
Error: rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File: 7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier: 5p59DIUXoUu8Z+kpBVrFUjqkkBEST1bWF8qq2GsW44w=
Subject key identifier: C7:8B:94:8E:1D:85:C3:EF:D8:96:67:61:D0:3C:BC:50:EE:41:72:AD
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer: /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial: 0ABB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number: 0AB5
Signing time: Wed 23 Sep 2026 01:25:00 +0000
Manifest this update: Wed 23 Sep 2026 01:24:59 +0000
Manifest next update: Fri 25 Sep 2026 01:24:59 +0000
Files and hashes: 1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: k4t0iu4K4Sd9gJRI3QrJnWDuGmEIIKxDfWjfkqHEuvM=)
2: AD0F53B2BBB711F0AC4263C8DAE4EC9C.roa (hash: QTqu/VLWHbygv3MQ7118Jtj8nMfZaKlVi2bdNPp1Ims=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 01:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2747 (0xabb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AF, serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Validity
Not Before: Sep 23 01:24:59 2026 GMT
Not After : Sep 25 01:24:59 2026 GMT
Subject: CN=6ab32a6c-5135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:f3:7c:a9:56:b6:5e:b7:dc:d8:27:52:f7:
ce:c3:47:fd:b3:65:ba:78:8c:22:a7:35:c9:c7:ce:
1d:d4:6c:fe:8e:ff:e1:41:47:6b:a0:b0:b3:8c:54:
d0:28:a9:18:f3:13:24:60:e0:9f:ed:84:f0:a5:01:
9d:8f:67:e1:b8:8b:dc:1c:f5:ca:7b:c1:a6:66:dc:
f4:0a:ba:08:c2:07:27:82:a8:b3:75:3f:17:23:3a:
e0:16:72:56:6b:4a:12:fa:b4:6f:b8:84:aa:42:f3:
ae:a6:ed:db:91:9a:24:a0:a2:b3:92:70:d1:59:20:
6d:15:de:bf:03:95:d5:79:a5:a3:28:5b:f1:8d:18:
98:16:13:a3:25:d4:17:bc:21:41:d5:ae:79:7c:03:
55:b2:d0:70:00:8b:53:86:21:d0:9e:68:9f:92:5a:
86:4a:c1:b4:91:17:ec:1b:54:df:87:3a:a6:1d:d3:
44:13:21:26:a6:97:64:ff:ab:7a:e9:02:ca:ba:d8:
fb:df:c4:cd:ec:f9:bf:9e:b1:0a:21:81:59:1d:f2:
d3:76:93:cf:f1:41:80:90:cf:32:4f:88:89:f7:e4:
22:7c:7f:80:f2:73:7e:3e:10:2e:ca:51:5e:33:07:
53:9c:39:cb:c6:f6:7a:2a:9d:4b:77:8b:4f:30:0e:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:94:8E:1D:85:C3:EF:D8:96:67:61:D0:3C:BC:50:EE:41:72:AD
X509v3 Authority Key Identifier:
keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:9d:f3:37:04:69:0f:9c:53:1b:5f:0d:8f:28:db:19:12:
ed:d2:a0:57:25:dc:2f:ca:c0:68:40:9d:5d:ee:be:b6:74:9e:
36:24:a4:bb:4a:ee:15:d4:18:18:71:fe:3d:b6:a3:df:50:97:
ef:92:6c:d6:fd:a1:c0:0b:7a:27:ec:96:ed:30:31:f9:18:e9:
d9:97:b6:03:c9:b0:33:58:a6:c0:37:4d:22:36:5f:45:82:4b:
88:2a:25:9b:ec:76:85:41:b4:64:ff:d6:e3:48:f4:c7:f6:8c:
7b:14:4e:e0:c2:46:42:21:d4:fe:50:50:9d:ab:3c:e4:36:ce:
89:83:31:3e:a3:6e:1a:95:3b:f7:94:3c:7e:c2:9b:64:d7:7e:
80:06:71:66:32:50:50:9d:e5:07:a4:6d:4c:97:2a:5b:f6:a3:
92:8c:bd:47:39:4b:93:38:9c:01:45:86:0d:c1:79:dd:58:6b:
d8:62:01:f8:c0:8d:3e:8e:a5:e5:97:f2:8d:44:97:43:7e:54:
a2:b1:b3:c0:59:df:9a:ef:e9:98:e8:d2:98:46:db:b0:25:24:
d7:d2:f6:39:fa:4d:5c:8e:f2:66:9a:e3:2d:99:89:2b:cd:8a:
e4:41:5b:63:88:63:e6:4c:e8:0e:ae:2e:f7:bd:c8:5f:18:c3:
26:9a:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:47:03 2026 by rpki-client