
Error: rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File: 1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier: MN6JPVtCgqfs4s/HxETGRJxsrNwQ/x5T2u6kyB9szwY=
Subject key identifier: 24:14:DC:69:93:6F:CF:FF:A7:EE:BF:CD:99:4D:FA:1A:E8:4F:0F:F8
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: 0BCF
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number: 0BC8
Signing time: Fri 25 Sep 2026 01:15:07 +0000
Manifest this update: Fri 25 Sep 2026 01:15:07 +0000
Manifest next update: Sun 27 Sep 2026 01:15:07 +0000
Files and hashes: 1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: pCGtTcxBltipanLKDBAuTFMSzsvQjowLPUsmUgPWvRc=)
2: 0B137878847E11F1928E0FC8CE1D38B0.roa (hash: qfqFQsOXT0JK/QxiaE+cs9hsoJFXY0fQqzicfQ5U3lA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Sep 25 01:15:07 2026 GMT
Not After : Sep 27 01:15:07 2026 GMT
Subject: CN=6ab5cb1b-c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:3d:2f:5f:17:e6:05:e6:51:f9:ed:55:99:
89:50:6d:28:2f:81:f7:d7:3f:c0:a0:3d:d9:9b:5c:
6f:89:e1:f2:34:ec:b5:2a:c0:f5:a2:fd:98:c9:d7:
18:47:d3:59:2f:bd:13:84:c3:32:9b:43:7b:d6:0a:
ea:45:b3:5e:ba:3b:a6:89:4f:da:af:d8:37:56:2c:
2e:14:5d:0b:96:50:e6:0e:c1:ea:30:41:f1:94:8e:
74:f9:da:02:8f:dc:71:fc:9d:2e:ba:77:ef:77:41:
f0:10:be:18:81:b3:cf:68:65:41:61:2c:66:a2:3f:
c8:17:5d:44:06:cc:ba:72:0f:a3:ec:33:db:d1:e0:
57:25:59:2d:fd:f0:1d:2b:6a:ed:66:f1:65:5f:40:
90:36:15:54:9c:bd:ad:c3:47:d8:76:f5:4a:ab:df:
68:84:11:8d:f4:e6:70:45:9c:fb:fe:b5:00:da:42:
83:3c:c3:91:79:b8:74:fe:68:53:d8:9c:59:b0:0e:
a1:61:0d:04:79:92:5a:c3:f5:ed:bc:4a:1e:ea:1d:
8d:44:97:8c:06:67:e9:20:bb:8a:8d:e1:11:99:70:
9d:f4:fc:10:24:fe:40:11:57:e8:05:ea:2c:a4:c1:
5a:86:8f:b4:31:9d:51:89:8b:0c:bb:ba:72:93:a0:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:DC:69:93:6F:CF:FF:A7:EE:BF:CD:99:4D:FA:1A:E8:4F:0F:F8
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:0c:ca:37:cf:64:0a:40:bd:98:53:37:4b:77:f6:ea:5c:38:
61:8e:12:9e:51:fd:6b:5b:f7:b6:f2:da:96:6e:b0:25:e0:ad:
0b:6d:e7:93:a4:e8:ef:9b:8c:ef:ac:fc:9d:a8:ad:64:28:21:
aa:78:8d:04:9a:0d:49:c6:b1:5a:60:60:0a:22:b3:b2:b2:55:
4b:cc:a2:48:0f:47:20:01:40:5c:f6:27:4e:c9:4a:ec:7d:bb:
14:c4:2e:47:37:fb:a8:0b:a3:c9:82:f2:be:04:62:4e:df:81:
8a:8f:4f:de:08:f3:41:ac:58:90:3d:b3:94:d7:41:56:57:b0:
ea:27:f4:f5:a0:12:b8:c0:eb:65:9e:38:f7:e9:a0:15:74:73:
59:6c:6d:c2:cc:5e:d8:f7:2f:a8:4d:09:a2:c8:5f:17:19:18:
45:37:2a:d6:58:1d:70:ff:eb:4a:e2:a1:23:78:9b:7d:bd:f7:
c1:0d:20:39:49:15:6e:28:84:9e:f7:c2:b4:39:7c:a0:66:92:
84:10:f5:2f:7f:14:fa:b4:6e:2a:42:57:7d:8d:cd:50:96:aa:
a3:6c:bf:4a:6c:33:91:31:d7:87:93:55:3b:f9:2e:2d:e3:47:
f1:5a:ed:d0:48:dc:31:a0:40:1e:25:37:ce:fc:ad:1a:a7:a1:
1e:4f:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:38:50 2026 by rpki-client