
Error: rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File: kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier: k3VjDHU2NhnifT7qnbKyzrqdCFzUn5+ZKCkDnbaso5U=
Subject key identifier: 7E:37:4C:D9:07:57:D4:29:7E:77:B5:DC:02:FA:03:F8:3A:69:5A:9C
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer: /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial: 05F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number: 05F1
Signing time: Fri 25 Sep 2026 02:58:46 +0000
Manifest this update: Fri 25 Sep 2026 02:58:45 +0000
Manifest next update: Sun 27 Sep 2026 02:58:45 +0000
Files and hashes: 1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: k9316kLUXQOmlNXLdDsvba8EAZjb/Ie+3o0YXTyae9Y=)
2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 02:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Validity
Not Before: Sep 25 02:58:45 2026 GMT
Not After : Sep 27 02:58:45 2026 GMT
Subject: CN=6ab5e366-3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:42:b1:75:17:0f:4f:9a:5b:49:73:dd:b4:
91:1f:88:2d:c0:70:66:70:6a:d0:d4:60:16:81:7c:
8e:c7:13:17:b0:45:dc:3c:9e:6b:4f:47:d7:31:0b:
5e:5f:ef:b3:d0:1e:1a:44:c9:68:95:0c:bc:15:12:
80:60:61:7a:b9:ec:df:cb:a9:c5:32:ab:7f:1d:36:
b7:82:b3:d6:79:5d:91:b2:40:70:4a:5c:9e:cf:16:
3e:aa:23:7e:44:91:f6:65:ff:0a:64:82:23:20:fa:
b4:56:f5:16:4d:67:87:64:78:6f:27:2b:0e:bf:01:
62:2b:9e:40:f3:90:10:33:18:8e:3c:68:b2:90:89:
84:74:10:87:54:d5:df:64:00:fc:2a:50:45:7f:08:
e9:ef:a1:9e:56:4d:8c:06:5f:58:80:cf:30:10:fd:
a3:85:3c:7d:a2:eb:89:1a:88:45:48:a1:78:93:67:
85:bb:2e:f7:4e:b8:d4:39:fd:57:00:fb:25:0f:06:
af:64:3e:f0:c5:0d:f3:32:9f:34:07:f9:b4:34:61:
5e:b2:76:25:18:5f:4b:f7:ca:09:c8:5a:dc:57:69:
82:61:80:aa:73:1b:6a:4f:06:ea:87:7b:b4:ec:0d:
61:1d:91:7a:bd:ef:1a:88:2c:d6:dc:7f:c6:9f:4e:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:4C:D9:07:57:D4:29:7E:77:B5:DC:02:FA:03:F8:3A:69:5A:9C
X509v3 Authority Key Identifier:
keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:25:9b:61:88:df:e1:e8:c9:d4:5f:e8:55:f7:08:e6:c2:
fe:6b:3f:46:e6:44:23:91:d6:be:0b:46:cc:98:93:a4:88:39:
e5:a2:3f:e3:ae:b9:5f:4e:17:8b:7f:c7:d7:e4:8f:e5:89:ab:
a2:48:67:33:70:47:2b:f3:7a:2b:2b:d7:92:29:26:2c:d5:ef:
28:3c:b2:47:20:86:28:0d:fb:a7:4d:03:9d:dd:39:d3:e4:20:
e0:77:80:65:c3:79:ef:db:22:f0:01:6a:03:17:06:05:99:00:
2a:08:a1:b1:f6:6d:3a:75:b2:22:20:c8:07:db:0e:43:05:e8:
7b:f7:01:9e:c0:c2:60:2a:76:10:65:65:3a:a9:dd:13:15:7d:
72:da:ed:49:05:a3:09:ea:52:8d:29:c5:d5:f9:d1:82:99:1e:
c6:74:60:03:62:40:79:9a:4b:1c:53:cd:b9:74:4e:86:d8:5d:
38:d6:82:cb:6f:00:ba:2b:1d:62:3d:cb:7d:5d:8f:76:9e:40:
e2:1d:23:49:5d:27:e9:f5:df:b9:aa:70:e5:41:31:5f:19:a3:
ab:9f:29:3a:bd:c6:c1:7c:d8:66:e0:21:15:73:16:77:12:62:
2c:40:47:87:2a:b7:41:66:2b:f4:d8:35:f9:86:f7:2b:93:c5:
26:80:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:59:06 2026 by rpki-client