E:C5:E6
X509v3 Authority Key Identifier:
keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a5:75:e8:91:76:be:14:40:6e:b6:cc:3d:3e:34:9d:3a:f0:
1d:02:bf:e3:c8:43:ab:ec:c5:fc:c7:d7:67:a2:2c:d2:2f:60:
96:a8:b0:3e:ac:36:11:2b:91:b4:05:cc:30:e8:ec:83:ab:50:
09:f7:86:20:18:03:92:1c:bf:97:25:85:53:94:12:ba:b5:59:
06:19:0d:19:a1:ce:e9:03:94:13:17:c1:d3:30:68:ba:21:20:
22:30:4b:a0:35:9d:49:f0:43:f4:d6:23:d8:fa:b8:d1:0b:98:
03:de:47:92:32:7c:2b:84:ec:4c:dc:26:de:6e:0f:5d:94:af:
21:99:6d:93:db:08:57:35:41:28:c5:6e:8a:fc:a7:b7:bf:bb:
d4:9a:b9:a9:fd:f1:07:b3:2c:ef:37:55:3b:f6:94:7f:cb:7c:
95:d7:54:74:ed:ef:4d:11:d1:4a:c8:a1:67:3c:e4:86:d9:52:
09:33:2e:e9:f9:89:6b:6e:30:c0:f8:13:f4:0c:eb:c8:b8:30:
34:56:5e:08:c1:0a:76:2d:ab:eb:23:22:a3:5d:6b:0f:67:62:
ae:48:99:6b:a0:db:76:2b:69:3d:c6:ff:e6:e2:67:31:2f:7a:
3d:5a:c4:1b:09:10:9a:44:be:da:f7:f7:04:2d:59:e6:c0:1a:
77:ad:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:54 2026 by rpki-client