
Error: rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File: xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier: 7Dn0Qy8W7IMWAiM1aE1ACJ+D3yYxM5Oxzgjhw5zt8rY=
Subject key identifier: 6A:59:60:42:F4:EF:40:D9:A7:AE:CC:57:0F:D8:AC:03:B4:E7:8D:4D
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer: /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial: 0AB1
Authority info access: rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number: 0AA6
Signing time: Wed 26 Aug 2026 01:22:37 +0000
Manifest this update: Wed 26 Aug 2026 01:22:36 +0000
Manifest next update: Fri 28 Aug 2026 01:22:36 +0000
Files and hashes: 1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: k+6nHCXg1QqwA3Z7sgQBneKRKmMw+l6OEDDUK1mBLOc=)
2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Aug 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Validity
Not Before: Aug 26 01:22:36 2026 GMT
Not After : Aug 28 01:22:36 2026 GMT
Subject: CN=6a8e3fdd-359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:f1:30:cd:3f:88:38:00:8c:57:89:ac:1b:
bd:39:cb:e2:c2:84:a0:67:03:53:c6:ad:e4:a6:44:
13:cc:f0:43:16:01:78:67:fe:9c:72:c4:1b:49:77:
c1:4c:6a:dd:d6:90:74:ed:1d:0c:6a:3c:93:ec:f3:
ce:cc:5f:bc:fa:8c:43:ef:87:b3:ef:ad:92:59:31:
87:f0:95:ba:54:a9:2a:8d:c2:17:cb:4f:e5:fa:1c:
c7:61:c9:f0:f4:33:cf:7e:83:90:25:01:6d:6f:9b:
b2:b3:eb:9b:55:05:8f:96:ad:f2:ac:4e:89:a0:16:
1c:0b:3e:55:03:05:50:6e:1e:0b:12:1b:38:c3:90:
ea:8c:66:1a:c1:92:94:87:ca:4f:27:a9:af:09:bc:
fe:95:ed:d3:68:35:46:c5:5d:35:09:fb:0e:fb:a4:
69:81:78:1a:09:11:a6:1e:67:83:06:e2:b2:7a:a8:
c4:5f:f9:69:8d:ca:ac:85:46:27:67:f1:63:fc:4a:
07:4e:e0:64:e1:05:3f:83:3a:92:1f:d0:6c:ae:a5:
d0:09:f3:17:e3:7e:04:2c:c6:1f:a7:06:41:61:92:
91:40:fa:e5:e9:52:f6:7f:f0:2d:ff:ae:0e:a8:8a:
5a:eb:f6:45:83:c1:7b:74:db:48:03:70:fe:01:f1:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:60:42:F4:EF:40:D9:A7:AE:CC:57:0F:D8:AC:03:B4:E7:8D:4D
X509v3 Authority Key Identifier:
keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:f5:64:38:6b:15:1d:6b:54:c9:a9:92:61:3a:3a:e5:b7:
c6:f2:d5:b6:1b:d0:5a:d3:ab:d1:7d:6c:dc:d0:4e:dd:c0:5a:
9d:be:dd:55:db:cc:32:81:4f:60:38:89:51:4d:44:1f:74:4f:
70:3c:c4:70:8e:29:40:ee:6c:c3:6a:e7:a1:16:a5:b7:d1:80:
cd:bb:6d:01:7e:86:4f:05:a9:30:98:82:fc:57:a3:c1:76:1c:
0a:9c:1e:a0:f1:41:38:10:b4:39:20:ac:70:f0:9c:79:56:18:
36:c9:cd:8d:b2:7a:1a:a4:9c:2f:f2:68:13:f2:2f:a3:3d:11:
17:9a:c2:48:0c:cf:d9:44:17:94:88:bc:bb:0b:9a:4f:36:b6:
a1:36:f6:1d:bc:9b:75:3c:92:fe:8a:9f:46:66:d0:99:fd:ec:
1f:04:f7:5b:da:62:b2:bf:9d:13:fe:cd:34:7d:93:e5:ab:23:
60:19:0a:06:c5:38:8a:90:8b:3a:1c:b6:c8:9f:f4:5c:90:18:
25:e8:8b:24:18:cc:cb:f1:e6:63:be:95:d4:88:94:56:f7:5e:
c9:2d:89:95:e6:6b:cc:1a:e3:10:87:ea:35:b9:cb:a5:9f:fc:
49:a4:9f:c1:41:82:12:86:99:1c:4f:ca:c7:7b:a0:b9:cf:45:
4c:96:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:20:22 2026 by rpki-client