
Error: rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
File: uX3EYJnNUPzymdpegrAFZGmExPM.mft (raw, json)
Hash identifier: X37I4HgnwTSLiQO74DSi7XHpRPYk1gEYPS+FgNdYiUs=
Subject key identifier: 10:74:47:AE:1E:0D:08:8D:E7:54:3E:E8:CE:52:D8:B7:7C:E1:41:1B
Authority key identifier: B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
Certificate issuer: /CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Certificate serial: 0A3D
Authority info access: rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
Manifest number: 0A37
Signing time: Thu 24 Sep 2026 01:36:54 +0000
Manifest this update: Thu 24 Sep 2026 01:36:54 +0000
Manifest next update: Sat 26 Sep 2026 01:36:54 +0000
Files and hashes: 1: uX3EYJnNUPzymdpegrAFZGmExPM.crl (hash: LAB3klkeggzyq0s1klI2mDE+fLjzj4qDmANBqT78gAE=)
2: DB5FF4881C5611F18A871384DAE4EC9C.roa (hash: kkOMtAohgLfz+qkesL09UxzK9jTRPmNkDxZd658iCYs=)
3: 77EDD0961C5611F194102C82DAE4EC9C.roa (hash: yb13uKqvOaUhwTpukxMYPaYtf0MpRvzLLQNXovaDCao=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C7E9AR, serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Validity
Not Before: Sep 24 01:36:54 2026 GMT
Not After : Sep 26 01:36:54 2026 GMT
Subject: CN=6ab47eb6-6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:ec:68:74:e9:77:fd:5f:f4:aa:7f:97:fd:
7d:d9:c0:a8:63:eb:0a:0e:bb:46:36:1d:72:bd:9d:
9d:5d:67:13:e9:a5:14:5f:4e:20:90:96:2f:b8:a9:
40:a0:01:7d:f3:4d:f5:4d:cf:6f:56:7a:e1:d7:70:
74:9a:9f:a1:5a:1a:ec:6b:39:56:6f:94:d8:96:73:
41:80:f1:25:82:04:d1:c3:db:9d:d4:31:e3:3c:69:
e0:70:da:fe:50:06:91:3a:af:c6:e7:09:d2:4f:af:
43:82:8f:67:38:b4:6e:80:10:73:29:38:82:66:e1:
05:da:e1:6f:96:af:84:df:9a:1b:d1:9c:d1:b6:ec:
4f:35:4c:50:77:06:12:63:1e:90:b8:c0:72:4c:bc:
74:8d:2a:93:f4:f0:a9:6c:0a:38:0e:90:27:96:f5:
81:ab:ad:4f:7d:66:a4:7b:f1:3a:13:52:93:fd:9c:
fb:0f:c4:55:80:0b:4f:1a:c1:2e:40:0f:e9:01:1a:
a1:ec:b9:a3:a2:93:de:04:0a:0a:b4:d4:3c:13:64:
e8:7b:7d:97:17:ba:93:4a:a0:31:7c:c3:92:11:c1:
fe:c4:68:f2:0a:2e:6e:08:c5:49:04:33:ee:5f:84:
33:20:3c:fa:a3:05:99:0f:d4:16:2c:53:b1:48:83:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:47:AE:1E:0D:08:8D:E7:54:3E:E8:CE:52:D8:B7:7C:E1:41:1B
X509v3 Authority Key Identifier:
keyid:B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:2f:bd:4c:1d:47:20:d8:c4:82:f1:7e:43:6f:33:46:4b:
45:d1:03:25:56:10:c6:f7:15:d0:4e:48:e9:64:04:0a:82:23:
5f:1e:8f:b9:72:d9:16:72:04:cc:58:7b:50:97:ba:d2:58:d4:
ac:4c:e5:a8:a7:9f:b2:5b:73:55:77:c7:bb:ba:b0:34:3f:6c:
85:e4:2e:86:95:56:75:e3:4b:25:a5:f4:2f:5a:78:85:94:86:
fc:5a:e4:f3:1e:f5:b1:72:1e:d1:db:32:bc:57:ab:d1:16:21:
d9:68:cf:9e:a5:77:01:dc:d2:98:36:d4:9b:7e:d1:13:07:ad:
84:db:92:5b:e4:6f:57:5e:da:c6:aa:75:75:b4:62:78:9c:3d:
fd:a2:e2:04:eb:6f:24:2c:83:82:fc:49:db:08:8a:e1:c3:b7:
f7:6b:67:3e:67:0e:9d:fe:12:ad:af:b9:ca:04:51:34:4f:c2:
c8:b9:e3:c5:ba:5d:af:ad:09:9d:3d:83:c8:9b:27:19:04:cf:
8d:9f:37:30:86:6f:1d:92:48:a6:08:92:5b:ce:7c:6e:ea:00:
9f:a2:43:93:d0:9a:db:33:18:a6:f2:3c:62:72:6f:61:52:83:
bb:b9:a7:73:9d:58:8a:24:a1:37:43:a2:03:ef:b5:45:b9:c6:
a3:ab:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:54 2026 by rpki-client