
Error: rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File: kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier: RLbwypbqUVhlEzv0Vn0VaHBa50WSP6cnuW+NFEtcKCs=
Subject key identifier: 62:93:A0:3E:A1:DB:E7:A5:7A:73:D6:4D:9C:7A:F6:42:C9:9C:54:4B
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer: /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial: 03F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number: 03F7
Signing time: Tue 13 Oct 2026 03:57:20 +0000
Manifest this update: Tue 13 Oct 2026 03:57:19 +0000
Manifest next update: Thu 15 Oct 2026 03:57:19 +0000
Files and hashes: 1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: Oqa9eRgpvRSUJ+FB9DsEqaHhJqp/8dUdjMSJY1SMydY=)
2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Validity
Not Before: Oct 13 03:57:19 2026 GMT
Not After : Oct 15 03:57:19 2026 GMT
Subject: CN=6acdac20-eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:cd:44:8c:45:ab:b8:78:7e:f7:a4:57:7f:
2e:4d:f3:88:4b:fe:a3:f9:5b:8b:e9:de:ec:d0:1b:
96:38:aa:b4:34:fd:b3:01:6e:e0:f4:c8:69:d3:ce:
4f:b3:8e:dc:0a:7b:f2:92:97:4b:92:64:e5:54:b7:
41:b1:38:96:dc:fd:32:13:ac:a0:7f:2e:b0:3e:64:
83:ee:2f:24:dd:28:22:84:08:58:a2:a0:f1:07:e7:
e2:f1:8c:1a:d5:29:09:29:f8:90:ee:bd:c0:c9:fe:
2f:11:e8:66:cd:ad:b4:13:c1:46:97:b8:44:af:8d:
65:d6:9d:8b:ac:8a:46:99:eb:cb:cb:a6:75:e9:03:
17:51:aa:c7:16:ac:18:0b:51:3f:cc:f0:ea:2b:b0:
14:dd:b2:a4:e9:2f:7b:a3:40:d6:a7:e5:68:54:6f:
ac:81:95:2d:b6:4c:cd:59:48:5c:db:5e:47:e3:02:
7e:93:5c:1f:d7:08:3a:3c:80:7d:4e:80:fb:1c:3f:
88:eb:ff:ed:ca:1d:54:03:04:51:b1:77:96:da:33:
8b:13:c1:e8:ad:80:74:69:6f:70:8a:dd:cd:fe:17:
74:e8:4e:c2:0a:d0:d1:4d:fc:63:1c:e0:d5:f7:74:
07:54:4f:38:77:b9:b1:d0:fb:b5:05:7f:37:1d:c8:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:93:A0:3E:A1:DB:E7:A5:7A:73:D6:4D:9C:7A:F6:42:C9:9C:54:4B
X509v3 Authority Key Identifier:
keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3f:74:26:ec:b6:82:cf:71:3b:ac:44:6f:74:02:9b:e9:a6:
cf:60:a3:51:9f:6f:0a:95:07:10:83:be:bc:56:e1:83:21:49:
a8:e5:a5:0e:23:98:8a:cb:28:01:de:40:13:e1:be:1a:e7:c2:
ed:09:d2:ee:22:08:36:8c:43:12:71:cd:fc:4b:bd:b9:8c:4b:
bc:e3:7b:b4:0a:41:1d:0c:53:8b:36:d8:88:73:ab:0d:d0:69:
bb:72:9f:16:23:56:2d:27:d4:73:2b:c7:d7:f8:81:40:6e:d8:
65:72:8e:b1:65:80:e8:8d:f3:c4:0f:db:90:cd:20:b0:62:f2:
a6:ac:52:d0:5a:43:e1:fe:6b:59:51:8d:eb:37:da:53:90:31:
36:83:00:10:ff:f8:94:65:69:c5:b7:c0:ed:48:36:77:8a:26:
3e:22:5f:7d:5b:d1:ae:c6:00:ee:6a:58:53:b9:8c:9e:ce:eb:
03:a6:5a:4e:83:62:e6:ef:f9:c3:f2:d9:f6:14:20:43:fd:24:
98:82:2c:c5:e6:04:34:d3:04:8f:0b:eb:9f:60:06:ea:67:cb:
24:b9:7c:b4:0e:83:14:62:c5:1d:cd:a8:47:c6:2c:b7:93:d3:
9c:76:78:0c:32:4a:c4:28:64:2d:9c:41:78:d9:65:f7:35:85:
27:b2:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:38:42 2026 by rpki-client