
Error: rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
File: WIdwDF8kkPVYQ4L55-dSatZVSLM.mft (raw, json)
Hash identifier: MkfYET+YwqMgMJ3gJBodjwAZYg6eZzPofN/ocjcc9Pk=
Subject key identifier: EB:01:2F:56:D3:F9:CD:AD:91:E3:67:D7:B8:5C:B7:FB:54:99:3C:04
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Certificate issuer: /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial: 07E4
Authority info access: rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
Manifest number: 07DE
Signing time: Sun 04 Oct 2026 02:09:53 +0000
Manifest this update: Sun 04 Oct 2026 02:09:53 +0000
Manifest next update: Tue 06 Oct 2026 02:09:53 +0000
Files and hashes: 1: WIdwDF8kkPVYQ4L55-dSatZVSLM.crl (hash: UvI/dFL59RXJeZLJpm0j6OwrTt2SIn9tQOBdvWAaVNk=)
2: 25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa (hash: HQj0ezVFNm0IyaCMur10comY5AWBNF/4kn1xaLyn1Ak=)
3: 89E136148F0911F1BE9146B4CE1D38B0.roa (hash: 0Bibn/zgW9nQetOuDrSsmtgMFzcRPNQvalv4kLZon/A=)
4: AF286D2C7B7011F18DD180F8CE1D38B0.roa (hash: t1UaMVD7lHB3+6q7/cetlK1vXbXkKAdnQU2pB0WVI4g=)
5: 459695BAD4DF11EB8D761947F8AEA228.roa (hash: V+fApY3tgq+qpHqlmWamZgFjrncOkO2wIFJyIOrmaiA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Validity
Not Before: Oct 4 02:09:53 2026 GMT
Not After : Oct 6 02:09:53 2026 GMT
Subject: CN=6ac1b571-0a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:74:7f:e8:57:48:24:6d:f7:15:1e:d0:2c:
ba:81:62:d0:12:c7:e9:b7:a5:1b:a1:d8:4c:bb:89:
a1:9a:d8:c7:2d:19:b0:8e:57:12:07:92:a4:b9:55:
e7:f0:53:6a:94:8f:09:5c:e1:68:34:b9:ab:2d:66:
43:9c:f0:e4:d5:35:22:bb:af:fc:ab:f5:78:d1:56:
65:cd:8a:42:5f:14:43:73:99:92:3b:0f:5d:77:70:
f2:3a:45:7a:06:d9:0d:db:94:f7:d7:48:37:77:86:
f8:ba:50:8b:f3:8e:eb:f7:47:c4:e3:a9:bf:6e:12:
0f:ca:ba:d5:6b:51:39:1a:21:b2:83:69:d9:e7:d2:
30:d7:5e:49:38:04:5c:b7:5e:6c:4b:a3:ec:8e:b0:
8a:72:98:6c:f2:79:4f:0c:0e:78:89:ae:77:df:9b:
4e:05:59:5b:b7:ad:7c:48:bd:67:8d:0d:ef:c2:8b:
93:4e:e7:33:08:dd:36:c5:b7:14:77:ef:43:74:5e:
41:5d:72:7f:40:12:0a:42:50:20:fb:c3:ff:35:f2:
d5:36:51:f1:57:b5:52:fe:59:7e:99:51:18:7e:6e:
c5:75:4f:d4:5a:7c:f0:ef:69:f6:db:0d:a1:57:2f:
27:0c:78:e8:ce:aa:ea:2a:7f:fa:d7:03:b6:73:4f:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:2F:56:D3:F9:CD:AD:91:E3:67:D7:B8:5C:B7:FB:54:99:3C:04
X509v3 Authority Key Identifier:
keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b0:6d:a5:3a:cc:49:52:0f:9a:28:f8:bc:e6:c9:03:66:cc:
b0:d0:30:4d:b7:49:fc:7a:c5:e8:f4:43:b8:be:ff:4a:6e:d9:
05:c7:13:6a:24:25:c6:3b:18:a6:bd:c4:a7:f6:ab:7d:40:05:
05:9f:70:b3:a4:8b:3d:85:29:ab:ec:f8:6b:f5:bd:b2:96:34:
cf:d2:75:7f:39:89:40:43:3c:4f:11:1c:b6:0d:3a:21:9a:dd:
2d:02:52:b0:86:d4:70:06:a2:fc:d2:53:63:35:15:29:77:a2:
6a:df:db:61:bb:af:c6:9b:3a:de:5d:37:89:a4:53:ca:6b:ce:
66:2c:8c:bf:d2:f8:50:b5:31:4c:31:73:b3:72:5a:82:44:6b:
09:78:01:9e:d2:34:61:1a:de:5d:c9:ac:cc:fc:b0:fa:00:27:
e0:22:a4:2c:6b:cf:19:52:7a:08:14:dd:46:56:29:1f:8e:ba:
70:c4:bf:6d:93:1c:2c:a4:75:b8:94:02:e2:79:0b:97:a7:29:
57:de:8d:4a:05:44:5c:09:26:28:96:7d:e0:c5:04:02:de:0e:
22:ac:ca:7b:96:14:4c:30:da:60:87:2d:1e:e8:2f:db:80:ec:
1b:f9:81:cb:ec:ab:2a:bc:b7:c1:f5:8c:68:71:7f:75:8b:3f:
4c:bf:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:43:47 2026 by rpki-client