
Error: rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File: cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier: 6XJ7DAOplDVoYh2VOQx3ynuKuX/YaoAenBCsWjTGpAY=
Subject key identifier: 89:B5:2C:6E:A4:F4:78:61:61:76:EA:3B:29:CD:9F:B6:68:9F:7B:66
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer: /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial: 064B
Authority info access: rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number: 0645
Signing time: Wed 23 Sep 2026 02:48:42 +0000
Manifest this update: Wed 23 Sep 2026 02:48:41 +0000
Manifest next update: Fri 25 Sep 2026 02:48:41 +0000
Files and hashes: 1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: 1NkXv5gysj98dTgg1y73pfSzM/d8ptSPjhCSvJ3IUn0=)
2: 146B573C60AD11F1AA74EDCDCE1D38B0.roa (hash: b44hl5ns1GejqBDlBZqqeabDZjHSwkcNtGvmLapzA6g=)
3: A0ACF8CC60AD11F198FD15D2CE1D38B0.roa (hash: D1G83oNUfroyGNdogOzA5OFUfJuI2+DJ1eGJKNjaIbo=)
4: 875A2E2860AB11F1B54351C5CE1D38B0.roa (hash: ivxFjeduGSxxhWdAOPw6gvRhK1fIbKwK86DvK7nxOdw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Validity
Not Before: Sep 23 02:48:41 2026 GMT
Not After : Sep 25 02:48:41 2026 GMT
Subject: CN=6ab33e0a-60b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:17:dc:f3:92:01:d5:4d:f9:32:23:e4:39:
80:e9:8b:64:c7:14:9f:4b:84:2c:00:d7:19:66:a0:
9f:f0:be:be:86:5a:40:61:91:84:bc:63:f5:41:6b:
12:3e:6d:f7:49:a6:e4:7b:36:2b:44:e3:13:d0:6d:
2b:0a:2b:88:ed:35:90:cb:42:10:58:b5:f6:3d:cb:
75:80:18:46:9c:d0:36:d4:48:61:23:e0:0f:2d:e8:
8e:92:7c:70:e2:59:57:0a:1b:98:f8:a8:d6:91:b1:
b6:89:1e:d4:4b:9e:67:af:dd:38:fd:a3:a6:7a:a4:
33:1e:b7:28:0a:b0:6e:95:73:98:25:dd:ec:9c:5f:
1c:7c:d9:fd:9a:63:31:5e:2f:b3:98:84:5d:3f:76:
c6:96:a6:a3:ff:74:af:76:f0:b4:ba:14:35:69:60:
24:6f:ba:11:0d:fd:41:41:68:5e:80:d2:1a:8e:b5:
9a:99:72:48:ca:c2:b6:c4:34:11:1c:1b:ad:ce:6b:
5f:74:2b:6a:a4:4f:f6:ea:3b:d0:7f:92:40:4e:0e:
c2:9a:05:5e:af:a0:91:bf:ae:f1:ae:fc:4b:dc:0d:
81:44:ff:96:94:7c:61:bc:92:ca:2a:df:f8:49:b8:
d4:6a:de:0a:4c:05:f3:22:cf:f1:7c:46:76:d2:ae:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:2C:6E:A4:F4:78:61:61:76:EA:3B:29:CD:9F:B6:68:9F:7B:66
X509v3 Authority Key Identifier:
keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:eb:76:7c:48:80:59:a4:d3:58:b1:b6:25:4d:b0:cf:6d:8f:
da:bb:10:d4:bc:f9:a0:a1:1b:89:30:c6:04:07:63:fc:5f:8a:
cd:9b:99:61:ae:2d:85:38:d9:ff:78:52:08:1c:cb:25:25:15:
fd:19:15:e7:d0:87:38:39:d8:3d:91:6f:9e:e1:e6:91:6e:b3:
5d:70:1d:f3:6c:96:60:96:02:0c:0b:19:8e:f9:84:86:00:cd:
bd:01:b6:81:89:3c:d0:83:18:b3:a6:d9:a1:95:8e:64:f1:d1:
00:22:b4:f6:15:5f:29:74:82:63:d9:94:52:57:39:45:c9:74:
63:12:4a:3b:f9:31:9b:13:dd:ec:73:52:fb:e3:46:97:cd:94:
97:1b:66:3b:15:88:af:bf:48:a9:82:d4:03:59:2d:88:99:3a:
37:8a:c2:ee:f5:81:e1:07:b2:c5:08:b1:c3:e4:46:d1:5a:70:
f8:60:c5:c7:23:12:a2:8d:29:31:da:d4:c5:59:65:5b:f1:87:
07:01:f1:ef:cb:85:6e:ee:26:7b:6b:0c:75:02:6a:9b:18:cc:
31:99:f2:91:d7:41:f8:d5:3b:00:7e:4a:f1:04:82:7e:77:9a:
44:b6:1d:2d:9f:b5:a3:e9:43:fc:67:dc:2b:a8:2d:6c:38:f8:
55:53:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:29 2026 by rpki-client