
Error: rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File: POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier: /0yQyKWRuJ0BtYoFr/kzzc694Jtiz3wZj9BCZknKSGU=
Subject key identifier: FA:DB:6D:BE:DA:E4:27:AE:E0:62:21:6F:B0:32:AE:49:0C:D7:49:67
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer: /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial: 0448
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number: 0443
Signing time: Fri 25 Sep 2026 03:47:41 +0000
Manifest this update: Fri 25 Sep 2026 03:47:40 +0000
Manifest next update: Sun 27 Sep 2026 03:47:40 +0000
Files and hashes: 1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: iGTACx0FSYY4fldPP/95eJHoumuDp4KuY78OFtBt8wA=)
2: 7CFC778030A711F1B0BA49A6DAE4EC9C.roa (hash: fiJLFf12hDBUqyflOu4g0dOWaAU/DEhS6uOIRtIo2kc=)
3: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
4: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
5: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Validity
Not Before: Sep 25 03:47:40 2026 GMT
Not After : Sep 27 03:47:40 2026 GMT
Subject: CN=6ab5eedd-8b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:2f:55:7d:f5:4a:03:0e:76:4b:66:f3:a0:
23:a8:b7:80:0c:09:54:9b:09:be:99:b1:25:49:c9:
e6:2f:a6:c4:9f:a8:dc:87:97:b7:da:d7:8e:aa:7c:
7f:9c:5d:44:10:79:da:e6:84:a3:50:a5:57:bb:14:
db:88:04:fa:91:b5:01:9d:cb:e9:7d:ed:06:22:bd:
ee:27:31:d8:59:49:61:c2:b9:ef:65:f0:11:20:7b:
05:d8:ef:d0:42:d6:2b:a8:bf:bf:8e:ee:23:a3:6c:
eb:23:c3:00:05:6c:c1:35:7e:42:43:bd:2b:9b:55:
b5:2c:d4:36:ef:eb:c4:e2:f4:e7:b8:93:8a:72:34:
75:ab:1b:ce:20:5a:b5:37:ca:ec:44:8b:6d:cb:d1:
16:87:ed:e1:47:e0:bc:44:0c:a9:fb:42:36:c5:7c:
89:f6:a7:29:f5:7f:8a:80:ee:12:e8:81:ff:7a:3b:
dd:12:a2:48:29:50:47:e0:2b:07:07:13:cf:a7:7c:
dd:c2:96:c8:08:a1:a2:de:d9:ca:4b:3d:b1:33:dc:
62:cc:36:fc:f5:3c:22:a3:23:2e:1d:26:8c:05:a6:
b8:f7:e9:2b:d1:4f:6b:b4:2a:27:02:63:80:e9:cc:
a3:e8:d3:8c:4d:fe:a5:81:96:72:b9:5e:c3:8b:8d:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DB:6D:BE:DA:E4:27:AE:E0:62:21:6F:B0:32:AE:49:0C:D7:49:67
X509v3 Authority Key Identifier:
keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:38:13:9e:8a:6e:c9:e1:ab:cc:c2:4f:a6:e1:cd:d7:28:68:
27:55:35:2e:b3:e0:7a:b9:76:02:5e:d5:e9:d0:33:e8:60:76:
61:a3:f8:08:df:c6:4a:2a:fc:19:c5:67:0f:bd:c2:fa:c0:05:
94:d3:ea:6a:ef:a2:0d:7a:7c:95:b2:28:3d:62:ad:f0:9a:08:
da:1c:9b:8b:33:30:01:ee:0d:24:21:d6:56:38:c3:a4:b2:d3:
18:73:1b:ce:42:dc:c4:b5:79:fd:11:de:cc:90:38:a3:f1:90:
ca:f2:57:ea:36:a8:e1:37:35:ff:7a:bf:72:54:f4:13:ff:b2:
19:d6:09:6f:e5:92:f2:52:4b:3a:5a:84:f2:a5:19:e7:c2:c6:
ee:be:52:1a:bc:5b:68:1f:0a:e7:08:38:a4:65:28:23:af:18:
ca:19:eb:2d:81:49:b1:cb:15:d1:fd:4b:e5:73:7f:45:4f:c6:
8d:dd:22:25:a7:02:49:d6:de:22:80:ab:cb:a5:69:f0:1f:5b:
94:44:cd:02:b3:cb:6c:f0:2f:c0:84:77:57:4f:34:64:51:7f:
e2:9e:fd:d3:9c:87:8d:0e:f6:c3:6c:88:a6:97:d2:95:28:54:
90:9e:e6:f6:a2:95:1a:cb:45:42:94:04:45:93:67:2c:aa:8c:
6d:bb:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:10 2026 by rpki-client