
Error: rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File: h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier: XRUR4ErUxTrM/YEqZVk46syUIL5/1xEx0dRhF43JEug=
Subject key identifier: 59:C6:C9:2E:E9:A6:CE:18:FD:01:2B:C3:B4:B0:D8:83:7D:D5:DA:94
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer: /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial: 01F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number: 01F4
Signing time: Tue 22 Sep 2026 04:53:06 +0000
Manifest this update: Tue 22 Sep 2026 04:53:05 +0000
Manifest next update: Thu 24 Sep 2026 04:53:05 +0000
Files and hashes: 1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: z8D/E10BlWGxi75p7xqqVvdcsmhqPmUemyC8w2HZV/I=)
2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
Validity
Not Before: Sep 22 04:53:05 2026 GMT
Not After : Sep 24 04:53:05 2026 GMT
Subject: CN=6ab209b1-efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:e2:b7:2a:41:e8:7f:6a:f8:47:2d:73:a2:
1b:bc:57:95:cf:d2:38:f3:aa:b6:c6:39:54:1d:bf:
58:4c:ec:7f:52:e5:e6:c1:56:bb:c8:05:f0:1a:fb:
24:a3:c9:ee:e7:22:cd:d5:03:83:0f:af:9d:22:02:
70:71:91:69:2d:e1:a4:90:dc:22:9a:f1:bf:16:90:
89:a5:22:4e:b7:4f:69:3e:2f:35:3c:bd:69:14:1f:
92:e9:7d:69:88:d7:2f:6f:63:46:49:56:fa:48:d1:
91:e7:a0:f5:3d:a7:c9:a1:21:fb:b0:bd:45:33:21:
75:13:43:6f:ff:12:6e:4f:97:a0:2b:a7:5f:b8:f9:
ca:e4:d6:75:8d:9e:d8:d2:ce:ee:5e:4e:c9:01:88:
f2:02:2e:82:e4:1c:40:dd:71:31:f8:71:49:72:79:
87:95:db:96:e0:86:2d:a0:3e:07:c9:9d:83:58:ef:
75:1b:f4:75:92:4d:de:81:28:28:8f:2f:af:5b:aa:
c0:da:c5:69:e0:42:b4:70:9d:5a:6f:f7:cd:ab:57:
6f:61:a0:48:2e:44:c0:65:30:a9:df:0a:30:b4:ba:
b0:10:94:b0:18:be:d5:0f:b9:75:26:20:15:9b:b5:
12:f9:ea:d1:f4:53:1b:fd:60:9b:ed:bb:e4:fa:07:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:C9:2E:E9:A6:CE:18:FD:01:2B:C3:B4:B0:D8:83:7D:D5:DA:94
X509v3 Authority Key Identifier:
keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:48:3f:d6:e2:2f:17:26:55:d0:ff:76:8c:1d:91:2c:27:c4:
f7:79:66:db:94:6b:99:3c:45:1f:fd:0e:41:ef:b4:3c:fc:6c:
81:71:3d:b6:9e:f0:2c:c3:b2:b4:13:7b:83:9b:29:42:87:7c:
30:ac:b8:cc:a5:af:25:90:4f:5c:bc:e9:d0:48:6b:20:49:fd:
68:8f:de:5d:b4:54:bd:b5:69:1f:41:a5:a4:84:2f:e4:9b:46:
17:02:22:e1:68:88:c7:8b:8e:26:80:e2:c4:ef:58:3a:d2:89:
31:db:9d:e2:d2:c9:29:67:7f:05:33:e2:70:6c:ee:86:d1:71:
bf:ad:1c:8c:1f:b2:d9:c7:78:65:13:5a:c9:c5:4d:9b:a9:00:
ef:1f:0b:97:b9:0b:df:95:26:c2:1d:31:0e:53:5f:60:cb:12:
01:69:07:be:52:ed:7d:ee:e5:c6:7a:9d:ca:20:aa:d9:cd:d3:
6f:41:66:0b:74:72:fc:8b:dc:74:99:14:fe:ea:34:a3:7c:c9:
46:aa:fc:ba:44:46:05:d4:13:0f:8d:07:53:a9:37:46:50:47:
9a:65:d7:d5:50:1b:4c:47:6c:72:23:8d:97:d4:13:42:59:dc:
28:28:ad:e2:91:e4:4d:87:0f:ce:f3:40:8a:7a:3c:89:8c:80:
ed:aa:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:17:08 2026 by rpki-client