
Error: rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
File: 8oCesrM_mm8nojXfSsFD0ZKvTiA.mft (raw, json)
Hash identifier: ycvWlT8IsIOMYET7EZ2JXmPTa6gilEIbGUC9ihcR2bA=
Subject key identifier: 0A:91:9F:97:BB:2B:71:3C:11:BC:00:D4:C4:7C:EC:56:BB:3C:7E:5F
Authority key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Certificate issuer: /CN=F362D462AF/serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Certificate serial: 017E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
Manifest number: 0179
Signing time: Sat 14 Nov 2026 05:13:34 +0000
Manifest this update: Sat 14 Nov 2026 05:13:33 +0000
Manifest next update: Mon 16 Nov 2026 05:13:33 +0000
Files and hashes: 1: 8oCesrM_mm8nojXfSsFD0ZKvTiA.crl (hash: aC/TxEztJraxmoNanEgJGiPyOG9B0dLTrlJQ0rYEM5s=)
2: B2C8AACAC52F11F0998AD295DAE4EC9C.roa (hash: M1WCEGgxvoFjPYMq+CtmmycDaqSwGszFTRcc1Y1aToY=)
3: 45DD78D8C52E11F08D363A8DDAE4EC9C.roa (hash: yfdoYAwEYWo4igb+kX7l8vEmL7IfitH9Vwqq7einS1w=)
4: DE3F4FCEC52F11F0BE75EE95DAE4EC9C.roa (hash: ZoPAKhD86vIDvu9auYJyv1OJTVxIksNymQURFZTgdYQ=)
5: 26BDEBE4C52F11F0A755A591DAE4EC9C.roa (hash: RjPpOx06Fz/3A2OGNli01TWWFc5ri4vhGZoXWXhU+F8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Validity
Not Before: Nov 14 05:13:33 2026 GMT
Not After : Nov 16 05:13:33 2026 GMT
Subject: CN=6af7edfe-f7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:a1:d5:6a:57:08:90:ef:71:b9:cd:a2:b8:
d0:5f:a0:36:dc:d6:cc:76:f1:f9:e4:93:06:67:bf:
7f:ac:84:ef:c4:95:28:4e:fa:86:2b:31:82:8f:07:
cb:06:73:51:ba:27:8f:23:b1:70:46:2b:3c:3d:2f:
8c:6e:70:96:15:2f:e7:7a:f4:80:32:8e:7b:1b:2f:
ee:0a:43:d3:ca:22:77:df:ca:c9:94:16:d9:c1:14:
fe:56:22:3c:a1:78:b6:ce:97:4d:24:8c:8b:62:1e:
1f:ca:d6:6d:15:2c:d6:dd:60:c5:aa:1f:7f:88:06:
0d:9e:0f:03:fd:c2:87:b1:80:a0:b3:68:47:2b:80:
30:98:5a:80:81:66:d3:b6:39:9d:af:60:30:85:50:
d1:58:21:bf:8f:d4:59:7d:9e:37:32:ff:11:17:8d:
7c:3e:66:ea:e8:cb:54:b7:97:98:90:3a:83:70:e1:
d2:4e:65:f4:b6:1f:82:35:6f:bc:67:ed:02:1b:e2:
64:17:da:e7:76:64:16:e2:06:2a:5e:06:35:b8:f2:
b3:5a:d5:1c:70:39:57:12:62:49:1c:8e:e3:8e:45:
d1:0f:d6:46:e6:ae:c1:34:a6:f6:bc:d4:5e:59:7e:
b9:7c:42:8e:88:f7:12:c7:ce:03:d1:56:67:58:58:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:9F:97:BB:2B:71:3C:11:BC:00:D4:C4:7C:EC:56:BB:3C:7E:5F
X509v3 Authority Key Identifier:
keyid:F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f2:7e:2c:b5:7e:f5:e2:d6:7f:2a:3a:ce:cf:49:77:b2:ed:
70:14:2c:c5:cd:b8:da:b7:29:00:4d:fc:2e:6a:25:09:8f:d1:
ac:38:08:8e:59:f0:17:53:2d:c6:85:23:12:5a:ec:ba:17:5a:
8c:f6:b8:83:8c:d5:e3:aa:fe:24:af:1c:57:af:70:9b:cd:14:
39:c3:d1:94:f5:24:39:78:51:16:87:4f:d5:ef:89:23:df:ce:
24:29:86:8c:54:67:7e:41:8f:37:0f:d8:19:10:1d:cb:21:9e:
c7:bd:f9:ee:a9:06:39:00:27:f0:2f:21:85:ad:8f:aa:4b:dd:
29:c3:9f:e8:29:bc:28:7f:72:79:f4:80:ab:ae:10:f5:f4:0f:
ad:3d:8a:46:35:9a:04:d1:ac:e8:52:df:34:9f:37:64:7e:65:
9e:de:93:fb:3f:d6:15:ac:4d:3f:03:50:1c:09:0f:f7:31:e9:
fd:ab:9c:81:8d:10:85:5c:5d:1f:7b:a7:c4:91:08:bb:51:0b:
d4:f0:f8:85:98:2e:76:93:e5:21:83:94:7f:53:5f:07:71:8e:
49:33:3b:4f:74:41:bf:39:39:4c:6d:1c:ca:b3:40:ab:e6:4f:
03:89:db:d4:56:67:40:1c:64:3c:7f:7a:1e:8c:32:76:55:f5:
ed:67:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:06 2026 by rpki-client