
Error: rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File: ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier: AGKCoCUcHKcRLo61fCSFhLsXc0w2ygBgl/Tdy4gLBoo=
Subject key identifier: C4:8F:7B:0B:B1:4E:F5:7B:AD:33:FD:3F:CC:2F:30:C2:E2:BD:24:99
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer: /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial: 02FF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number: 02FE
Signing time: Fri 04 Sep 2026 04:29:45 +0000
Manifest this update: Fri 04 Sep 2026 04:29:44 +0000
Manifest next update: Sun 06 Sep 2026 04:29:44 +0000
Files and hashes: 1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: UM5d0OQYE8jMoKZaXsxD9Se3qfZy44cXYTl8ksHEMsg=)
2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Sep 2026 04:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Validity
Not Before: Sep 4 04:29:44 2026 GMT
Not After : Sep 6 04:29:44 2026 GMT
Subject: CN=6a9a4939-17e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:bb:c5:25:b9:b1:84:44:2a:7c:91:b1:2f:
91:57:a8:80:51:2b:97:f3:28:3e:b4:02:a4:f5:f5:
3f:df:16:fb:44:c5:a2:33:74:94:b4:0b:dc:db:5c:
28:7b:c3:40:13:3d:1b:ee:cd:c0:4c:ab:8c:64:1a:
61:b4:55:0d:36:2d:73:2b:1a:2a:cd:be:99:8d:4b:
16:3a:b0:88:60:ac:94:3b:ec:1e:5b:7f:86:4f:58:
19:ed:c2:a8:cb:23:b1:62:c7:ed:e2:91:4c:5a:03:
fe:d0:e1:d6:c2:02:1b:54:32:37:2b:de:cb:05:58:
fb:36:04:0c:c9:1d:bc:fa:e1:16:82:33:0d:2d:20:
bc:b6:02:35:b0:4a:53:ac:5e:a2:f0:2d:a3:3a:44:
d5:71:64:dc:f1:82:72:68:f5:3d:75:96:5b:82:c3:
71:fc:ec:e5:5c:4c:3b:93:32:e9:0b:06:00:63:e5:
f1:9b:bc:2d:74:5f:47:c5:d5:bb:29:6c:cb:56:4b:
d2:b8:57:90:ea:af:88:08:ee:8b:9e:26:58:f5:ef:
ca:c4:94:ba:b9:35:ec:be:52:b5:55:d4:e5:14:5a:
61:bc:1e:77:38:2f:8d:a9:71:a8:b2:5d:a3:2c:b9:
92:2c:ef:34:01:eb:2a:50:57:b1:2b:a4:78:00:48:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:7B:0B:B1:4E:F5:7B:AD:33:FD:3F:CC:2F:30:C2:E2:BD:24:99
X509v3 Authority Key Identifier:
keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:40:bc:1a:2e:86:e9:b7:be:f0:9e:43:cd:5b:b5:d5:7d:e8:
84:0f:93:a0:a5:35:fb:10:88:0e:b1:46:c2:c3:d7:32:1c:fb:
26:94:e4:b6:89:c4:f6:d6:81:f0:f6:7d:22:0d:ca:33:67:a1:
3a:e3:25:75:4c:46:a1:85:9f:dd:da:09:5f:f1:dc:f4:27:f4:
1e:e8:99:fc:ea:72:66:5c:50:43:dd:3f:c7:26:e3:8f:fe:f5:
c5:67:ef:ad:b6:5b:be:dd:84:1d:9c:62:e3:d7:37:31:1b:ec:
bb:7c:4b:74:fb:73:e8:44:13:f0:94:9d:bd:d3:11:95:f7:2a:
95:1e:28:36:05:50:fe:e3:29:d7:55:6b:e1:d8:82:e6:0f:53:
3c:a3:44:d2:51:cf:81:41:ee:4f:cb:7d:59:1a:37:e2:64:b0:
74:db:2f:a8:76:92:5b:6f:f8:53:e6:69:9f:db:f4:e3:e3:2a:
69:6c:27:71:a3:0b:fc:95:2d:25:72:28:a4:ae:c0:43:b3:7b:
e0:fd:96:6f:43:d2:11:ed:7c:12:16:21:e3:e2:1a:6a:e5:be:
94:e7:c5:9f:fa:40:5a:c8:b7:b4:2f:06:bd:07:9c:15:c9:f9:
21:2d:55:3e:c5:81:84:55:57:8f:e3:60:ba:cd:19:01:8b:27:
2d:f8:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:29 2026 by rpki-client