
Error: rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
File: X6EtceluL4GPuSSQs3lvC3cBZW0.mft (raw, json)
Hash identifier: wQc2MeHr0272Ef7xjZ6Zn+PWIENkTIBg33Qv5xGB++c=
Subject key identifier: 66:D1:A6:70:4E:FD:D8:29:8A:87:E5:99:B1:97:24:75:68:5F:A3:02
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Certificate issuer: /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial: 019E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
Manifest number: 019C
Signing time: Sun 27 Sep 2026 05:07:02 +0000
Manifest this update: Sun 27 Sep 2026 05:07:01 +0000
Manifest next update: Tue 29 Sep 2026 05:07:01 +0000
Files and hashes: 1: X6EtceluL4GPuSSQs3lvC3cBZW0.crl (hash: 79LR7kTlEFeb4mq03Fq4pAp0Ah9Tj3ixtN52AT42yp0=)
2: 261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa (hash: RDOBBGsvJhE0OkAO2/KgMOs6/gp2HdgBOnY1YQ2CAy4=)
3: 23AA3F847CB411F08F9595B0DAE4EC9C.roa (hash: 3MSrx7uq5AEGHOWAFB7THkIOfn/SgWoN7PEmoZN2Nzo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Validity
Not Before: Sep 27 05:07:01 2026 GMT
Not After : Sep 29 05:07:01 2026 GMT
Subject: CN=6ab8a476-da75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:3a:3d:a3:82:05:73:ca:4d:6e:30:42:e5:
4d:68:22:ff:ec:55:cb:f2:9b:05:c2:c0:6c:0b:ac:
7d:82:c1:fe:02:dd:2a:cf:a8:0e:72:38:61:ec:99:
8f:79:bb:62:8d:15:92:79:70:a7:68:68:76:a8:19:
01:40:c3:4d:2a:fd:08:1b:d7:69:0a:6b:79:64:eb:
4f:93:1b:c9:6a:ea:f6:27:8b:35:17:32:08:87:c2:
16:41:18:71:c7:04:1e:35:74:8b:b0:b0:0e:b3:89:
06:7d:44:60:2e:f6:64:af:22:09:13:23:5a:ad:ee:
43:29:0b:60:46:8a:06:63:1f:3a:5c:60:aa:90:96:
c2:4e:07:9d:f0:2d:77:df:99:08:43:0e:f2:49:f8:
6d:93:5e:43:7f:bc:d1:8e:dc:eb:aa:88:30:2c:90:
11:a2:4b:bb:25:71:f6:3a:f9:ff:58:8b:5e:81:8e:
6c:50:cc:4a:a3:95:78:3a:1c:ce:2a:63:18:58:10:
92:72:27:61:f8:11:34:b7:a2:bb:b6:0c:08:95:8e:
b2:1f:86:bc:1d:09:e0:ec:b7:f9:13:d2:cd:4a:54:
18:88:0a:63:c6:68:2a:f5:c1:9e:83:e2:30:02:41:
04:7c:db:1e:29:d0:fc:38:27:6a:50:85:cd:b8:89:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:A6:70:4E:FD:D8:29:8A:87:E5:99:B1:97:24:75:68:5F:A3:02
X509v3 Authority Key Identifier:
keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:08:63:96:23:c4:3e:51:28:fa:64:a4:dd:a3:59:bb:c0:
d4:40:ac:cd:22:07:2e:9b:7f:24:ef:64:b6:f3:c8:f1:bc:f0:
77:38:73:25:49:04:d1:17:4f:50:ae:48:e3:26:70:0f:59:0c:
d1:f1:3d:af:a7:f9:c9:ee:11:19:0a:25:32:1b:68:d0:b0:39:
e8:fb:e7:ba:f6:b7:71:b6:1c:de:28:cd:07:dc:51:f1:38:a2:
bd:86:7c:73:bd:63:e6:bc:4d:8c:5a:3b:79:55:0d:db:be:2f:
61:d2:c9:8a:71:81:7d:0b:1f:39:7f:fc:62:28:4c:60:5c:ea:
fa:1c:b7:e7:53:f6:4f:f4:12:d0:b3:bd:e9:0c:8f:b0:16:6f:
38:74:74:de:be:54:27:88:a5:ca:4c:1a:9c:6d:1d:ca:89:7d:
d3:e7:e6:39:a5:91:9e:bb:0d:ae:44:6b:6e:35:c4:3e:13:82:
2e:1e:a6:73:91:a2:b1:44:56:ef:56:0e:c7:b5:86:5f:9b:5f:
38:45:b0:e2:0d:e0:f3:f9:a5:71:98:ec:77:0b:7f:93:7c:bf:
4b:b3:43:72:90:4e:14:c7:87:89:f7:01:7c:bd:d4:37:7c:ed:
56:9a:e5:d9:e1:c7:78:9a:69:f9:43:03:2a:0d:10:b6:cf:8d:
98:ed:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:33:49 2026 by rpki-client