
Error: rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File: -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier: ZhucDisLjIJaPo3T4VuGDEFk1iblEl4utUXT2LaPVcA=
Subject key identifier: 7D:21:AA:36:5A:A4:62:14:E3:14:25:47:C2:C1:FF:E0:8F:FB:86:ED
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer: /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial: 0605
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number: 05FC
Signing time: Sat 26 Sep 2026 02:58:32 +0000
Manifest this update: Sat 26 Sep 2026 02:58:32 +0000
Manifest next update: Mon 28 Sep 2026 02:58:32 +0000
Files and hashes: 1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: oHNnKUZ/PZGYTsNAYZ8adR3Nyb+BI9oWP16WZc73ZUI=)
2: 4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa (hash: 1A0L1uPFsmbrXqK3o6gBdtlVfG97lH1yGo2/hTF0JqM=)
3: 4B67D68A8A6E11F184D19A14CF1D38B0.roa (hash: mQKkOZp4IJ77KNXjngRxYZITAGUOeXF20aGNVpbflBA=)
4: 294052808A6E11F1A4749014CF1D38B0.roa (hash: YiyEUT/QFYS6/b8U7AFIlPC+Y4DtjYaVbmQ5D0jAWoc=)
5: E3C653308A6D11F1A6412914CF1D38B0.roa (hash: p9hlGzewGMaj5gPBDqvEO3e2S+ZbZso+XQB0hn7n8wY=)
6: 8ADC1A3E8A6D11F180BD560FCF1D38B0.roa (hash: rjs89YTmGWh9XUMaq59FoPkx586pjsdr+zg9OuFmDk8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Validity
Not Before: Sep 26 02:58:32 2026 GMT
Not After : Sep 28 02:58:32 2026 GMT
Subject: CN=6ab734d8-96db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:69:7f:1c:59:61:71:4f:32:17:c8:e6:82:
60:7a:aa:56:88:a0:78:61:ab:9d:a0:fc:e1:1a:69:
c2:12:a1:4b:93:13:e2:b0:7c:ba:72:3c:26:bc:55:
c1:85:8a:c7:10:5a:dc:e1:dd:ad:0c:1f:f2:26:f2:
a2:6a:fb:82:e3:df:7b:72:dc:c5:80:31:c8:f7:ae:
02:08:99:dc:37:40:3d:34:79:02:3a:5d:bd:55:43:
67:71:76:ca:95:af:96:88:3f:50:e2:6f:5c:54:57:
a9:b8:ce:7b:f4:9d:28:87:13:e5:d5:e7:6b:3a:ba:
a3:d4:55:30:9f:ff:45:0a:31:88:13:f4:44:3d:db:
d9:bc:b5:7d:ab:9a:35:9a:02:a3:70:d9:3d:93:4a:
49:32:bb:3c:3b:bf:63:09:45:0c:7e:1f:2b:80:e8:
29:9e:6d:da:62:47:19:32:af:43:fe:c5:13:9a:18:
22:19:fd:12:73:b4:6e:8a:94:8c:ed:0d:5e:ce:30:
b0:89:f6:47:24:67:be:75:b1:7d:c7:3a:8c:b4:f6:
1f:45:5a:fe:9a:43:88:07:ba:d9:da:5d:ed:61:e1:
e4:2b:93:be:97:55:ff:03:f7:bb:3c:30:27:9c:31:
a6:e7:bd:92:fa:3c:cc:04:ac:67:78:e5:39:c4:67:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:AA:36:5A:A4:62:14:E3:14:25:47:C2:C1:FF:E0:8F:FB:86:ED
X509v3 Authority Key Identifier:
keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:08:46:5d:1c:36:68:e4:6f:92:5b:ec:29:79:81:b7:2a:
9e:82:83:d2:68:28:ac:62:3e:43:04:2a:4d:84:9e:bf:be:fa:
c0:2b:a5:50:94:d4:54:23:03:84:d4:15:09:fa:36:71:49:d9:
1f:4d:c1:51:b6:d9:27:a0:56:9f:85:9d:38:aa:6a:6b:0a:43:
43:b9:b3:b1:1b:1a:13:48:74:63:1e:e9:af:7e:77:77:eb:16:
b8:3c:16:40:9e:e6:f8:7a:77:d4:41:7d:9e:c5:c9:70:a7:2e:
9f:cf:5e:ea:c3:d1:a6:5e:d8:9d:81:e1:d3:17:dd:67:ea:26:
ff:c9:07:ec:1e:4b:2b:6c:cc:20:0d:bb:fa:b8:2f:2a:0e:2f:
79:60:24:26:6f:11:c1:11:31:af:41:9e:6c:ec:ca:4f:cd:ca:
1a:dc:24:90:d4:5b:0d:23:9e:79:ae:27:1e:f8:be:6c:f5:f5:
28:62:3b:fa:83:3b:19:ba:cb:8f:28:c2:05:ba:63:4e:7e:b7:
40:26:26:d3:14:6c:21:06:98:b8:5a:de:2a:34:b8:9c:db:8a:
43:83:a2:65:75:58:13:6a:a6:b6:de:aa:f7:d9:53:a8:f1:6a:
0d:dd:0e:2c:8b:bf:17:16:a3:d8:ba:98:df:71:3b:f9:df:fd:
6b:78:e4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:54:26 2026 by rpki-client