
Error: rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File: CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier: BAfaout3UwGyJO1uALe2rM38aU0KAPuVmaEERvjqKgY=
Subject key identifier: 1A:81:70:FA:C7:BC:2C:5E:26:30:F6:1B:22:C3:71:76:63:B5:1D:64
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer: /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial: 0348
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number: 0345
Signing time: Sun 18 Oct 2026 04:18:50 +0000
Manifest this update: Sun 18 Oct 2026 04:18:49 +0000
Manifest next update: Tue 20 Oct 2026 04:18:49 +0000
Files and hashes: 1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: KtYZJeFkWLSP7fZdigWSTesgRpWor08FoRcbQB1nXMU=)
2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Oct 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Validity
Not Before: Oct 18 04:18:49 2026 GMT
Not After : Oct 20 04:18:49 2026 GMT
Subject: CN=6ad448aa-261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:a5:79:41:ce:04:75:77:22:e0:8b:81:36:
12:4e:e4:72:de:5a:2a:6b:98:ad:be:f2:85:2d:7c:
8f:07:80:2b:80:a5:90:6b:c6:d2:20:34:76:08:53:
79:22:81:ff:8f:a7:e2:09:d3:30:98:93:46:34:dc:
eb:8b:20:83:1c:e9:5d:6a:d3:b8:eb:72:bd:af:59:
92:91:46:d1:e5:8a:ad:88:9e:48:fc:57:c2:7c:af:
09:c4:ec:6c:2a:41:4b:d0:1c:36:6c:4e:98:8e:54:
97:d5:e7:62:97:40:d1:4d:d5:47:1e:c1:70:f7:4c:
9b:72:9a:f6:c1:45:ae:81:53:0e:a4:a8:d5:2c:f6:
e9:dd:24:41:54:8c:22:d9:b8:dd:ce:5c:e2:fb:13:
97:3f:b9:a9:f6:26:63:b8:0c:0c:20:b2:96:6d:fc:
a8:a3:2f:9d:77:4b:34:10:53:7f:3e:0a:4d:6e:f1:
07:4a:a8:f6:f6:f0:46:fa:dd:70:e6:86:4e:d0:c0:
c1:42:19:01:33:98:8a:fb:12:63:71:1b:7c:27:27:
b7:bd:37:87:88:24:1a:78:63:77:56:3c:1e:36:38:
5e:18:4f:5f:66:0a:04:63:29:5e:9c:30:ef:87:ff:
c3:9d:14:d9:ba:5b:3d:93:c2:9a:0b:72:d1:8b:b8:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:70:FA:C7:BC:2C:5E:26:30:F6:1B:22:C3:71:76:63:B5:1D:64
X509v3 Authority Key Identifier:
keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:22:39:2b:27:7e:b1:73:8c:c4:7c:5e:b2:2c:6b:8d:29:
cb:c8:b2:f5:95:03:48:c9:e9:3f:7b:00:67:0c:df:9a:ac:71:
fd:f1:a0:ab:bb:1f:bc:7e:a0:04:72:ac:f6:a7:dc:0b:b4:cc:
47:7e:24:48:c6:47:1c:41:66:06:6a:f3:47:aa:a6:12:df:e2:
53:11:d0:31:e8:dd:be:a5:a9:e9:ea:08:94:f0:4a:fd:5e:72:
7f:a6:c1:1b:e8:6f:2b:da:eb:33:5d:3f:19:56:49:af:5a:37:
00:46:ce:87:7d:69:5f:9d:64:59:01:8a:20:d3:71:f9:8a:b2:
74:bf:56:98:71:3b:87:04:77:ee:5c:01:2f:f9:1d:de:8c:62:
63:84:e5:a4:4d:9f:b4:2d:0e:52:62:20:45:c4:db:87:fd:ed:
fa:1d:59:28:08:9b:fe:79:73:e7:c2:86:0f:10:89:5b:83:0a:
6d:95:c1:93:47:ca:7e:11:a9:02:f1:6e:8a:b3:6e:83:16:52:
ff:fc:80:cf:51:be:9e:c9:8f:75:ee:68:79:be:dd:c2:2a:c4:
c2:5d:f2:fa:00:b1:57:fd:48:21:3f:10:ca:03:f9:2c:80:36:
5d:99:74:14:9e:dc:c3:dd:8f:51:00:ba:e7:6d:75:4b:80:82:
dd:91:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:37:37 2026 by rpki-client