
Error: rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier: nDoNC2kcJMi4qUo73JZ+Nb+geFlXDS613uYUYE9TuTo=
Subject key identifier: 13:CF:EC:A3:35:CB:96:56:B9:FB:8C:CC:A0:5C:85:CA:BA:A0:4C:EB
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer: /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial: 034D
Authority info access: rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number: 0348
Signing time: Sat 10 Oct 2026 04:18:44 +0000
Manifest this update: Sat 10 Oct 2026 04:18:43 +0000
Manifest next update: Mon 12 Oct 2026 04:18:43 +0000
Files and hashes: 1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: 4dxek+AtpmH/9mjWWWud9zaqztYqESUVF9Iil73JYCY=)
2: 1F1E8DAE2D1111F19C746AC9DAE4EC9C.roa (hash: verwwM1qSDlHt1eWteeWg5Wyu5dh0r1sixVOjp6dIDQ=)
3: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
4: B116646C2D1011F182D210C9DAE4EC9C.roa (hash: Ov51lJNCy4uqDkQo8rHB8kq0FYQa1S1y8nu5i0VfTfk=)
5: 73F502E22D0A11F1984F2EA6DAE4EC9C.roa (hash: 4k+reHjQ2qKzbqLfzomf/zDmUieo6Evhc7Pv9095Np4=)
6: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AR, serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Validity
Not Before: Oct 10 04:18:43 2026 GMT
Not After : Oct 12 04:18:43 2026 GMT
Subject: CN=6ac9bca4-cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:9f:d6:28:79:83:67:56:f1:92:63:a5:fa:
53:12:7d:9d:40:0f:87:f4:4d:1d:9c:89:8f:d4:a3:
6b:9d:af:46:b6:cc:c0:36:5e:19:e6:3c:45:6f:6a:
0f:a2:97:b9:32:43:c1:a8:b4:b0:c9:88:74:3a:62:
07:b4:cb:f7:15:08:31:54:5a:92:b6:c7:65:54:bb:
81:f8:d2:77:31:fe:e4:d6:cc:90:60:e5:62:b0:e4:
7e:8c:23:3c:46:4f:3f:a7:fc:48:59:6a:cc:ec:4e:
f4:40:14:a8:29:de:bf:73:21:50:2b:91:8c:35:4a:
d1:87:b9:44:b5:b8:56:8b:5f:a3:18:90:b7:65:56:
db:07:3a:84:b6:11:08:e2:8c:15:d1:f2:fd:80:24:
08:1b:04:3a:3a:3a:d6:68:fd:bf:47:c2:bd:b0:d5:
28:36:65:48:20:71:c5:28:2f:09:45:ae:31:a4:0d:
9d:91:06:1a:02:ae:dd:10:f0:51:10:74:38:44:e9:
4a:fe:5f:87:df:d8:be:ec:47:16:04:70:02:8b:f2:
9d:f9:61:00:5a:d4:d7:07:89:da:1f:1d:3c:d2:08:
3c:ea:1f:b6:75:c7:1f:4a:be:ab:0c:3c:73:dd:bd:
52:be:31:3b:bc:7b:a0:8b:51:dc:1a:60:8e:63:0b:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:EC:A3:35:CB:96:56:B9:FB:8C:CC:A0:5C:85:CA:BA:A0:4C:EB
X509v3 Authority Key Identifier:
keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:3c:9b:7c:06:4c:5e:9f:e5:bc:01:8d:87:b2:55:03:da:
92:2b:3d:96:c1:8d:01:c8:d4:89:7c:5f:c7:b3:21:a7:39:e6:
d7:99:f3:43:ea:4b:ca:c9:69:96:a5:00:c9:89:93:84:90:06:
1b:13:a6:ba:ba:ea:48:d3:fe:da:a1:a1:60:da:29:07:e4:3e:
0f:60:46:58:2b:ed:20:81:5d:fe:f8:86:c2:fb:6e:0b:6c:9a:
56:3b:23:b4:a2:eb:64:f1:41:88:d0:9d:95:d4:4a:1e:f7:83:
76:47:44:ac:06:cd:de:30:d6:3b:81:65:0a:9b:89:a3:11:fd:
17:3b:f8:6f:0e:fd:6b:ef:a4:db:29:b8:26:36:0b:f3:74:00:
f0:ee:57:cd:91:38:aa:81:27:0a:9c:0b:39:60:25:bd:16:9d:
d7:f0:3e:50:41:89:c0:61:6a:2b:e7:fe:86:57:ca:3d:fb:95:
35:cf:d0:62:77:7c:31:88:c4:ef:21:65:10:31:ce:da:01:ac:
c6:e2:55:e2:ec:c4:75:23:39:03:e7:1d:98:79:39:a8:bc:b8:
10:66:87:8d:1f:1f:97:62:16:d7:b9:9b:46:22:f6:99:61:db:
b7:95:00:10:c5:ba:6b:b6:53:30:ae:9b:15:88:34:2f:2a:e5:
4d:02:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:37:07 2026 by rpki-client