
Error: rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File: PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier: 5NVZA84D9deUXc7+kWASdxE2KW2P9Ao6iDtdpwN13PE=
Subject key identifier: 27:7B:52:E9:78:F1:5A:29:7A:98:89:6E:49:82:43:89:BB:4C:59:E2
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer: /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial: 035F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number: 035D
Signing time: Fri 02 Oct 2026 04:12:09 +0000
Manifest this update: Fri 02 Oct 2026 04:12:08 +0000
Manifest next update: Sun 04 Oct 2026 04:12:08 +0000
Files and hashes: 1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: GjuXFZ0dj0HKV63fEEAaU2jYQxQa3GyHpDlsSv9+hys=)
2: CC282C02DCA911F0B66908E9DAE4EC9C.roa (hash: aHMu4MSEjVffihBbMLwP18F/HBK4HKpDI2L3Hm8bfrQ=)
3: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 Oct 2026 04:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Validity
Not Before: Oct 2 04:12:08 2026 GMT
Not After : Oct 4 04:12:08 2026 GMT
Subject: CN=6abf2f19-a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:b2:9c:80:4f:88:d3:32:f3:91:6b:9e:ac:
01:85:c6:71:4a:25:f4:7b:fa:0b:a9:3c:17:f7:b3:
06:d2:58:38:d0:18:31:0e:b5:3d:59:2d:e6:86:1e:
1e:c2:44:e7:40:62:d8:ea:62:98:9e:af:a3:13:a1:
fe:ff:63:cd:4c:9a:de:0c:f9:cd:e1:5b:6f:66:3a:
93:22:c9:7c:43:97:05:7f:a7:c2:fb:e3:2e:4d:13:
ce:2d:50:98:97:91:66:75:83:da:3f:f4:03:cd:2f:
22:d7:99:5d:b6:84:3e:8d:95:ec:a4:ff:c9:33:54:
ae:c4:c6:ae:40:93:c0:69:ce:d9:01:7e:cc:54:38:
68:a8:e9:a9:da:95:65:29:41:84:52:11:39:a1:cc:
de:a3:d4:86:6d:d6:9e:48:6b:dc:ae:29:40:d8:ad:
53:0c:97:79:4a:e9:e8:0e:72:9a:6e:3c:c4:10:5a:
9a:5b:6c:2a:0f:5b:87:2c:75:b3:de:6f:16:86:f8:
41:99:2f:28:97:df:d8:fc:47:c1:ac:c9:45:a1:07:
4c:a4:f7:b4:30:ee:d7:f6:97:6b:e8:ed:61:2a:bf:
2a:de:4b:3b:bf:9f:9f:0c:83:52:67:c7:2b:0d:1b:
06:f1:5f:b0:71:77:81:b0:ae:b3:b1:ea:f7:09:b7:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:52:E9:78:F1:5A:29:7A:98:89:6E:49:82:43:89:BB:4C:59:E2
X509v3 Authority Key Identifier:
keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:20:13:c4:3d:ab:cc:8c:fb:9f:18:77:e3:3a:8e:53:33:
47:ce:10:a0:7f:0d:10:1f:97:fc:23:1e:79:db:14:2d:b6:f7:
b5:51:82:ba:d4:95:17:60:b9:c8:91:da:79:70:68:fd:b4:fc:
05:73:4e:57:81:9d:98:75:ce:ea:64:8a:ee:97:42:a0:b7:64:
20:88:a6:86:8e:e4:44:af:5f:c8:38:8c:27:9f:a7:52:41:d9:
77:76:40:94:55:d1:21:78:ab:c2:26:6a:1d:4d:a9:a4:2d:4f:
63:8b:61:a7:de:76:68:3e:37:80:76:c8:3b:36:1b:44:bb:a7:
a5:47:61:58:24:ca:3c:2a:4e:75:cd:8b:3b:39:a0:a9:48:ef:
e7:bd:f5:93:70:b2:66:f9:10:d7:d9:0d:3d:dd:0c:93:f5:07:
67:78:e3:eb:f6:e5:c4:41:01:b6:fb:a8:07:87:dd:39:01:bb:
7b:b8:70:b5:35:06:61:43:d7:01:6c:f8:8b:84:67:e7:94:e6:
98:8f:09:a9:97:a0:7d:cf:89:ae:7a:1a:56:7b:4e:4c:a1:64:
4b:60:92:2b:c1:6a:fe:82:fd:42:35:2d:5a:c6:cf:e2:eb:1d:
dc:4b:87:c4:f5:6d:d4:68:29:73:fa:af:a4:77:bd:3b:e7:b5:
af:99:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 00:31:37 2026 by rpki-client