
Error: rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File: UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier: /3whAGjVTSHdQiiitNMOeoVCJX11OEy/OSHz/nNBqhI=
Subject key identifier: 4B:00:3A:EA:84:94:EC:E4:39:31:A9:AD:A6:BC:82:87:D0:D8:A9:3E
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial: 0566
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number: 0562
Signing time: Tue 22 Sep 2026 03:11:22 +0000
Manifest this update: Tue 22 Sep 2026 03:11:21 +0000
Manifest next update: Thu 24 Sep 2026 03:11:21 +0000
Files and hashes: 1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: jSy8QI1hYyVjXnGpu95RA9oEFCUrOsuDLLejZXY9J/M=)
2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Validity
Not Before: Sep 22 03:11:21 2026 GMT
Not After : Sep 24 03:11:21 2026 GMT
Subject: CN=6ab1f1da-0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:4c:0d:f7:36:05:02:38:f6:e5:3c:19:e2:
49:6a:4c:10:34:e5:09:48:ae:02:ea:d2:cf:1d:f3:
3e:3f:e3:e4:20:a3:6f:10:88:92:5a:7d:f8:9a:b6:
69:38:0e:05:f6:0b:5f:85:5f:cc:e1:2b:5d:6a:ca:
f8:d7:c9:6a:0b:11:45:07:3d:0f:37:5f:bb:f9:5a:
c7:53:70:2b:c8:c4:7c:4b:9c:e2:cb:27:c5:af:e0:
d7:76:54:bc:6b:e5:a3:82:f4:3f:62:36:a9:dc:37:
92:07:2c:f5:4c:f3:3c:de:19:26:dc:02:8a:19:90:
89:f1:e0:59:c0:43:11:03:16:5b:4c:4f:4f:36:2d:
e2:9e:97:ed:43:54:98:8a:9d:3e:a7:25:43:1a:0f:
5b:65:48:c8:0c:fc:19:a1:1b:a6:fb:75:96:cd:45:
5f:49:0a:b9:be:8f:54:57:c9:bf:b0:f4:7c:43:18:
8e:b4:6d:60:1e:08:7b:c7:a4:56:89:c1:7f:28:f0:
86:8c:6d:ea:f0:2c:34:5d:f1:83:1f:c3:ad:6f:49:
a0:fc:6f:15:23:35:1a:57:75:24:da:3a:7f:cc:f6:
87:18:f4:6f:14:a8:d9:f6:8f:da:24:b4:8d:ae:71:
07:61:6a:ba:a3:bb:77:70:c7:95:33:a7:a9:e8:32:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:3A:EA:84:94:EC:E4:39:31:A9:AD:A6:BC:82:87:D0:D8:A9:3E
X509v3 Authority Key Identifier:
keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:39:3f:c2:e6:1b:05:b2:15:8d:c5:c4:6b:85:78:51:a4:97:
39:4d:da:5d:48:2b:84:2a:40:ec:be:d9:ee:44:a9:fb:1f:c8:
b2:ca:8a:4f:e0:5c:a2:08:d7:d9:fc:1e:be:a6:a7:e2:7e:d3:
c8:eb:b5:75:e9:33:9c:cf:56:2a:16:88:e1:a5:06:6a:60:98:
96:0a:9e:d5:fd:c7:54:0f:ae:22:92:c9:c9:3f:05:a6:e7:c2:
97:86:e5:1d:0e:bb:9c:00:3c:98:75:d2:10:3d:ee:fd:7d:b6:
bf:4c:ef:81:7d:d1:71:ac:57:5b:37:d7:fe:2c:91:c8:ef:99:
f0:f9:ee:cb:56:d2:bc:4d:89:9e:db:d2:08:00:96:22:a6:08:
c3:9a:51:0c:77:80:3d:b0:20:19:d6:72:f6:39:b2:e7:0f:f3:
59:28:a5:a2:68:4f:d6:fd:89:d3:69:1e:7c:7a:6e:47:50:04:
2f:b8:ec:da:55:bd:96:c3:67:a6:20:e3:fc:0f:c2:d4:8a:33:
34:58:45:e5:25:73:e8:df:0d:38:e3:75:de:68:3c:0c:23:cb:
ec:11:3d:9b:72:86:4e:ae:7e:e1:c5:71:03:4b:e6:7a:19:a5:
a2:ba:27:b5:46:12:62:74:c7:22:c3:75:43:81:91:47:5d:a3:
56:62:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:31 2026 by rpki-client