
Error: rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File: 3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier: 275SUhiASYeHnVfI4SYCvsoFPtjeN3RNdGt7hYqEUnA=
Subject key identifier: 4D:48:63:A7:93:61:12:6F:DB:5B:51:BB:21:27:68:6E:A7:23:AE:CB
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer: /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial: 0862
Authority info access: rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number: 085E
Signing time: Mon 26 Oct 2026 02:01:42 +0000
Manifest this update: Mon 26 Oct 2026 02:01:41 +0000
Manifest next update: Wed 28 Oct 2026 02:01:41 +0000
Files and hashes: 1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: D/hzYUAsWCW6DeV8WTgzD/nZ0ZHacMMGJEQCn8Z8BP0=)
2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2146 (0x862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Validity
Not Before: Oct 26 02:01:41 2026 GMT
Not After : Oct 28 02:01:41 2026 GMT
Subject: CN=6adeb486-b656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:64:79:6a:42:6e:ac:d5:86:af:56:22:d5:
c4:7d:ab:b2:92:7b:6e:d1:5e:f5:ef:d7:ea:0e:f4:
93:f9:77:d6:29:9d:85:c8:14:f2:0b:75:eb:f8:18:
08:c9:cc:fd:2e:39:10:33:df:26:9f:54:b8:94:20:
c8:d4:62:6a:06:c4:5e:67:16:76:69:d2:a2:5b:fe:
8e:84:99:f6:3f:07:ae:05:10:36:73:9e:39:f3:28:
c8:c1:0a:28:a6:2b:8f:2c:ff:ea:8b:09:6a:89:3f:
da:b7:39:78:27:31:9b:fa:9d:6c:a3:c5:13:98:8a:
eb:5d:7d:9f:19:1d:d9:8f:d7:5f:0c:6f:22:4b:7e:
50:b2:9d:75:2e:6d:e8:e6:1e:5c:83:c8:28:28:ce:
a7:29:c7:71:c1:22:1a:2d:0d:93:09:b0:7b:48:f0:
68:5d:a2:bc:2f:a7:75:1e:55:d7:7a:7c:b5:db:25:
0e:d0:17:3e:89:e5:f2:03:3d:74:21:3b:f7:d3:fa:
df:d8:17:9b:c7:ba:e7:c1:ad:7d:97:51:49:9d:8e:
d9:da:6b:02:f4:02:c0:43:c3:81:70:65:42:a0:24:
14:88:6e:a5:2b:25:7e:fb:3d:23:6e:55:b0:50:1d:
5f:81:7d:5d:06:00:17:c4:9d:4c:22:14:6b:f9:3a:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:63:A7:93:61:12:6F:DB:5B:51:BB:21:27:68:6E:A7:23:AE:CB
X509v3 Authority Key Identifier:
keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fe:69:29:37:43:84:0d:40:74:d7:1c:08:35:ea:a0:56:e5:
9c:3f:c7:bb:7c:8f:02:56:c5:d6:70:44:63:df:00:c2:e5:90:
04:ef:ff:d5:42:5f:2a:e2:67:92:54:10:90:3b:dc:d7:34:87:
4b:63:38:a2:b9:c4:5e:95:14:4d:b7:18:80:f9:ab:53:97:6e:
bf:0e:73:d8:43:89:2a:20:8d:39:56:b2:5c:b1:62:99:c1:50:
8c:4e:f6:a0:c0:4e:cb:ba:ab:48:67:23:74:13:dd:fd:10:43:
5e:d5:cf:2e:98:e0:13:f1:9b:64:99:b1:55:fc:61:ef:02:09:
9d:0b:20:20:12:bf:e5:5a:bb:ee:c5:ed:7a:50:11:df:66:1f:
47:a2:82:ba:a5:c1:35:1c:ee:0f:47:8f:bb:cd:20:cb:57:f0:
5c:25:a3:34:b2:2e:cb:83:6c:1a:35:8a:45:14:07:14:57:e4:
95:60:28:ca:fb:79:14:40:8e:ce:43:40:e8:14:17:6f:d3:ad:
32:eb:82:24:04:a6:19:65:f3:ca:e5:aa:3d:7e:ac:72:19:cf:
b5:62:1b:ff:a8:60:f7:09:8e:5c:46:6a:9a:4a:cd:33:68:cb:
64:dc:68:48:08:4b:a3:5e:85:a3:a5:29:22:6c:a8:4e:19:4e:
ce:7e:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:28 2026 by rpki-client