
Error: rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
File: i2Qxm9V6EKYdSYU_G6miZt5alxM.mft (raw, json)
Hash identifier: qfIdGuVFICy92bkLOGjGt/caLnhNPutPBN8XY+XGpY0=
Subject key identifier: BF:39:B5:88:48:1F:46:63:92:FF:27:C6:8D:8E:07:8E:BC:D5:5B:E7
Authority key identifier: 8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
Certificate issuer: /CN=F3631F16AF/serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Certificate serial: AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
Manifest number: AC
Signing time: Thu 24 Sep 2026 05:33:08 +0000
Manifest this update: Thu 24 Sep 2026 05:33:07 +0000
Manifest next update: Sat 26 Sep 2026 05:33:07 +0000
Files and hashes: 1: i2Qxm9V6EKYdSYU_G6miZt5alxM.crl (hash: F4qOlMjRD613MqeGSfNIiX+auwHsEDW00TbEAcP++CM=)
2: 579189BA496911F1939025C0CE1D38B0.roa (hash: 9nu+V4jDpXzggMIj8Gg2sQVf+Ps0AHWXClLk8CxZNuA=)
3: C508B1FE48CD11F1B044A702CF1D38B0.roa (hash: s3yIGbVsantz+OaFdDfVniwJT32Pslq46usbKBVTHVM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3631F16AF, serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Validity
Not Before: Sep 24 05:33:07 2026 GMT
Not After : Sep 26 05:33:07 2026 GMT
Subject: CN=6ab4b614-8b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:c9:7f:8e:a5:09:d0:a9:67:49:56:ca:68:
99:5a:dd:90:a2:38:51:54:31:ee:fd:48:b7:9b:ad:
d8:f1:49:f9:1f:82:bc:a9:16:75:ff:20:14:7d:ea:
68:4d:27:31:12:19:bc:ba:5b:06:c6:2d:61:e1:fc:
a4:e1:5a:61:4d:76:46:6f:9d:1a:60:8d:48:9e:c5:
39:fa:52:bd:13:fa:32:da:76:11:3b:98:c7:ed:e1:
75:e0:42:6d:17:49:11:74:68:9b:0a:79:d4:49:dc:
a7:00:9b:87:3c:0c:98:cf:72:23:a0:af:7b:4e:81:
87:12:2d:20:94:83:2a:e8:be:4f:b4:c3:78:d9:98:
99:2a:36:2d:b4:00:13:5f:a2:70:de:84:b3:ec:25:
22:40:df:3b:66:e7:13:57:fc:cf:61:ef:9e:e7:f7:
ff:3d:1c:04:77:93:7b:be:c1:67:f0:33:49:2b:07:
76:ab:d5:56:f0:86:ce:15:63:08:e4:5e:b5:e5:97:
85:3b:e0:40:ed:1b:17:b5:4b:61:b5:22:fd:99:87:
58:bd:f9:9b:7b:ea:b6:cf:8e:38:dd:38:13:6b:29:
11:1e:21:3b:73:e1:d0:be:73:fb:1d:99:15:37:9f:
7f:79:5b:25:f4:7f:4f:57:83:d0:ad:12:b9:1c:fa:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:B5:88:48:1F:46:63:92:FF:27:C6:8D:8E:07:8E:BC:D5:5B:E7
X509v3 Authority Key Identifier:
keyid:8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:5c:79:6a:35:4b:9c:e6:5f:99:19:39:4e:70:9c:4f:9e:12:
8e:08:09:3f:22:1d:32:20:91:e2:c7:93:ad:c6:dd:d2:30:b6:
96:f2:f9:90:9d:a6:0b:ef:5b:ff:56:45:2e:60:27:1e:4c:fc:
eb:e2:ea:93:72:2a:9a:fa:9f:2f:65:0f:6c:6a:4f:9a:d2:d9:
42:df:e5:81:39:ce:c1:e2:d1:e2:f0:ab:74:8c:9b:b5:95:75:
29:f4:31:f5:41:f3:5c:fa:ae:09:16:07:df:0d:e8:75:98:f8:
71:11:21:ec:40:b0:69:84:55:ed:21:ae:2a:a9:57:ce:26:0f:
0a:54:83:f6:31:c6:50:88:1a:17:9e:47:a6:27:6d:4c:aa:6e:
9b:98:fe:dc:f2:02:ee:ef:aa:93:21:dc:d5:18:1b:58:d9:43:
56:71:9a:c6:84:cd:0b:a8:a4:c1:07:45:17:af:a0:81:f0:cf:
42:ba:7b:5c:88:fa:cc:fc:47:dd:05:a1:a3:b8:5a:a2:82:e1:
fc:0e:aa:c9:d2:d8:42:b2:90:58:e3:f5:c6:a9:d0:e2:35:5c:
15:64:7d:ef:93:a6:6d:01:0c:72:62:71:99:54:69:37:ca:3f:
5f:bc:c5:bc:a6:83:52:ed:b5:09:80:5b:ce:1b:6b:f8:c7:42:
3d:01:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:12:39 2026 by rpki-client