
Error: rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
File: EAy9RkqQWltWj3rc7x-dILx1IzE.mft (raw, json)
Hash identifier: H+zHdFTGSY79PuDEZvPCDkzrJN9RFsOjMDdK5VEDvJM=
Subject key identifier: BC:FA:CA:18:5D:46:8F:F8:46:2B:63:12:5F:04:80:DB:55:5B:DA:F9
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Certificate issuer: /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial: 0548
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
Manifest number: 053F
Signing time: Mon 28 Sep 2026 03:19:40 +0000
Manifest this update: Mon 28 Sep 2026 03:19:39 +0000
Manifest next update: Wed 30 Sep 2026 03:19:39 +0000
Files and hashes: 1: EAy9RkqQWltWj3rc7x-dILx1IzE.crl (hash: F2a5PkODIci+Pus10YDGwm+2O3ObwJkSicTV2H+QR60=)
2: C719F080031811F0BCF8A45B762E951A.roa (hash: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=)
3: E7C40FA68A6711F08E76079BDAE4EC9C.roa (hash: VT6zH98Frb6UtC81E1Tg7fyG8o/UWEDY/xqxWLn85AE=)
4: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (hash: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=)
5: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (hash: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=)
6: 78AAD6F686B811F1AD0338E6CE1D38B0.roa (hash: kggO1PHAaeMi9Iq20hDB0z/CvbOz9LysF/AicQaTOXs=)
7: 5110E694031F11F0BEF24185762E951A.roa (hash: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=)
8: 8187B4F485CA11F1910971BFCE1D38B0.roa (hash: MUhyY35RIQ7mJxQxOOJkiFFWoyA7V3uNiEOaAsw+ZGQ=)
9: 71F0925246CB11F0906DF5A4DAE4EC9C.roa (hash: 4GpwoUFSemgnNHOneEphyunOOkVz96lSUfPWz4U/DVI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Validity
Not Before: Sep 28 03:19:39 2026 GMT
Not After : Sep 30 03:19:39 2026 GMT
Subject: CN=6ab9dccc-aab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:9e:fb:3d:d1:2e:f8:09:7a:63:79:71:01:
56:ac:15:4a:76:1f:4b:03:57:6b:a9:92:b6:a9:c4:
06:ca:73:b5:c5:69:1b:a6:25:d8:03:3a:89:5e:b2:
b0:a2:17:af:55:bf:d7:de:24:7c:3b:1f:9b:58:86:
ef:38:88:94:26:16:1c:b9:0c:57:fd:0b:ce:b2:e9:
8a:a5:f7:06:69:e5:3b:1a:e0:1a:31:19:52:d3:3a:
f7:ba:bd:c0:bd:05:de:26:a0:5c:02:96:59:0f:da:
32:6a:4a:35:7f:89:8a:41:31:33:d5:80:1b:3a:b3:
ca:2a:0f:42:f6:70:a2:bf:a0:ea:b9:03:a9:33:57:
76:da:9c:f1:8b:36:eb:05:aa:33:48:69:ef:9f:11:
a2:ff:cd:50:b7:e1:75:80:6d:ab:24:95:45:20:a4:
f1:ec:c6:5e:c5:29:d4:70:de:e3:a9:fa:5a:98:54:
d7:a0:20:c2:6f:40:a4:15:21:b1:0b:28:60:10:b7:
0e:c4:f1:ca:d1:72:86:d6:e7:bd:be:ef:5b:1a:67:
33:49:77:a1:0e:e1:d9:3b:e5:34:d1:13:85:d0:a2:
d1:92:9c:4e:f4:17:25:42:b3:7e:8d:56:7c:e2:01:
0e:1b:3d:46:d0:fa:2d:b7:24:b1:8c:d4:47:af:85:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:CA:18:5D:46:8F:F8:46:2B:63:12:5F:04:80:DB:55:5B:DA:F9
X509v3 Authority Key Identifier:
keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:96:99:2b:e2:50:8a:04:bd:10:f8:96:a9:d3:a6:9d:0a:
e5:85:f3:00:3a:2a:cd:a2:f1:bf:46:68:cb:c3:4c:a0:74:85:
c1:ad:87:1f:f3:50:dc:bc:1e:2e:fd:6e:bc:43:21:bd:0a:51:
fd:29:6a:92:72:7b:ed:98:06:aa:98:27:dc:bd:3a:91:a0:6c:
db:63:e8:a7:5d:1a:57:c9:a7:b7:7c:c4:43:99:48:01:22:09:
cf:84:ef:37:53:92:93:92:e7:e9:f0:50:ce:82:be:24:ac:fc:
53:f6:83:af:27:cc:20:98:34:fe:c0:b6:31:fc:6a:5c:bf:65:
c9:ea:29:a6:cf:0c:0c:94:75:3e:65:5c:c0:18:f4:3f:b9:f7:
3f:1b:ed:a3:be:fb:78:42:97:09:aa:e6:d4:8d:ce:61:28:ec:
18:c6:d6:2c:84:22:ec:8d:68:f2:b2:5a:78:8e:51:a4:de:c6:
ed:b8:0d:8d:61:63:f1:33:4a:b3:0e:92:57:fa:5e:18:a0:05:
08:40:07:c2:4f:77:b2:34:09:fd:14:1a:11:20:3c:64:c5:9b:
fe:76:49:fc:8c:3b:1e:72:19:66:c3:e9:0b:25:1d:8e:e2:7c:
34:cd:f9:f3:56:a3:36:f9:8e:7d:3e:98:36:c5:e1:25:76:a7:
30:d3:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:45:35 2026 by rpki-client