
Error: rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File: 9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier: P89QQRK236+7uqIJucd8dKGeZXSLTsxJtBwLGByB1Oc=
Subject key identifier: 13:F5:BE:36:CC:2B:D4:DA:AB:70:89:48:11:B7:67:8F:FD:B6:6F:C6
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer: /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial: 0718
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number: 0714
Signing time: Sun 15 Nov 2026 02:34:33 +0000
Manifest this update: Sun 15 Nov 2026 02:34:32 +0000
Manifest next update: Tue 17 Nov 2026 02:34:32 +0000
Files and hashes: 1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: YqCAfRpVk45zcN0VYz5A7qlihdYt9ys5hYGlBJy7Ozo=)
2: C813B5AC898B11F1BF7808B0CE1D38B0.roa (hash: sIuS3dFb0ljNs/CTOnl8n6H7ZV0rY+ovWMrRtUWyQDg=)
3: E6BE8514847B11F1BA44D4BBCE1D38B0.roa (hash: tauOOSFJltY6KG4MJlrCmt0lohbXb9OdzTR2QMoclwc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1816 (0x718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Validity
Not Before: Nov 15 02:34:32 2026 GMT
Not After : Nov 17 02:34:32 2026 GMT
Subject: CN=6af91a38-498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:ca:90:cc:cd:e1:9e:e9:70:c3:e7:d8:9f:
e4:fb:17:0a:b8:40:c6:39:5f:06:e3:cf:bb:80:a9:
eb:84:7d:63:b1:33:9c:c7:67:b0:a3:f3:21:9a:04:
a0:f1:d4:d4:6d:d9:70:68:46:1b:7e:1c:5c:7b:e4:
95:6b:f4:29:9b:d3:bb:ea:ae:be:15:07:9a:fc:57:
3e:16:43:01:23:61:4e:b8:ea:c8:52:ad:f7:27:2e:
f2:96:0b:0c:8c:42:24:23:e7:05:79:06:a3:a1:9b:
d8:c2:a0:00:ce:b3:82:bc:80:b7:a9:1f:85:3b:69:
48:09:c5:7b:e7:09:1d:58:72:df:a8:3e:1d:c4:23:
70:2f:62:0a:56:18:fc:9e:41:96:b4:e7:2f:06:d7:
0d:06:a1:55:61:92:93:c5:87:79:35:90:08:a6:be:
fa:b8:8c:63:b3:5e:58:ef:3d:e2:3c:fe:e0:66:65:
76:92:d8:e3:84:b8:5f:4f:35:fd:8c:c2:69:8d:34:
7f:1e:b3:6b:b5:e8:ae:55:04:0f:7f:ed:6a:5c:0b:
99:b8:c6:5f:92:53:80:05:d0:33:80:a0:8f:86:a7:
3b:30:70:9f:ea:c4:6c:61:a8:63:cb:8e:e2:cc:10:
b5:42:84:36:86:f9:84:b5:e2:63:c9:f0:83:b3:1c:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:BE:36:CC:2B:D4:DA:AB:70:89:48:11:B7:67:8F:FD:B6:6F:C6
X509v3 Authority Key Identifier:
keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:3e:7d:a6:78:47:39:18:8b:6c:e4:a5:68:d4:6d:9c:00:
c1:54:99:6b:3e:7d:e9:c6:cb:cd:72:24:68:34:fa:72:90:e4:
d2:3d:26:fd:eb:dc:55:e6:13:7c:8d:8d:74:c5:c0:bf:ce:c7:
ee:56:a2:63:c2:12:00:cf:f6:d0:e7:f7:25:38:6e:d1:64:2e:
0d:cc:56:a8:98:74:a6:a5:74:7f:fb:86:2b:78:4a:a8:ae:e2:
e8:d5:9d:98:ef:9d:95:6f:68:f7:39:68:ac:2d:eb:1d:79:28:
a4:59:64:8d:21:16:68:f1:08:d7:e0:72:8d:62:47:7e:52:7b:
54:35:e2:8c:d2:5e:2f:6c:21:97:1c:0a:a8:aa:7f:7d:7c:eb:
3d:3e:df:2d:10:d4:31:a1:34:e3:70:f4:98:84:82:09:07:ca:
1d:0c:8c:06:dd:70:03:07:d2:70:d6:74:07:ac:39:4f:cf:d1:
b7:e0:2d:95:37:7d:37:c5:4b:40:e2:e4:90:1d:fa:1e:03:30:
61:33:d4:2d:15:5d:c2:28:fc:5c:f3:d8:56:a2:35:50:de:0a:
99:d1:68:24:29:57:cc:6d:92:9e:c0:da:9e:35:0f:ef:e8:bd:
c3:52:a1:6d:40:66:c2:cd:31:09:57:a8:e7:d1:a3:38:86:d0:
77:43:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:36:08 2026 by rpki-client