
Error: rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File: OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier: fqQLynTk3M2DMqS15kPiAxgmqZKaHng01VLVPFvUN6M=
Subject key identifier: 80:BD:B1:D9:A3:EF:E1:65:5B:1F:38:70:38:92:FB:53:D5:21:FD:E4
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer: /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial: 050A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number: 0502
Signing time: Sun 15 Nov 2026 03:31:43 +0000
Manifest this update: Sun 15 Nov 2026 03:31:43 +0000
Manifest next update: Tue 17 Nov 2026 03:31:43 +0000
Files and hashes: 1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: lTkzP90+loapmlx2dvYk5sqgn0YFKp4dKEy6P096pzM=)
2: 31612164538311F182AFB0ACCE1D38B0.roa (hash: ymWXf0yxlrh1Y4pYFCcg1REPoB+gKEIeP6+qgKhj12k=)
3: 08A8A4CCC30411F1A156BBE6CE1D38B0.roa (hash: mOjLjWpbK0v5LfYcOQ4upv7EwGqnrUNEizqzZA/QHxo=)
4: B4993864538311F1B53AEFAECE1D38B0.roa (hash: 3z7Pymhab8EkuTX9K5wP76vuUvu1ud/Qr+5REcwgL4I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Validity
Not Before: Nov 15 03:31:43 2026 GMT
Not After : Nov 17 03:31:43 2026 GMT
Subject: CN=6af9279f-e200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:01:7c:ec:e1:e0:2d:c0:a8:b1:46:b5:b8:
cb:bf:a2:75:e3:4f:7c:5f:91:80:9a:d3:59:5e:d3:
92:f4:42:18:e7:7a:a9:46:4e:a3:57:e4:2a:bc:e2:
84:c2:db:54:16:20:52:dd:9b:ff:a4:1d:f0:fc:bd:
4b:09:e5:84:82:67:66:55:96:9f:7a:0b:ac:58:40:
f9:23:84:a6:6d:87:a4:c8:69:27:ca:ad:09:48:3b:
1e:40:49:97:e9:cc:9d:f8:5e:cf:d1:7c:96:4a:5c:
6f:16:7b:90:7b:ca:cd:7e:30:bb:89:63:fb:82:98:
32:a4:f8:68:7c:75:47:5d:87:82:e1:83:65:38:d6:
14:28:a6:37:d7:13:18:85:06:0e:24:2c:ce:7c:78:
02:b1:ad:d9:1b:99:55:93:75:00:b3:da:78:86:37:
65:a8:c2:c5:dd:25:5c:fd:42:92:27:ce:b6:6b:fc:
0a:34:45:db:0f:e4:a0:85:41:d5:97:e0:4b:7d:c2:
80:c8:5c:58:ce:f6:06:e3:23:8d:ac:c6:fd:70:dd:
f6:e6:57:89:92:a8:1c:b4:0f:71:e0:b6:b3:9f:f6:
94:6a:07:42:da:e3:c0:f6:ae:ad:66:e7:ac:5a:06:
09:93:26:7e:74:23:f9:e4:e7:c6:10:33:5c:79:26:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:B1:D9:A3:EF:E1:65:5B:1F:38:70:38:92:FB:53:D5:21:FD:E4
X509v3 Authority Key Identifier:
keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:9b:86:ea:b4:69:cc:56:77:ba:79:64:a5:8b:bb:bd:76:df:
0c:22:94:72:40:a4:d8:4f:a9:12:1e:0f:69:ab:10:7e:99:99:
b8:eb:c2:03:a0:37:53:44:60:bd:43:46:5d:40:80:38:7d:d6:
73:05:5e:d6:dd:5e:cb:78:45:51:9f:ff:6c:3d:4b:d4:97:ea:
99:4a:66:e4:7a:40:6a:2b:28:32:0d:45:21:81:5f:62:f6:ef:
6a:02:98:82:10:f6:d4:fc:26:41:ac:c2:f3:10:70:4a:36:5e:
1d:3d:4c:5d:06:83:9d:f2:ab:5e:b5:4b:16:5e:83:f9:7e:9d:
89:d6:4f:09:ff:f1:6a:c3:13:b3:50:08:ef:5d:9f:a4:36:33:
74:73:e5:82:f0:47:87:8b:22:39:38:db:ae:c2:0c:f0:20:b0:
e1:c0:bc:f7:dd:b6:95:7f:6c:93:55:00:f5:c9:5c:d3:da:4c:
ca:85:a3:dd:ba:86:01:93:c5:e8:39:4b:eb:73:72:4e:1c:84:
e4:cc:02:b7:d8:ab:92:6e:a9:4f:9b:a2:29:d9:50:49:8d:9f:
9d:68:21:26:99:ca:a5:2b:2b:a4:27:17:aa:a7:34:5a:f4:4a:
04:3b:95:e1:fd:47:4d:59:e7:a0:27:c4:cf:c2:61:eb:6f:f3:
0a:e9:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:57:38 2026 by rpki-client