
Error: rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File: fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier: B11OED3Am8OlbMMlh9uvg0i+fo7gOv9LXlKeCN6r+P4=
Subject key identifier: FC:ED:15:1F:0E:BA:CE:94:FA:6B:99:0B:B7:D7:3A:2F:26:EC:7F:91
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer: /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial: 0273
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number: 0272
Signing time: Wed 23 Sep 2026 04:43:58 +0000
Manifest this update: Wed 23 Sep 2026 04:43:57 +0000
Manifest next update: Fri 25 Sep 2026 04:43:57 +0000
Files and hashes: 1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: HMoJB5M9EC5TI4TFY9aVFtfMLImIadCs3RFDwhMuroo=)
2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 04:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Validity
Not Before: Sep 23 04:43:57 2026 GMT
Not After : Sep 25 04:43:57 2026 GMT
Subject: CN=6ab3590e-d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:20:db:ae:21:5a:73:18:fd:09:5c:95:0e:
4f:6d:49:3a:84:d0:bb:94:7f:70:34:af:fd:d4:85:
0f:7a:77:07:d3:20:f6:51:ae:ff:f2:ca:88:ba:f4:
ec:54:9a:0b:ce:57:ab:9e:21:37:55:7c:bb:af:72:
91:19:ea:c7:fd:37:49:ed:88:44:05:0b:af:7b:ac:
a6:c9:4c:f6:cc:59:72:60:43:58:89:a1:2d:ac:b1:
e0:96:43:94:dd:7a:ba:46:a2:45:e9:c1:e8:6b:05:
ac:b3:ac:ce:04:9c:c9:3f:72:a4:7d:73:ee:e9:83:
8e:a8:c3:79:a8:2e:0f:91:10:4d:68:87:1b:71:03:
1c:bf:cb:ba:4a:90:21:e7:bd:62:1a:eb:c5:11:8e:
6b:ca:c4:f8:5d:97:15:f0:8e:7c:e9:3d:55:90:cd:
b6:64:50:b2:87:05:af:6d:e3:f5:5b:8c:ef:fa:1d:
be:3f:81:75:02:e2:88:de:53:77:40:27:2b:ad:26:
96:37:05:a1:54:0b:87:b1:61:1e:a7:03:2c:41:52:
3d:14:b3:3a:22:58:ea:c7:a5:c7:32:82:f5:81:de:
0d:8f:07:27:85:8a:fd:e0:95:5b:44:66:45:6c:c4:
3a:ca:2c:b5:9e:80:dd:55:43:8d:60:a6:69:a9:85:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:15:1F:0E:BA:CE:94:FA:6B:99:0B:B7:D7:3A:2F:26:EC:7F:91
X509v3 Authority Key Identifier:
keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:52:c9:02:cd:49:08:6d:35:47:3c:9c:8e:67:e8:05:ee:9f:
e7:bd:4c:78:f7:05:f2:c6:99:1c:c4:4b:b3:2a:af:61:28:22:
d5:59:6e:ad:df:5a:87:c4:70:e9:e8:44:00:e7:e8:ba:52:d3:
01:c6:64:80:1c:db:28:0a:01:57:2a:64:31:5d:25:45:d4:ac:
b3:c9:e5:51:04:a1:fa:c4:30:e2:cb:f5:59:8e:4c:c6:54:3e:
58:a3:2c:8a:02:00:89:af:da:0b:b9:50:34:d6:2a:f4:3b:83:
81:e0:8a:84:0d:1d:3e:01:a3:cf:55:be:57:e0:d0:a3:a2:02:
03:2a:8e:08:43:dc:c7:be:04:04:64:1b:7b:72:c8:a4:f3:50:
e1:e3:2f:51:06:fb:e6:48:81:bb:c7:60:69:44:59:88:e8:42:
ae:e7:6a:46:af:8d:ab:fe:f6:b3:68:a8:94:e2:cc:ee:8f:ca:
8e:ff:2f:a6:48:b6:a8:92:4b:82:6d:e1:50:70:66:b4:f5:1d:
9d:13:43:c5:53:e9:73:55:45:33:c9:fd:c5:38:8c:70:fa:77:
58:5b:91:73:ec:98:76:f0:a5:76:9e:23:88:e1:f4:fd:cf:5e:
77:fb:2d:01:3c:2f:a9:24:24:fb:f2:48:dd:0b:f0:7e:90:61:
44:97:3d:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDBDM0NBRjExMC8GA1UEBRMoN0Q0REY2RjJGN0REQjA3MzdFREFBRDg0ODUyM0Y4
NzE3NkU3Q0U4MTAeFw0yNjA5MjMwNDQzNTdaFw0yNjA5MjUwNDQzNTdaMBgxFjAU
BgNVBAMTDTZhYjM1OTBlLWQ2YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMbiDbriFacxj9CVyVDk9tSTqE0LuUf3A0r/3UhQ96dwfTIPZRrv/yyoi6
9OxUmgvOV6ueITdVfLuvcpEZ6sf9N0ntiEQFC697rKbJTPbMWXJgQ1iJoS2sseCW
Q5TderpGokXpwehrBayzrM4EnMk/cqR9c+7pg46ow3moLg+REE1ohxtxAxy/y7pK
kCHnvWIa68URjmvKxPhdlxXwjnzpPVWQzbZkULKHBa9t4/VbjO/6Hb4/gXUC4oje
U3dAJyutJpY3BaFUC4exYR6nAyxBUj0UszoiWOrHpccygvWB3g2PByeFiv3glVtE
ZkVsxDrKLLWegN1VQ41gpmmphYZbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/O0V
Hw66zpT6a5kLt9c6Lybsf5EwHwYDVR0jBBgwFoAUfU328vfdsHN+2q2EhSP4cXbn
zoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwQzNDL0M1QTYxODQ0RDJCRTExRUZBRDU2Q0M5ODc2MkU5NTFBL2ZVMzI4
dmZkc0hOLTJxMkVoU1A0Y1hibnpvRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZVMzI4dmZkc0hOLTJxMkVoU1A0Y1hibnpvRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDBDM0MvQzVBNjE4NDREMkJFMTFFRkFENTZDQzk4NzYy
RTk1MUEvZlUzMjh2ZmRzSE4tMnEyRWhTUDRjWGJuem9FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiUskCzUkIbTVHPJyOZ+gF7p/nvUx4
9wXyxpkcxEuzKq9hKCLVWW6t31qHxHDp6EQA5+i6UtMBxmSAHNsoCgFXKmQxXSVF
1KyzyeVRBKH6xDDiy/VZjkzGVD5YoyyKAgCJr9oLuVA01ir0O4OB4IqEDR0+AaPP
Vb5X4NCjogIDKo4IQ9zHvgQEZBt7csik81Dh4y9RBvvmSIG7x2BpRFmI6EKu52pG
r42r/vazaKiU4szuj8qO/y+mSLaokkuCbeFQcGa09R2dE0PFU+lzVUUzyf3FOIxw
+ndYW5Fz7Jh28KV2niOI4fT9z153+y0BPC+pJCT78kjdC/B+kGFElz3w
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:02:54 2026 by rpki-client