
Error: rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
File: HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft (raw, json)
Hash identifier: tKA/Bg1lNt13GmwfvhP/LNmgMxJuJRG3ig0Qo6SESG4=
Subject key identifier: 56:5B:DD:73:AA:0A:D9:67:94:2A:10:7A:E8:6B:61:40:A1:CD:7C:38
Authority key identifier: 1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
Certificate issuer: /CN=F36203F3AF/serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
Certificate serial: 07
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
Manifest number: 06
Signing time: Sat 14 Nov 2026 06:07:51 +0000
Manifest this update: Sat 14 Nov 2026 06:07:51 +0000
Manifest next update: Mon 16 Nov 2026 06:07:51 +0000
Files and hashes: 1: HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl (hash: Xk1V10nrag7u2vt8mBhlkClfYAba/+3uhsDgflKFL5M=)
2: 5306BE60DCFD11F1990D3EB1CE1D38B0.roa (hash: oXIw6uLdYeIlfEmP80wBzeBBO7PWU1qC9mxgLFsuLjA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36203F3AF, serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
Validity
Not Before: Nov 14 06:07:51 2026 GMT
Not After : Nov 16 06:07:51 2026 GMT
Subject: CN=6af7fab7-e396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:66:23:7f:b8:b0:b1:1e:2d:b7:c5:04:f9:
f7:57:2a:eb:4e:91:dc:06:1f:e6:4a:e5:27:76:d6:
03:02:e1:46:f5:f7:e2:2b:ba:b4:e6:95:0c:08:a1:
4f:41:af:ab:99:ab:15:48:df:0a:ff:76:d9:c9:dd:
81:6b:db:94:80:67:6c:a4:7e:0a:05:b3:3f:4d:76:
97:fc:ce:dc:8e:ba:d0:ac:89:bd:c5:fb:95:9d:17:
0d:1b:3f:b2:37:24:04:23:81:58:0b:99:5f:31:5b:
d7:76:db:c2:31:5a:5a:bc:9b:2e:06:af:d1:bf:a6:
1a:26:18:bf:b2:05:7b:c7:2e:ea:56:d3:5b:cd:6d:
68:50:cf:dc:b8:04:a9:0f:84:27:8d:db:eb:6a:d0:
a7:7c:69:c2:be:35:7d:2d:59:ed:e3:5e:0b:4b:f9:
3f:51:31:80:89:a9:84:15:17:63:72:b1:b2:bf:0a:
d8:2e:12:9b:a6:c7:18:1e:f6:db:9f:db:93:c9:21:
a0:18:5e:66:39:03:48:78:5d:d3:c9:ec:21:37:81:
e5:93:80:be:f3:6b:c3:0b:82:f4:45:0e:54:17:2b:
83:9a:ed:42:26:4a:49:e7:06:18:c3:73:04:41:e4:
02:90:09:75:78:a3:78:86:e9:7a:2b:d1:b3:bd:cd:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:DD:73:AA:0A:D9:67:94:2A:10:7A:E8:6B:61:40:A1:CD:7C:38
X509v3 Authority Key Identifier:
keyid:1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:c9:3b:30:2d:0d:91:6e:4c:d2:a3:16:69:b3:a4:d5:9d:f2:
cd:21:66:7d:41:46:7f:d5:4d:10:c7:a6:1d:60:07:6d:27:5a:
3d:b7:34:98:9f:81:2a:90:3c:45:80:00:a1:06:3a:db:ff:9c:
af:7a:a2:2a:b6:b9:e4:34:45:8a:7d:dd:6e:2f:c4:01:8e:65:
10:69:7a:29:5d:b7:49:af:fc:9e:af:27:f8:0e:80:6c:32:23:
c4:77:93:0a:cc:e2:91:9c:2e:5d:57:af:c1:85:ea:9a:50:45:
25:fd:9c:c2:2c:eb:5e:05:0f:9c:c7:41:46:2b:27:d6:4e:6f:
4d:0f:21:c6:0d:66:7b:9f:4d:80:79:72:c3:e5:56:1d:ec:ad:
b9:36:bd:cb:2f:8a:ca:f2:32:fe:18:fd:4a:06:ab:26:40:04:
31:37:3e:74:21:df:51:de:75:06:4b:90:3d:70:0e:d5:4e:fa:
67:c7:51:5d:40:65:54:58:2c:72:c5:b0:ec:a2:38:6a:79:59:
fe:43:41:6d:fc:41:b1:10:be:85:16:62:d9:e2:36:58:b3:fb:
51:e2:5f:82:f0:16:87:f5:51:77:40:af:93:36:df:98:40:f1:
5a:8b:7b:a6:34:37:23:62:d1:d5:01:fd:1d:55:9a:d8:3b:ac:
6e:e4:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:20 2026 by rpki-client