
Error: rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File: POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier: HnH6odMqjlmGWVT7vsq2lMIWwu3BjDw0v0SNOMufr8w=
Subject key identifier: 55:D6:51:49:72:B2:AF:10:0F:92:22:5C:91:06:D2:AE:7F:B5:76:E0
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer: /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial: 0447
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number: 0442
Signing time: Thu 24 Sep 2026 03:47:50 +0000
Manifest this update: Thu 24 Sep 2026 03:47:50 +0000
Manifest next update: Sat 26 Sep 2026 03:47:50 +0000
Files and hashes: 1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: GOno9lG9+eQxH26DyjwEVfs4NgNLVefqz1q7/bVW5FU=)
2: 7CFC778030A711F1B0BA49A6DAE4EC9C.roa (hash: fiJLFf12hDBUqyflOu4g0dOWaAU/DEhS6uOIRtIo2kc=)
3: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
4: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
5: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 03:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Validity
Not Before: Sep 24 03:47:50 2026 GMT
Not After : Sep 26 03:47:50 2026 GMT
Subject: CN=6ab49d66-e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:2e:dd:99:15:ce:f3:c1:09:dd:a6:a1:79:
e0:35:6a:4b:54:20:91:42:46:aa:ec:8a:a6:c7:25:
75:4e:2d:1f:39:0e:13:ef:95:e8:14:47:20:3f:71:
73:f8:15:1c:0e:a1:4d:37:bb:c0:92:cb:2f:58:48:
d7:d3:43:6f:30:79:82:de:a8:0f:ab:58:2d:a6:d1:
43:6e:03:82:f2:8f:ed:ea:c6:54:29:e4:6d:1c:52:
58:1e:96:9a:ea:a7:e8:5d:e9:d3:29:e2:d9:67:1f:
e7:45:fe:19:2a:90:e3:58:fd:a5:75:1c:5a:b1:d9:
a4:59:e0:55:2a:28:f7:75:7a:50:6e:90:87:60:19:
94:63:ab:9a:78:80:e2:27:ac:0e:5a:82:50:91:fa:
70:69:0e:f5:28:3b:7a:bd:61:26:ab:9f:d9:34:ab:
f2:5e:d8:a0:e5:99:77:ca:fa:04:cd:84:9b:18:14:
2f:ae:16:4e:4a:e8:c5:5c:1b:84:c1:12:e2:f0:2f:
fe:76:bc:3b:5d:eb:6a:2d:10:bb:48:39:72:f3:eb:
15:49:cc:5c:cb:08:42:6a:d2:e7:99:3d:da:fb:c8:
df:97:65:6a:a8:57:17:7f:e5:fe:01:a2:3a:de:7b:
99:33:4e:b6:43:01:c4:3b:5a:71:c9:a9:e3:f5:39:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:51:49:72:B2:AF:10:0F:92:22:5C:91:06:D2:AE:7F:B5:76:E0
X509v3 Authority Key Identifier:
keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:9f:c3:0b:ab:f4:69:4f:81:15:e1:22:d4:66:b8:c5:c2:
81:e9:c2:bf:4b:52:90:c1:73:96:cb:9a:1d:ef:a2:a6:06:20:
98:18:93:f3:7e:3d:c0:0e:00:5e:b5:93:cb:72:1a:e1:4a:d2:
cc:9a:10:fd:a6:53:f6:12:88:57:a3:33:3b:46:35:9c:d6:c5:
0d:10:de:ed:46:cb:b8:02:de:ec:cf:c0:c0:7d:14:dc:1c:03:
a3:bc:18:9b:5d:ac:5b:7e:c1:e5:23:27:a0:fa:26:18:3e:49:
f9:67:af:05:38:98:9b:f9:70:c7:c9:40:72:3e:c5:db:89:4b:
87:54:08:64:b4:62:39:f0:37:a5:9d:2d:38:64:51:37:67:58:
65:97:64:60:df:cc:6f:13:71:1d:70:be:39:17:f2:20:8b:af:
42:5e:78:9d:c4:59:15:cc:e5:38:c7:7a:1b:0c:bc:44:e8:58:
36:71:45:50:27:37:8b:88:08:3a:3d:12:99:ea:c1:6c:70:f9:
f7:de:12:4f:5a:4f:ba:9a:aa:31:33:61:b3:82:53:b2:73:f9:
3b:aa:f7:7a:2e:72:ea:ec:17:b3:1d:a2:4b:ec:42:07:a5:3c:
14:c6:17:84:fe:3a:ef:b4:94:cd:bb:5c:95:00:89:e9:b1:9e:
63:42:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:14 2026 by rpki-client