
Error: rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File: ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier: cxm/4GWhL5QVs7QNwstl5uHBYb38Vo07jFwwqZg3/20=
Subject key identifier: 0F:AA:65:81:CB:15:BB:CD:EC:63:A5:AF:F0:AD:F0:2A:A0:23:36:F8
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer: /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial: 03EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number: 03E7
Signing time: Sun 27 Sep 2026 03:59:39 +0000
Manifest this update: Sun 27 Sep 2026 03:59:38 +0000
Manifest next update: Tue 29 Sep 2026 03:59:38 +0000
Files and hashes: 1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: dE4LJtoYwqq55szwooHmUAH8Jd2PYBAiycj8lbcoF7E=)
2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Validity
Not Before: Sep 27 03:59:38 2026 GMT
Not After : Sep 29 03:59:38 2026 GMT
Subject: CN=6ab894ab-2fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:10:e6:15:ae:b9:f0:ab:cf:9b:55:09:f2:
3e:e8:0d:10:c7:b5:50:72:01:23:41:2b:7e:3a:f6:
40:c7:23:88:ad:0e:f0:38:d4:6b:70:f5:b7:72:35:
3a:dd:4e:4f:00:93:97:13:f6:f4:59:22:e1:25:46:
27:19:9e:32:ce:b2:d5:e4:ab:90:a7:77:27:b7:b5:
00:5c:8d:f1:a6:2e:b4:3f:8b:81:9d:88:1e:d7:b1:
36:08:ac:24:12:15:fc:08:39:bc:dc:7d:ee:d8:75:
c4:67:d1:95:52:82:c4:b7:a8:44:11:df:c0:15:2e:
ef:8c:99:f8:25:14:8a:fe:97:9b:dc:21:b3:96:38:
6f:81:93:52:40:09:8f:56:79:b1:28:be:7b:db:eb:
6c:a6:a2:15:71:45:e5:e3:55:54:dc:fb:05:44:22:
31:e8:9b:94:c2:a8:b4:c4:45:a6:98:b5:e1:38:24:
4b:56:fc:45:f6:85:a0:fa:2f:52:78:da:99:1b:55:
cd:fe:83:7c:31:0d:63:fd:8d:52:e5:18:63:56:20:
87:11:72:c5:3b:58:c6:06:75:3d:ce:bb:b3:29:89:
71:08:64:c1:1e:44:a9:28:16:2b:b7:0c:57:48:41:
f8:9c:90:52:f6:3f:65:9c:28:d1:1e:a3:98:be:aa:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:65:81:CB:15:BB:CD:EC:63:A5:AF:F0:AD:F0:2A:A0:23:36:F8
X509v3 Authority Key Identifier:
keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:01:01:d6:f5:1f:56:84:80:ff:83:0b:22:ac:ea:6a:28:
cc:5e:d2:dc:3e:18:91:ed:e0:de:6e:4f:a7:ef:5b:ee:b5:e9:
bf:c1:65:54:0a:c6:e9:5b:8a:b4:e2:ae:98:ab:ab:63:1a:2a:
65:c3:5c:7c:fc:e8:58:48:ec:83:83:dc:f5:e0:de:59:45:7b:
30:78:df:49:5d:11:ed:0d:d9:78:53:b0:b6:20:d4:aa:a4:de:
74:ef:85:ed:1b:82:e9:27:ab:84:80:f1:01:83:5d:1f:03:33:
64:2b:d3:93:6b:d5:e7:1d:2d:dc:a8:91:98:b5:c5:43:88:3c:
da:c0:84:fe:13:cc:5e:09:9e:19:ab:9f:6b:47:eb:cd:b7:dd:
75:85:60:5e:80:ce:a0:f5:40:b6:5a:45:c9:c3:17:66:e3:cb:
1d:7c:86:36:96:3e:d4:90:10:fe:0a:a5:8a:fe:c6:37:86:3f:
cd:e3:9f:d2:23:ce:ad:12:00:66:05:9e:f1:00:57:37:1f:2e:
c8:38:0d:73:9a:f3:4e:83:48:4c:50:e6:fd:bc:ea:46:6b:f8:
03:b9:1c:96:58:95:f2:3d:bb:6e:1d:c6:f3:a3:20:e3:99:a1:
77:a0:9f:de:01:de:27:61:7a:bd:57:04:94:a4:69:03:c1:80:
49:1b:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:31:47 2026 by rpki-client