
Error: rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
File: WNo74zGmEqquT2owY3cEBjrD3UI.mft (raw, json)
Hash identifier: ih7A+5wUbQEtgNB1llXOywaFqIVLs3UaKkjcf0vBkuk=
Subject key identifier: C0:8A:1D:7F:50:E7:08:9C:D6:AA:E0:25:2D:DE:5E:52:8E:FB:77:02
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 0465
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
Manifest number: 0440
Signing time: Tue 20 Oct 2026 03:58:26 +0000
Manifest this update: Tue 20 Oct 2026 03:58:26 +0000
Manifest next update: Thu 22 Oct 2026 03:58:26 +0000
Files and hashes: 1: WNo74zGmEqquT2owY3cEBjrD3UI.crl (hash: xSE1HKQQFCQOrR1aEq1DPwNpYtTHSdqRVsrGVJMd9P0=)
2: BCF64E3ECFF311F08A0CEAABDAE4EC9C.roa (hash: j7CRom0lOGZ8lIcKQpUnN53ebTJRhvCHiwerxahwuFc=)
3: 1475A26ECFF311F096054DA7DAE4EC9C.roa (hash: DIhkt7w9XQYMikWyfPDe9zR1unEC2k2dd5ZETrYVeCo=)
4: F85AF57E067211F09411CC9B762E951A.roa (hash: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=)
5: 6A831B68067311F0A5B3819F762E951A.roa (hash: dHewD/xYlqQhiWTpdXFrkxy+Gj1C9QIhRZsurBV3l/c=)
6: 2F1A0898067311F091A5799F762E951A.roa (hash: CNCaOGq5e+fSVQ4wKVSRok1jWDlNhofbmJTl2fwntNQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 22 Oct 2026 00:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Validity
Not Before: Oct 20 03:58:26 2026 GMT
Not After : Oct 22 03:58:26 2026 GMT
Subject: CN=6ad6e6e2-bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:b5:cf:e3:aa:5d:11:2e:72:00:b4:97:d8:
8b:d0:c2:92:0b:af:bd:50:40:4f:99:0c:95:7f:0c:
5a:b1:f0:92:81:22:0a:ba:a3:5b:0e:b4:db:3f:da:
4b:78:ed:9b:c0:bf:10:be:cb:2d:4b:1b:f9:5e:a4:
a5:0d:1b:e5:aa:60:8a:6b:3e:09:08:46:47:71:2e:
a1:8d:8a:a0:f2:1e:a5:60:5e:df:7a:a4:12:45:c2:
76:10:1b:de:35:ec:e3:c5:29:b4:7d:74:18:31:31:
a3:2e:8d:b2:57:dc:77:36:87:a2:5f:47:b8:a2:99:
94:12:f2:83:7c:02:37:f8:2f:11:3d:ad:8d:5d:e7:
25:00:28:a1:b3:c5:ea:ae:a9:8f:5f:20:63:0c:57:
02:eb:eb:48:5d:e6:62:94:b0:20:4d:1e:63:4c:2d:
bd:24:cd:b1:10:e2:d1:b6:ed:72:e4:5d:89:28:40:
3e:3f:73:44:aa:36:99:cb:c9:cc:65:57:90:02:7a:
52:05:f6:2b:2c:db:e8:73:9f:e8:e0:ca:5d:bd:9d:
f6:9f:ec:d2:b6:97:3e:26:a6:ee:80:63:a2:16:a5:
d8:8e:8a:c8:88:4d:dd:c0:a2:e3:20:af:9f:8a:88:
a9:e6:05:b4:e5:c4:bf:88:a1:26:d3:20:85:db:e9:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:1D:7F:50:E7:08:9C:D6:AA:E0:25:2D:DE:5E:52:8E:FB:77:02
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:5e:7b:64:57:af:b8:ca:bc:2e:49:d0:4b:0c:fb:20:6b:80:
e8:da:dc:26:89:bf:d1:9a:81:9b:eb:6a:ef:e4:c7:65:3f:4d:
0e:1f:7a:ed:fc:ef:8d:90:cb:d5:c9:45:23:96:c3:b6:01:ec:
3a:20:f9:96:d4:ad:8e:8b:7b:7b:d8:0f:7c:f2:99:b8:21:06:
2c:2e:ad:b3:63:1f:61:ab:f2:8e:9e:5b:89:59:bd:d3:79:5d:
fa:e5:86:2f:f2:87:4d:7d:03:5d:f5:7f:c9:3a:a3:1e:df:8c:
54:81:47:fb:3e:47:e1:29:8f:eb:93:35:16:fb:78:ad:54:72:
a1:34:ff:a4:57:3a:89:d6:3c:22:33:7e:b9:67:84:a4:1e:08:
68:b3:c2:e0:8d:27:10:88:f5:8e:41:5b:8c:f8:92:d5:6b:4a:
12:15:52:25:c6:2b:cf:83:03:3b:96:b2:4b:6e:57:1e:0c:aa:
9d:0f:24:76:11:36:2b:43:4a:d2:82:53:0e:c0:27:64:4a:10:
03:a3:ec:ce:98:ae:68:be:27:45:fd:5f:61:4e:fe:94:01:67:
96:c3:ef:87:e4:aa:48:42:86:a5:84:45:39:db:7e:69:dc:19:
97:8c:39:ec:b9:d0:92:d8:3e:e0:a3:49:f6:0a:6d:46:ea:6d:
32:c3:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:02:34 2026 by rpki-client