
Error: rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File: PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier: r0YMsl1LcK/lQjnQPlDsVrmortJGxpP9NC8zgNPRk2I=
Subject key identifier: 36:EA:16:4D:B5:6B:63:DE:BD:D8:2B:B4:7D:37:B2:17:E4:36:A6:8F
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer: /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial: 035D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number: 035B
Signing time: Wed 30 Sep 2026 04:15:05 +0000
Manifest this update: Wed 30 Sep 2026 04:15:04 +0000
Manifest next update: Fri 02 Oct 2026 04:15:04 +0000
Files and hashes: 1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: Tx9+SFFcl101TtBhmluU6vuWyPsvGI7baueJRj8pnok=)
2: CC282C02DCA911F0B66908E9DAE4EC9C.roa (hash: aHMu4MSEjVffihBbMLwP18F/HBK4HKpDI2L3Hm8bfrQ=)
3: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 Oct 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861 (0x35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Validity
Not Before: Sep 30 04:15:04 2026 GMT
Not After : Oct 2 04:15:04 2026 GMT
Subject: CN=6abc8cc9-c349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:67:d8:44:d7:b5:97:cb:1c:65:04:8f:ad:
5e:f3:1f:8b:99:b7:a7:e6:80:d7:c9:35:bd:ce:d1:
1a:6e:98:59:67:1e:1d:4a:c1:37:bf:95:cf:1d:c8:
e2:00:d2:13:c9:83:8a:0e:17:38:43:b4:49:99:44:
a1:f5:56:3b:07:62:08:38:42:56:71:17:72:ef:27:
99:51:ce:06:01:3b:8b:5a:c9:00:30:8c:82:04:f2:
05:fe:e9:33:95:1b:b0:46:9e:03:6d:2e:8e:60:78:
5b:b5:3f:0c:29:9a:df:ce:4b:b3:ee:80:2a:17:0d:
6a:19:86:e1:30:92:fb:16:29:b4:da:02:0e:b1:98:
f3:c4:b3:70:fa:22:54:5b:15:a5:b4:72:20:7f:02:
90:64:83:9f:4f:02:14:e3:e8:fb:02:43:14:25:1c:
33:e9:f6:00:21:cf:c3:c6:e9:82:5f:f2:ae:ba:27:
80:ad:3f:fc:de:41:a7:62:51:fe:24:ae:2a:2a:10:
79:70:4d:1c:d9:a0:4e:64:59:5b:e4:5f:8d:4f:69:
cb:42:43:2d:b0:24:d6:63:b4:f8:b4:cb:29:d9:d8:
c1:41:ae:08:c6:77:c4:07:58:40:a8:27:12:e4:1a:
60:75:63:58:27:53:44:c2:bd:11:f1:f8:5b:26:fa:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:16:4D:B5:6B:63:DE:BD:D8:2B:B4:7D:37:B2:17:E4:36:A6:8F
X509v3 Authority Key Identifier:
keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:4d:a9:4e:a6:ae:3f:c4:31:13:f0:39:97:69:6d:e5:5f:
02:da:1c:3d:7c:81:50:02:be:b1:ff:66:51:d6:3a:8b:96:cc:
83:25:5e:24:11:6f:5a:bc:24:08:c4:94:01:fd:5f:44:12:a5:
ae:2d:01:be:54:37:5c:a0:1b:66:04:4b:37:a2:b4:b4:3e:7e:
ee:ad:0a:8f:9d:d4:ba:d8:0c:03:73:33:dd:4a:e7:d6:55:05:
02:76:25:d9:b9:1c:f9:9a:f7:da:8f:a7:86:f8:7f:3d:a8:8c:
59:51:d9:ae:cf:66:08:58:ca:69:a6:8d:52:ea:8c:83:4d:9f:
92:4d:39:6a:b5:1d:3f:b3:ff:1b:4d:b9:30:96:32:65:d5:8d:
48:69:74:5a:1d:3f:0d:93:e7:42:1a:5b:56:10:f2:7e:3b:3b:
b3:2a:28:d4:5b:dc:f2:44:63:39:5f:5a:5d:27:b0:38:aa:76:
b5:84:3f:bc:9e:6d:7d:dc:c7:6f:bc:43:dc:58:e3:8b:7e:a4:
90:c3:2a:60:30:37:e3:a2:05:93:49:6b:fa:43:19:10:9c:73:
76:6c:4b:0f:47:8b:ac:28:a8:9a:4d:01:c6:44:a0:a5:3d:d5:
0e:43:0a:59:b3:90:95:49:a2:c8:fd:4b:fa:4d:d1:45:9b:4a:
86:5f:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:44:45 2026 by rpki-client