
Error: rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
File: 1DoqVLLNNnZCx2hmihOEa4nsje8.mft (raw, json)
Hash identifier: iaqrvdRNLulhmhVMKZEO0qcRkvqr9vT9vEFkzQW8Rcc=
Subject key identifier: 3C:02:38:6D:0E:EB:03:0C:1E:87:5B:6B:E9:D0:91:8C:45:83:5B:5B
Authority key identifier: D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
Certificate issuer: /CN=F364EAB0AF/serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Certificate serial: 032B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
Manifest number: 0329
Signing time: Fri 25 Sep 2026 04:20:31 +0000
Manifest this update: Fri 25 Sep 2026 04:20:30 +0000
Manifest next update: Sun 27 Sep 2026 04:20:30 +0000
Files and hashes: 1: 1DoqVLLNNnZCx2hmihOEa4nsje8.crl (hash: 7QZ525/trDdWu/FhV6nIby7MnLsd2UEEVHQlmdDfoA8=)
2: 7DA8929649D011EF8540F4B5762E951A.roa (hash: YovCsrPwXRshmsWk3A69TUGehERZxXiw2xy+oTe5v1Y=)
3: ECC95BD248EB11EF9E6AB0A8762E951A.roa (hash: oLh1HXERxgDkZE8Kx15N1v8Oh2muKtEvQ5qn9c925Ag=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364EAB0AF, serialNumber=D43A2A54B2CD367642C768668A13846B89EC8DEF
Validity
Not Before: Sep 25 04:20:30 2026 GMT
Not After : Sep 27 04:20:30 2026 GMT
Subject: CN=6ab5f68f-3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:25:bf:66:80:86:f8:c1:fe:7f:ea:9a:71:
07:c5:a1:06:8c:2e:53:f9:51:12:85:e2:8f:15:92:
f8:53:44:ac:c1:e6:77:fe:82:86:36:fa:34:89:2d:
d2:24:24:77:ea:7c:26:81:12:ed:8b:ff:b5:b2:f7:
85:ed:14:81:82:f8:0f:b0:e1:5b:92:5d:93:63:1a:
05:eb:0c:b4:46:e3:fc:26:77:a3:b5:a2:45:9e:c1:
6c:c5:0e:4d:a0:dd:66:f8:92:6c:cf:ae:41:54:8c:
2a:77:99:0c:c6:c6:5e:9f:54:5e:08:fb:75:c5:0f:
90:bc:f4:d8:21:46:a3:78:3c:41:13:2e:95:3b:80:
1c:cf:f4:0b:34:f1:9c:e2:6d:c3:c0:01:59:e3:b4:
a1:20:da:86:dc:e4:25:ad:0d:28:ca:b4:ef:1c:9e:
f7:41:5b:bf:5a:9c:ea:b2:44:b2:73:e3:c5:f0:5c:
69:7b:c8:de:ce:e3:15:4d:c7:41:7e:d0:89:4a:87:
07:69:30:a3:1d:76:30:16:f5:7d:47:d2:ae:b1:8d:
e8:57:85:d3:d0:d5:0d:c5:7e:e0:6a:f1:3f:89:fb:
20:1f:f4:9f:67:05:6d:c0:62:94:29:06:f7:d8:7e:
a3:9b:71:00:d1:18:e7:05:cc:aa:1f:46:f9:03:1f:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:02:38:6D:0E:EB:03:0C:1E:87:5B:6B:E9:D0:91:8C:45:83:5B:5B
X509v3 Authority Key Identifier:
keyid:D4:3A:2A:54:B2:CD:36:76:42:C7:68:66:8A:13:84:6B:89:EC:8D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1DoqVLLNNnZCx2hmihOEa4nsje8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EAB0/3CAB40F448EA11EF885DEE9E762E951A/1DoqVLLNNnZCx2hmihOEa4nsje8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:71:f3:2d:4b:b1:19:b4:f8:8a:67:0f:cc:fb:68:31:da:44:
4a:a7:15:af:ce:cb:44:b0:01:69:96:54:36:07:e2:cf:65:ca:
a2:37:0b:ab:5d:be:9d:3a:a9:fc:50:58:e5:c8:fd:5e:26:ac:
94:86:12:02:f5:0b:f7:d2:cd:f3:6a:44:29:f2:2c:4f:24:06:
ef:e5:9f:1e:51:68:65:46:10:7f:59:fb:a9:27:16:84:b5:c6:
63:86:8e:63:30:19:74:fc:3a:ac:b4:81:59:c1:86:5a:cf:7e:
e8:45:e9:27:a9:14:7d:90:b8:03:3c:bd:42:bd:c3:23:d6:ed:
25:6a:c2:5c:a3:cb:c2:50:de:97:14:14:9f:c3:77:00:98:50:
dd:c9:e1:45:68:c0:2f:dd:24:de:2b:c4:f6:6e:27:82:02:ba:
d9:91:37:9a:e0:ae:25:e5:c0:97:cf:b0:83:51:5e:30:e2:24:
0a:da:60:c1:ec:f4:00:26:a4:f7:ad:b1:0b:9a:de:18:c6:b5:
8a:0a:e7:1e:7d:2a:30:ae:c0:c6:07:8b:ae:39:ee:67:3e:b2:
e1:93:85:be:50:bb:80:86:b3:8b:41:1f:e7:8f:c8:5e:a2:6c:
cb:25:a5:b0:b5:a4:34:55:b2:56:f3:c8:05:ec:d5:b1:32:9c:
c5:5f:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:49:03 2026 by rpki-client