
Error: rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
File: A9jip0pNgGi_ve4AchbBAHrH_dk.mft (raw, json)
Hash identifier: qbEa427IzA/JB6xRhQ0UnjyNZzCmhZR3Lp0cbsLBuJY=
Subject key identifier: CB:D7:77:7A:86:10:78:A6:55:23:A5:3C:A4:80:8A:FC:61:C3:CE:7B
Authority key identifier: 03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9
Certificate issuer: /CN=F363F4B9AF/serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
Certificate serial: 0871
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
Manifest number: 086E
Signing time: Sun 15 Nov 2026 01:59:15 +0000
Manifest this update: Sun 15 Nov 2026 01:59:15 +0000
Manifest next update: Tue 17 Nov 2026 01:59:15 +0000
Files and hashes: 1: A9jip0pNgGi_ve4AchbBAHrH_dk.crl (hash: ThPGbdVANVKm38vfVnTlK0Am4tllyUQBmEoi/7ovSiQ=)
2: 5E151552684D11EBB3B0CD73F8AEA228.roa (hash: flUQEXj5snMlxFkZcm/MM/z0tsowYDIY7U3XPo+QYGM=)
3: 784F4370684D11EB8D87FC73F8AEA228.roa (hash: rzwUo7lFrqBD5qe5XRR7NA2ACx7BQyZHFJN6623sEQI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl
rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363F4B9AF, serialNumber=03D8E2A74A4D8068BFBDEE007216C1007AC7FDD9
Validity
Not Before: Nov 15 01:59:15 2026 GMT
Not After : Nov 17 01:59:15 2026 GMT
Subject: CN=6af911f3-61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:83:cd:fd:e7:fb:c8:9c:2c:db:9a:19:09:
80:18:77:12:b8:06:da:d8:2c:6f:6d:77:f7:83:38:
de:ae:fb:1e:e4:82:fc:a5:60:a1:4d:4e:de:dc:ed:
9b:5f:5a:7f:8b:14:2f:6b:c2:33:cf:04:b0:27:d5:
77:3b:95:ad:3c:54:8f:a1:e7:45:95:8e:08:cf:1a:
a5:92:2f:9e:d9:27:d0:7f:72:bf:b5:4d:55:3e:5d:
4b:35:f1:49:a3:9b:4b:0f:a6:d1:67:5b:ee:d5:dd:
f8:26:60:e9:9d:b5:cf:7c:06:16:3e:9f:b3:c9:b8:
85:b5:05:6c:88:18:cf:8b:8f:b9:7d:72:fd:6e:cc:
34:47:ca:3b:8d:ba:a3:99:63:86:52:52:75:46:3d:
3e:60:1d:e7:71:6c:05:c7:2a:c4:a8:f7:10:c7:24:
42:b4:d8:05:22:f4:e2:d8:d1:02:1f:12:09:d1:f9:
b9:27:1a:b7:12:7c:cb:fa:4f:30:02:1d:d8:d9:af:
33:e7:48:4c:19:98:7f:1c:92:8e:5b:c2:23:72:3e:
ca:35:43:8c:6b:c9:35:68:27:17:9f:ec:44:07:df:
58:0c:6a:5a:59:36:e5:d1:80:2c:71:2a:98:82:f7:
c8:c6:0c:0e:09:90:f1:7d:68:3e:65:e3:03:9b:77:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D7:77:7A:86:10:78:A6:55:23:A5:3C:A4:80:8A:FC:61:C3:CE:7B
X509v3 Authority Key Identifier:
keyid:03:D8:E2:A7:4A:4D:80:68:BF:BD:EE:00:72:16:C1:00:7A:C7:FD:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A9jip0pNgGi_ve4AchbBAHrH_dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F4B9/2F2F6724684D11EB86329C73F8AEA228/A9jip0pNgGi_ve4AchbBAHrH_dk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:be:0b:fd:28:00:1d:30:39:6b:61:3c:55:ed:c9:a7:10:
23:ab:31:22:c3:41:1b:c3:a7:9c:a6:43:d4:de:71:9d:ae:4a:
7b:e4:15:36:72:30:01:32:54:81:b2:37:ce:b8:17:fa:5f:e1:
52:08:9d:b3:c9:25:7e:33:b1:a5:56:86:cf:01:16:c4:3c:84:
06:41:5c:fe:ad:34:4d:ec:94:21:c0:49:46:87:74:d7:d4:b7:
6b:e4:3a:5f:ec:9a:5f:30:3e:32:e6:33:9b:4e:69:19:d0:cf:
af:11:b0:5b:1e:de:3f:c2:01:43:e5:fc:f1:89:44:54:7b:b7:
4a:fd:11:e9:3d:9c:ed:a5:ad:b1:65:86:c6:11:4c:a6:f7:87:
8a:70:99:76:8a:a1:26:a1:97:f5:e8:88:e3:03:82:87:2d:06:
e8:61:98:69:14:79:2f:d0:08:4a:f6:2a:b1:95:fb:13:5e:76:
09:71:24:52:bb:af:8d:c4:36:fe:f9:51:2e:fc:b9:1d:12:1b:
6c:49:4a:7c:7a:ab:9f:fa:c5:64:99:7d:aa:33:b3:50:52:b4:
80:c6:fe:8f:39:6b:c4:58:d6:2a:13:e5:8e:07:01:f9:cd:85:
0b:59:c9:0d:71:7d:7d:c0:c8:40:01:57:37:18:f3:e1:a2:4a:
18:e8:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:48:28 2026 by rpki-client