
Error: rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File: D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier: aVCzle1mufZb12NhNDJzdvNZUxwsPGC7ShNHTXSlh0g=
Subject key identifier: FB:75:A0:E7:1A:39:2A:15:41:BC:C5:86:87:22:ED:F6:93:82:C9:2A
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer: /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial: 042C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number: 0427
Signing time: Tue 27 Oct 2026 03:53:57 +0000
Manifest this update: Tue 27 Oct 2026 03:53:56 +0000
Manifest next update: Thu 29 Oct 2026 03:53:56 +0000
Files and hashes: 1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: 0CPzJ5gNqlJ6VnCd9uBHsQN26IOY1a46d6gL2KH7MQc=)
2: B919C81C65D111F1BEB357FFCE1D38B0.roa (hash: x2d+bsJIxu+I4SIhjiWk8t+DzbcsDbeFDy/rEZKeKBk=)
3: 377F8AB4FF9F11F0848280B7DAE4EC9C.roa (hash: gFLOPNqksbsyHx1yrYoxHSQi3UU734l3ljRLt/JU9Nc=)
4: 47AF2FF6F14011F09B4F1487DAE4EC9C.roa (hash: BdQgr789FxdUtgxj7i45jCOlxF6k3e5lzdi6pI5Zqcg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 03:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Validity
Not Before: Oct 27 03:53:56 2026 GMT
Not After : Oct 29 03:53:56 2026 GMT
Subject: CN=6ae02055-2a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:5f:1e:04:40:3d:5d:fe:05:67:37:2a:0d:
45:c8:bd:86:c6:91:88:04:4e:63:97:21:60:61:ce:
97:a5:d3:f2:e6:e4:27:69:63:69:06:79:ae:62:f8:
d8:3c:99:49:fb:f8:e5:32:af:4c:51:82:c9:f8:97:
d6:9b:39:be:c3:f0:c2:76:a0:55:1b:14:16:33:1d:
80:75:ec:95:d7:19:f9:03:37:c4:4d:0d:80:41:be:
26:8e:84:17:74:02:62:10:be:02:ce:58:cb:46:f1:
8d:75:df:0a:c6:87:ad:73:18:79:be:a5:6b:71:72:
30:e5:e1:14:25:71:65:4d:e7:07:f3:dd:a8:f2:a0:
68:23:f7:b6:ec:7b:47:8e:1b:87:a9:72:47:21:5c:
04:29:00:70:8e:92:7c:58:33:d1:9f:bf:3f:f8:6b:
dd:5b:6f:44:15:80:38:a2:cd:fb:08:53:39:af:ec:
ab:7b:fc:10:b0:24:00:06:f5:48:f9:c2:9c:5b:11:
bd:c6:f8:da:c2:8c:e4:b8:a8:2b:c8:dd:95:6e:73:
1c:2f:78:c2:10:1a:45:25:ab:99:14:46:de:6d:3f:
d1:95:c4:8c:cd:9d:e1:82:ee:d2:6e:f6:e0:0a:cd:
32:c1:22:0f:55:80:71:c4:b8:1c:ac:cb:07:7d:50:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:A0:E7:1A:39:2A:15:41:BC:C5:86:87:22:ED:F6:93:82:C9:2A
X509v3 Authority Key Identifier:
keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:34:df:19:a7:21:64:a4:dc:80:5e:65:39:89:57:e4:8d:dc:
f6:2b:fb:85:b4:c1:fa:35:fe:69:7b:d9:74:ae:b1:66:5e:8a:
5f:cf:ff:2d:21:aa:02:15:51:1d:ac:db:a1:a0:78:91:71:ad:
dc:54:03:fb:9b:d9:8e:61:be:30:8b:1c:34:19:a8:2a:53:c4:
10:5d:49:01:04:93:41:c5:52:58:c5:1b:d7:25:1c:6f:b8:f5:
62:8b:30:ea:83:d4:9f:2a:02:6a:b0:d5:3e:75:13:79:45:dd:
e9:03:da:dc:68:6a:a7:6f:ee:1a:e1:4b:71:4b:1e:f7:a0:9a:
3b:b2:e9:7b:d1:5d:49:5d:30:0e:80:f1:12:8f:b0:de:59:e7:
d3:c3:4c:68:9e:b0:ce:fa:3e:e1:1d:4e:e8:18:09:cd:c4:8e:
d0:0a:44:c7:18:d4:82:4e:2c:26:ed:e4:bc:8c:db:e2:4b:dc:
a0:d6:d8:62:60:71:63:e3:c7:7e:be:a7:02:95:b1:fa:e6:47:
7d:f7:ee:76:f3:28:fc:d5:2a:16:43:5a:63:83:fe:e3:8d:65:
48:5a:1e:f8:68:1c:ce:a2:e5:73:0a:10:64:ba:97:33:e0:ba:
e0:ec:b1:3a:c9:da:0a:5d:5a:08:0a:55:38:bd:a4:1d:37:7e:
cc:2d:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:53:15 2026 by rpki-client