
Error: rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File: Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier: IMNBabW87cqG6kxCxx1sfkowCzOjHPSIU4Lhn/gZalk=
Subject key identifier: 15:27:B5:15:9C:5A:95:4C:EF:0B:FC:36:87:B5:A0:4A:35:E0:DD:EE
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer: /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial: 041F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number: 041B
Signing time: Sat 03 Oct 2026 03:52:25 +0000
Manifest this update: Sat 03 Oct 2026 03:52:24 +0000
Manifest next update: Mon 05 Oct 2026 03:52:24 +0000
Files and hashes: 1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: E+9voQ4CFdm3SQFhIm9G/GaPt2Qrxbi0qmruEi8Beh0=)
2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Validity
Not Before: Oct 3 03:52:24 2026 GMT
Not After : Oct 5 03:52:24 2026 GMT
Subject: CN=6ac07bf9-92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:98:72:82:6c:0f:ca:3e:a4:0d:2a:74:16:
ac:bb:c3:7c:f8:52:7f:5a:8b:7b:b4:85:43:72:00:
53:35:05:a0:c3:61:9c:f2:68:2b:4a:d1:5a:d9:70:
28:c9:d4:71:56:11:15:4b:2f:91:aa:28:9e:1b:5d:
ce:97:80:40:d1:6a:cb:e7:1c:7a:c3:d5:c6:bf:5e:
8b:10:83:0e:78:dd:3e:6f:2f:30:ec:a3:9e:25:ca:
e0:19:65:10:23:4f:79:3c:a2:d4:55:30:ea:11:58:
86:c5:0c:c8:53:96:6e:26:83:da:e8:69:65:89:36:
41:c3:de:7d:4a:6d:cc:a2:22:26:1b:83:cd:3a:a9:
11:39:86:36:2e:e7:fa:8c:f5:9f:bd:43:e5:60:fa:
57:99:34:a7:80:1d:0a:bf:1b:31:b8:0f:73:29:6f:
e3:9c:af:2f:55:59:78:62:87:77:78:e2:82:bd:60:
f3:8f:8c:c4:34:8f:04:52:d6:b5:92:ec:bd:95:d8:
71:c9:a9:57:93:b1:09:a1:c2:87:d2:9a:69:d9:7b:
6a:b1:49:37:14:56:73:1f:9d:d3:55:91:c8:91:d9:
66:34:70:43:27:8e:e7:51:65:45:66:b6:ad:2b:7d:
43:2e:17:7f:dd:55:4d:1a:03:89:33:d8:a6:09:18:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:B5:15:9C:5A:95:4C:EF:0B:FC:36:87:B5:A0:4A:35:E0:DD:EE
X509v3 Authority Key Identifier:
keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:1d:5d:e0:cd:35:91:39:35:91:1a:67:dd:85:c1:3a:24:
ba:88:9a:b9:a2:18:73:e8:3f:98:93:20:e9:a3:65:b0:eb:88:
07:3b:1f:fd:16:5b:08:25:53:a9:73:70:ac:c1:d0:b9:d6:7f:
78:1d:e3:a0:8a:1a:05:70:54:45:e0:f0:12:4a:d7:36:81:39:
26:54:f8:71:84:71:df:2c:40:83:fb:e7:80:2b:ca:46:25:e0:
ab:bf:c7:9d:cf:9e:74:97:d7:62:cd:d7:c0:e6:34:bd:ee:20:
1d:e6:00:52:ea:07:f1:63:ae:34:fc:25:f5:29:15:f6:47:bb:
9d:fe:3f:9e:bc:23:8b:ed:86:d2:f5:89:19:d0:0c:90:51:37:
6e:28:fd:2b:dd:1a:97:d0:e7:9e:4f:09:87:cc:db:4a:64:f0:
48:16:a3:ec:d2:c2:bf:a0:d6:30:72:91:ba:aa:e9:eb:70:f1:
bc:16:76:a3:da:3e:c0:ab:13:23:ac:d0:d8:86:b1:f6:36:0d:
ba:98:4e:8c:87:c6:60:d6:63:d5:56:b2:f2:4f:66:62:b5:2e:
6b:d8:a6:90:d3:e9:e3:89:c7:af:34:46:91:39:e3:1d:ad:50:
7d:e2:58:3a:b0:07:5d:65:64:5c:cf:d8:da:27:37:00:63:6b:
49:80:c7:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTJDM0FBRjExMC8GA1UEBRMoM0YwRUVBNTkxOTZEMTRBMzJBRjM1REExNzEwRjE1
MEQ1RjlEREREODAeFw0yNjEwMDMwMzUyMjRaFw0yNjEwMDUwMzUyMjRaMBgxFjAU
BgNVBAMTDTZhYzA3YmY5LTkyZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCt+phygmwPyj6kDSp0Fqy7w3z4Un9ai3u0hUNyAFM1BaDDYZzyaCtK0VrZ
cCjJ1HFWERVLL5GqKJ4bXc6XgEDRasvnHHrD1ca/XosQgw543T5vLzDso54lyuAZ
ZRAjT3k8otRVMOoRWIbFDMhTlm4mg9roaWWJNkHD3n1KbcyiIiYbg806qRE5hjYu
5/qM9Z+9Q+Vg+leZNKeAHQq/GzG4D3Mpb+Ocry9VWXhih3d44oK9YPOPjMQ0jwRS
1rWS7L2V2HHJqVeTsQmhwofSmmnZe2qxSTcUVnMfndNVkciR2WY0cEMnjudRZUVm
tq0rfUMuF3/dVU0aA4kz2KYJGJ+VAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFSe1
FZxalUzvC/w2h7WgSjXg3e4wHwYDVR0jBBgwFoAUPw7qWRltFKMq812hcQ8VDV+d
3dgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyQzNBL0Q2MDdDRjI4OUE4MTExRUU4QTdCRjEyQkQyNUJFNDY1L1B3N3FX
Umx0RktNcTgxMmhjUThWRFYtZDNkZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B3N3FXUmx0RktNcTgxMmhjUThWRFYtZDNkZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTJDM0EvRDYwN0NGMjg5QTgxMTFFRThBN0JGMTJCRDI1
QkU0NjUvUHc3cVdSbHRGS01xODEyaGNROFZEVi1kM2RnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9YB1d4M01kTk1kRpn3YXBOiS6iJq5
ohhz6D+YkyDpo2Ww64gHOx/9FlsIJVOpc3CswdC51n94HeOgihoFcFRF4PASStc2
gTkmVPhxhHHfLECD++eAK8pGJeCrv8edz550l9dizdfA5jS97iAd5gBS6gfxY640
/CX1KRX2R7ud/j+evCOL7YbS9YkZ0AyQUTduKP0r3RqX0OeeTwmHzNtKZPBIFqPs
0sK/oNYwcpG6qunrcPG8Fnaj2j7AqxMjrNDYhrH2Ng26mE6Mh8Zg1mPVVrLyT2Zi
tS5r2KaQ0+njicevNEaROeMdrVB94lg6sAddZWRcz9jaJzcAY2tJgMeP
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:11:28 2026 by rpki-client