
Error: rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File: BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier: 3ndvQoiaVSwH85o6ndAy9wV+SwuwFSFzBULxGOfhp/o=
Subject key identifier: 3B:CD:D7:69:1D:7F:56:07:04:CE:F6:D1:53:30:36:23:3C:EE:E0:67
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer: /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial: 01D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number: 01D3
Signing time: Tue 29 Sep 2026 04:57:01 +0000
Manifest this update: Tue 29 Sep 2026 04:57:00 +0000
Manifest next update: Thu 01 Oct 2026 04:57:00 +0000
Files and hashes: 1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: GzgyHZXMjUM70xvBSdjpmVDJAUXj6ZhZkqeol/+bk1g=)
2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 Oct 2026 04:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Validity
Not Before: Sep 29 04:57:00 2026 GMT
Not After : Oct 1 04:57:00 2026 GMT
Subject: CN=6abb451d-d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:e6:6a:b3:67:e6:a5:cc:0e:32:a1:8f:96:
8e:2e:bf:9b:9e:8c:75:3b:ef:0c:7f:c4:e5:26:f8:
bc:6a:e8:0a:00:e5:69:d4:36:34:fa:3d:ec:1f:04:
01:d3:fd:67:39:99:0a:61:2c:4a:4e:16:bc:b8:4c:
e2:53:1c:33:b1:00:fc:b8:54:98:37:36:4f:21:42:
75:8f:cd:f5:6c:96:4b:bc:d1:ee:97:44:75:5c:ce:
a3:83:8d:c6:e4:45:69:1b:e2:13:59:c4:26:9e:d2:
f4:8c:4b:86:48:0c:fc:38:9a:fe:67:5d:27:40:5f:
3d:f1:c7:98:f4:e2:f8:f5:bd:83:4d:09:68:a3:0f:
07:7a:00:75:b1:fb:b3:91:ff:6c:af:c3:d3:46:e5:
20:6e:69:0d:ed:41:8b:13:57:9c:39:26:36:1e:7b:
45:82:05:b5:b2:0a:2f:a2:2c:33:f6:41:89:af:c4:
7f:9b:92:4e:d1:27:7a:c9:94:02:54:3f:cd:8a:02:
b6:a5:17:28:76:b6:f2:3c:55:fa:00:93:56:b3:2f:
26:26:23:24:17:0c:29:aa:2c:8d:9f:96:79:6b:66:
13:8c:a3:06:f0:7d:2a:13:f0:00:d2:ba:c9:a2:8c:
7c:b3:70:9c:0c:b3:84:2e:b6:9e:d9:da:23:bd:2f:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:D7:69:1D:7F:56:07:04:CE:F6:D1:53:30:36:23:3C:EE:E0:67
X509v3 Authority Key Identifier:
keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:72:12:6e:b0:e7:3e:54:28:53:0d:f4:b8:89:a1:b1:87:6c:
5c:77:d2:ad:41:86:7b:85:4c:de:29:35:cd:10:fb:70:97:b2:
7c:8c:97:21:b9:7c:ff:2c:16:91:a3:71:51:30:92:03:ce:95:
db:de:61:82:bf:be:67:1c:72:62:35:50:02:e8:1d:b0:c9:38:
98:ea:39:fa:fb:f0:a2:76:fc:60:71:65:ad:e3:5c:68:49:1b:
77:19:53:63:31:01:e0:d7:24:9b:02:0a:b5:9f:1c:1f:d2:12:
f0:86:bd:3f:06:16:ff:ae:55:5e:f4:29:d1:91:94:93:51:e4:
c1:df:17:31:9f:33:9a:dc:d0:56:f3:6f:8a:b2:8a:29:a1:a9:
ac:34:af:77:fa:56:07:15:17:18:a1:a9:27:c5:74:3a:18:2f:
ae:0f:36:09:1f:88:09:78:d7:1b:e7:1e:6a:f5:e2:df:62:fc:
a5:9f:2d:bf:81:3c:06:63:19:55:f5:5d:98:f7:36:87:21:5d:
a6:40:f2:24:d0:ba:6f:cc:14:ae:2c:e6:a4:6a:6a:b5:ce:72:
76:7c:5c:ac:16:26:b5:a8:07:05:8d:82:15:8c:a1:a2:ed:4d:
aa:80:61:af:c8:5b:b6:a7:03:a2:bb:8e:d5:3c:56:8b:ea:17:
71:5c:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:45:35 2026 by rpki-client