
Error: rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
File: -wB7KUv_2n8YvxAiZXr2TarOGL8.mft (raw, json)
Hash identifier: oJ/t4uP6uMATgSpzmFw8Z46OBo2w1Ch4kDpguGkGzc0=
Subject key identifier: 55:97:73:72:98:0E:80:11:28:6D:BC:B0:FE:AC:D1:BE:95:3B:FE:E3
Authority key identifier: FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Certificate issuer: /CN=F362438EAF/serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Certificate serial: 019F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
Manifest number: 019D
Signing time: Thu 24 Sep 2026 05:05:27 +0000
Manifest this update: Thu 24 Sep 2026 05:05:27 +0000
Manifest next update: Sat 26 Sep 2026 05:05:27 +0000
Files and hashes: 1: -wB7KUv_2n8YvxAiZXr2TarOGL8.crl (hash: mCi4/uY6buclZZH50WyJQg+/NI4rSLVD8b5bfG7hbag=)
2: ACA77C287C1B11F0AB1307CEDAE4EC9C.roa (hash: 6BnYFcUifcR3Iy0hgeVZEvBCKEWqd+xpwV9gtPX4zbE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Validity
Not Before: Sep 24 05:05:27 2026 GMT
Not After : Sep 26 05:05:27 2026 GMT
Subject: CN=6ab4af97-b4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:ce:59:6c:21:af:e2:47:9f:e9:7c:60:7b:
2a:85:a9:7b:47:23:72:48:96:df:5e:c0:7b:fc:4d:
9a:59:99:2b:21:ab:21:49:26:3f:86:8d:31:90:e0:
49:6c:58:19:f5:3d:3e:e2:ec:00:10:60:3f:b2:4e:
c8:2d:7d:38:97:46:4e:68:67:32:28:f3:d2:69:8a:
d6:cc:da:44:05:b3:49:73:14:e9:cf:f5:5f:55:90:
23:75:ca:fd:47:90:55:48:ac:43:16:67:f6:fa:b7:
fb:c2:36:43:db:d7:02:5f:5a:eb:d9:8a:9c:83:b0:
03:8f:0a:ce:a1:dd:9f:f1:a8:28:51:e8:a6:93:f0:
c0:d1:7d:dc:72:17:c7:70:c4:89:08:a9:dc:29:1e:
08:05:b1:70:d7:87:40:10:73:ed:be:ce:55:23:4d:
eb:a3:38:88:a8:b8:1c:83:57:88:dd:17:7a:e7:33:
4c:b7:5e:68:f0:0d:02:3e:de:0a:4d:16:c7:06:e7:
45:3a:30:74:b1:23:49:2e:88:08:43:af:08:cc:c0:
1d:e5:e5:79:49:56:1a:54:72:7b:d1:fb:a3:e0:e8:
c5:4c:ae:ca:7d:1b:55:f1:44:45:22:fc:22:75:ca:
38:2a:f9:79:87:3f:9e:24:fc:11:2e:ca:95:46:b8:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:73:72:98:0E:80:11:28:6D:BC:B0:FE:AC:D1:BE:95:3B:FE:E3
X509v3 Authority Key Identifier:
keyid:FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:21:ce:34:2f:0d:a1:d8:32:bd:8f:c8:d0:bc:12:da:cb:
5b:90:a3:19:f5:e2:49:3c:9a:d8:63:6f:5a:27:56:82:81:4d:
23:70:8f:79:99:6d:4e:6f:29:a2:6f:a7:90:e0:44:43:1d:f7:
77:45:16:75:d1:91:e4:89:bd:b2:fa:25:cc:86:98:a5:f0:5a:
06:c8:f9:28:99:bc:6a:0b:9f:ed:66:6b:23:43:56:5f:73:31:
20:70:d3:96:45:a6:af:f9:57:51:0d:b1:3e:3f:d5:92:75:e5:
11:0f:1a:6c:b1:35:57:d5:e8:13:82:6a:46:a2:94:fd:a4:e8:
a7:b1:a2:97:b1:5d:f0:ac:3e:2d:05:5c:10:cb:dd:60:6d:e9:
ac:69:81:0e:44:53:42:39:96:96:e2:a5:b5:04:8b:e4:ad:4c:
23:dd:31:93:c5:fe:b3:67:af:a8:0c:95:37:53:23:62:27:22:
89:f0:2c:e5:4a:66:56:0d:5c:8f:34:eb:1e:c7:fb:fa:e0:bd:
dd:ae:26:8f:58:96:41:c7:46:cb:dd:ae:11:81:8f:49:a2:d8:
2a:ea:7f:76:ac:ec:fb:67:81:f3:52:82:8a:29:8a:a4:1c:fa:
0c:d0:1a:f9:15:1a:e9:70:f4:12:35:c0:e8:05:b0:9f:98:4e:
32:5d:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:22:06 2026 by rpki-client