
Error: rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File: NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier: PRbBSbG3a4AWtTTTy9qovBHm/RfsCXM3llToNNvg/8M=
Subject key identifier: ED:16:37:BD:5F:D4:0A:F7:6F:BB:74:4C:E7:25:D2:90:5D:E9:AE:34
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer: /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial: 0B41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number: 0B3B
Signing time: Thu 08 Oct 2026 01:16:42 +0000
Manifest this update: Thu 08 Oct 2026 01:16:41 +0000
Manifest next update: Sat 10 Oct 2026 01:16:41 +0000
Files and hashes: 1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: 3iiNorPFZqn+5vSrgdd7oyb7tbOpID5/vKzcD0bbPQM=)
2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
4: C5B11B58483E11F1B8CB3DB0CE1D38B0.roa (hash: Y0ZCKfJAfWw5PWvP1AXpo5C8au43GtXQpd0r+podfi0=)
5: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
6: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 01:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Validity
Not Before: Oct 8 01:16:41 2026 GMT
Not After : Oct 10 01:16:41 2026 GMT
Subject: CN=6ac6eefa-5542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:eb:3f:59:3f:bf:33:08:18:3e:11:e4:75:
9a:52:c0:60:07:c2:b2:c7:28:c3:60:8c:13:e8:00:
fd:d3:99:0a:3d:0b:c2:3e:77:2c:98:4c:8e:05:dc:
44:c3:26:8e:ae:e4:5c:58:a2:57:88:e2:6d:da:7d:
dd:73:73:7f:ff:ad:57:70:94:82:21:df:8a:da:33:
90:f4:a7:a0:69:4a:eb:a1:f8:9c:5d:bb:6b:56:47:
d8:d1:9f:e7:ce:1e:ef:92:9e:51:01:f4:3b:59:63:
8c:41:aa:e4:d2:ad:6f:6f:7e:16:bc:40:2f:f2:1e:
c0:73:1c:15:ae:87:9d:ae:03:ab:c0:23:d9:68:6b:
c4:8a:c3:cc:f5:a9:16:9b:9a:19:a7:92:ba:37:1d:
90:98:92:87:65:4e:3f:ea:12:c0:8e:cb:82:c4:56:
4a:c6:b0:ad:da:5e:d6:f7:85:68:f3:48:ce:63:97:
e4:b7:0f:0b:ef:ca:32:13:91:47:42:69:d3:09:27:
06:3a:57:09:f6:98:a1:45:db:f4:ba:91:84:6e:2f:
9f:ef:e2:1a:54:0f:e5:2e:b8:56:18:49:5e:74:b0:
6c:2a:c5:d6:6c:37:0e:d2:28:eb:4e:02:f0:04:9e:
54:5d:1b:7c:7d:e2:d9:8b:5e:fb:47:7c:19:03:6d:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:37:BD:5F:D4:0A:F7:6F:BB:74:4C:E7:25:D2:90:5D:E9:AE:34
X509v3 Authority Key Identifier:
keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:04:38:d7:6a:a3:b2:47:60:0d:6d:51:e0:b6:87:c4:0a:f7:
59:69:a9:69:1c:2f:07:2e:e9:ae:de:ef:ca:c4:da:9c:5c:61:
3b:1d:cc:6f:65:9c:ea:c1:a7:53:25:8b:ae:fe:26:68:b2:d7:
33:4a:03:f0:7c:c6:6a:12:f8:29:c3:0e:38:c5:7e:6d:e8:a0:
f4:8c:b5:cf:ea:ea:44:fd:88:b7:19:7a:15:fb:bf:ee:a0:57:
89:d7:3f:04:e5:7f:e4:e0:7d:59:18:06:5b:ae:3a:5d:2f:d1:
09:40:98:7f:40:ba:4a:ce:0b:ad:1a:4f:36:71:b0:14:e0:93:
95:b5:cb:ce:41:cb:58:42:dc:29:5e:76:46:1e:63:5d:73:b7:
0e:bc:1f:60:27:c6:6b:12:ba:e7:65:cb:7f:cc:76:2d:f0:c4:
88:0a:1a:e5:81:92:bb:df:27:09:4f:4b:28:80:84:84:6f:ce:
d7:cc:1d:cd:ae:22:9c:31:8f:43:f3:71:9c:78:14:cc:ee:90:
f0:49:34:3a:74:ce:e5:fb:58:d0:ff:cf:1e:eb:db:87:66:92:
2d:4f:89:d0:9a:15:d6:5f:c4:18:c9:44:fc:40:b9:2e:bf:de:
0c:15:c2:c7:0d:ba:58:ad:7a:8a:91:51:47:92:2f:f0:86:f0:
c0:3d:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:39:59 2026 by rpki-client