
Error: rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File: u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier: DaTkukfA9C6QQGkxleRNHCJfWHF/XfGjsQRY7/f66j4=
Subject key identifier: 69:31:A6:42:ED:3F:9C:5B:82:EA:A7:BF:89:20:C5:3D:FB:92:E6:92
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 0756
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number: 0752
Signing time: Sat 24 Oct 2026 02:29:55 +0000
Manifest this update: Sat 24 Oct 2026 02:29:54 +0000
Manifest next update: Mon 26 Oct 2026 02:29:54 +0000
Files and hashes: 1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 1LLkZeEucfQcD45LnNnesD6sf9xXUPSR16XtncNuipU=)
2: A727C4428B6F11F1BB2BB2B7CE1D38B0.roa (hash: XawFZJaxnzvq5b0Rtz7wsotNQ+4PwTnD6TvOuVmsVCg=)
3: 6AE6E2A0899511F1836059E9CE1D38B0.roa (hash: Ke0DyeeNvPUu3/HySu88mHg8fSTxD3OWYshhFWO+3pE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Validity
Not Before: Oct 24 02:29:54 2026 GMT
Not After : Oct 26 02:29:54 2026 GMT
Subject: CN=6adc1823-3a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:42:1f:bd:23:eb:bb:5a:44:81:75:9c:cd:77:
1c:79:5d:3b:19:d8:36:21:69:06:25:bf:7d:db:70:
c2:7b:90:81:fc:7b:4e:05:44:86:c1:a3:9b:fb:0b:
3e:2b:65:61:97:db:d8:27:96:f8:55:b0:c9:0c:7f:
13:fc:77:f1:76:49:c9:ee:45:b7:5e:83:db:7c:3a:
c3:63:9a:00:6f:1a:ce:65:96:be:a7:6d:e2:87:d5:
f0:90:14:e7:00:31:39:53:76:35:7e:ef:29:3f:17:
af:82:f0:fe:e2:ff:94:44:aa:b8:c6:7a:48:fb:eb:
71:cf:05:5f:83:e8:11:a5:7d:3b:4c:a0:41:93:b1:
0c:19:b9:02:40:d0:3b:44:51:b4:2f:86:7a:03:45:
c2:15:45:61:64:70:de:16:34:a3:70:2e:57:9f:97:
44:ff:6e:17:ae:92:16:00:f3:a6:0b:ee:fe:ff:92:
03:4a:24:5d:b2:05:8e:fc:21:be:82:fb:27:f8:c4:
6d:58:78:7e:db:91:c6:0f:3a:82:a6:92:19:d5:5e:
af:4f:87:c1:25:3b:61:9c:1d:72:6c:91:aa:d0:df:
ad:3e:22:95:6d:63:78:93:51:eb:1a:a7:e6:97:25:
37:09:51:b7:29:ed:a7:f5:4d:b9:9f:45:ac:05:3c:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:A6:42:ED:3F:9C:5B:82:EA:A7:BF:89:20:C5:3D:FB:92:E6:92
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:cf:6c:94:a7:ad:ca:70:8f:a3:59:0d:1a:de:4b:74:5b:
82:ca:4d:ed:94:d9:51:69:71:c1:c5:fb:04:c5:7d:f2:bd:57:
3b:38:24:24:e1:2f:6d:e9:e9:b1:b5:62:e9:5a:53:cf:95:39:
1f:5f:e9:45:32:06:50:3d:41:02:d3:24:a0:23:85:21:78:2b:
84:79:fa:55:22:eb:dc:b1:b9:7c:c4:e1:46:14:b6:a5:d9:9f:
3c:bf:ee:32:30:97:9e:13:12:38:0e:5e:f7:34:9f:b4:a4:e8:
d4:98:9d:e2:67:3d:d2:23:6d:94:43:4e:09:de:77:35:5c:f4:
43:8f:1b:d6:fb:e8:fd:35:25:fb:5a:7d:b2:87:ae:d1:c4:9e:
75:2f:b3:6d:40:7c:c7:8c:13:ef:68:a8:3d:a9:a1:68:e1:90:
e4:81:ca:4e:9d:56:c0:54:3d:23:1b:28:ee:40:c0:e5:e4:ed:
2a:a0:3e:b6:91:b6:90:be:aa:02:d7:9f:77:b1:33:9d:d4:78:
37:a8:34:22:81:f7:ac:e0:d0:e7:66:9d:23:24:07:38:f6:72:
e7:d8:7e:95:d1:0f:2b:bd:ca:2c:31:4e:16:73:e1:e6:cb:a4:
f1:8f:7d:1f:6a:52:3e:40:dd:6a:34:ff:97:43:4e:17:b4:f2:
93:56:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 16:40:10 2026 by rpki-client