
Error: rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File: FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier: 6vaQBTjJIsoHr9bj3O9NebkgVlD2Ldvk8yIaeMe/nbI=
Subject key identifier: 48:19:D0:15:EF:BA:55:15:C2:70:C0:E7:16:D6:4B:43:9E:1D:8E:D3
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer: /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial: 059B
Authority info access: rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number: 0597
Signing time: Sun 15 Nov 2026 03:10:34 +0000
Manifest this update: Sun 15 Nov 2026 03:10:33 +0000
Manifest next update: Tue 17 Nov 2026 03:10:33 +0000
Files and hashes: 1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: YkfA+NKINkiQM1lsO1aZvoo95z98Stoyqc8I7SL1uSw=)
2: EB9A40F6876D11F18C949AC0CE1D38B0.roa (hash: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=)
3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Validity
Not Before: Nov 15 03:10:33 2026 GMT
Not After : Nov 17 03:10:33 2026 GMT
Subject: CN=6af922aa-a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:59:0c:b7:62:4c:6b:34:79:89:76:83:29:
6e:29:d7:6c:6d:2a:56:34:b8:c7:d4:68:3b:81:d4:
22:ac:1b:01:cc:9f:cf:b1:71:11:ff:14:b3:5d:c7:
4a:82:8f:8a:b7:3b:30:2b:ef:82:ea:f0:d0:e3:f7:
23:3f:24:0b:af:9c:9a:b1:a7:18:6c:bf:58:36:c4:
7c:ff:ea:4c:1a:81:40:d7:e8:74:14:f2:81:4c:a0:
b0:94:6d:76:32:6b:06:c9:46:9f:ad:af:90:38:d4:
b4:7d:53:5b:39:84:d0:cd:46:f6:6c:e3:fa:b3:98:
b6:fb:71:d8:8b:ac:53:76:34:39:b1:c2:e2:bc:40:
7d:3a:37:ca:87:56:d6:84:12:9d:90:d5:9c:24:88:
ca:d9:15:80:4a:94:b3:07:f7:84:af:0f:d6:16:c7:
17:59:51:dc:f3:fd:50:40:9b:69:e1:ba:30:c8:10:
d9:13:d4:2e:90:15:04:27:31:fc:8a:f1:95:60:9a:
7e:76:05:1c:1b:3e:f8:67:a2:39:3e:b8:ae:07:20:
83:4f:4f:99:ad:40:68:63:5c:db:49:09:e2:e5:2c:
0e:d9:bf:34:51:c0:de:66:41:5c:83:0d:65:b6:66:
22:e4:a4:05:25:26:d0:9e:9f:48:77:26:b3:88:ce:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:D0:15:EF:BA:55:15:C2:70:C0:E7:16:D6:4B:43:9E:1D:8E:D3
X509v3 Authority Key Identifier:
keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:da:56:ca:35:34:fa:1d:1d:d2:02:3b:4f:83:6b:71:69:
24:c4:82:25:0a:55:12:0e:fe:18:d5:29:34:7d:31:bc:40:5b:
df:51:da:eb:87:0d:68:48:61:02:51:22:85:40:e0:fe:40:8c:
bb:ec:6c:ef:d1:77:f1:49:fe:9e:44:83:be:f0:b1:68:fa:ea:
ce:6e:f1:44:9b:71:e5:96:4f:d9:24:3e:26:61:a1:20:c3:95:
1e:ed:25:28:89:f1:36:67:30:51:9c:34:3e:c2:6c:b3:0f:ca:
a9:b8:9a:91:fc:34:ee:84:93:ae:72:48:09:bd:ee:30:8c:70:
af:45:d2:3d:a2:f6:c2:04:37:30:30:03:d9:13:e8:24:61:cb:
df:81:5b:57:ff:eb:c3:da:b1:ee:c0:28:a6:24:30:ff:ff:77:
db:4d:59:e2:72:14:3f:ff:15:7d:67:03:ca:f3:15:3b:48:f4:
d7:66:ca:22:c4:ac:72:bd:ec:e9:1d:7c:a7:d3:04:af:d8:f5:
61:22:10:45:93:4b:af:0f:5c:25:da:74:c0:0f:02:5e:71:d3:
5e:76:8c:60:b6:c9:c2:6c:b3:14:57:d5:5b:83:06:5d:9c:12:
ea:46:5f:e6:25:32:c9:f9:53:0b:67:ad:1c:b3:cb:ee:d6:70:
fe:ca:95:11
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBNDRBUjExMC8GA1UEBRMoMTZDNzRFNzM5NURDMjFERDg0NEEyMkEwMTEyODE2
MTIxQTc1RjQ5MjAeFw0yNjExMTUwMzEwMzNaFw0yNjExMTcwMzEwMzNaMBgxFjAU
BgNVBAMTDTZhZjkyMmFhLWE1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCM1kMt2JMazR5iXaDKW4p12xtKlY0uMfUaDuB1CKsGwHMn8+xcRH/FLNd
x0qCj4q3OzAr74Lq8NDj9yM/JAuvnJqxpxhsv1g2xHz/6kwagUDX6HQU8oFMoLCU
bXYyawbJRp+tr5A41LR9U1s5hNDNRvZs4/qzmLb7cdiLrFN2NDmxwuK8QH06N8qH
VtaEEp2Q1ZwkiMrZFYBKlLMH94SvD9YWxxdZUdzz/VBAm2nhujDIENkT1C6QFQQn
MfyK8ZVgmn52BRwbPvhnojk+uK4HIINPT5mtQGhjXNtJCeLlLA7ZvzRRwN5mQVyD
DWW2ZiLkpAUlJtCen0h3JrOIzsEzAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUSBnQ
Fe+6VRXCcMDnFtZLQ54djtMwHwYDVR0jBBgwFoAUFsdOc5XcId2ESiKgESgWEhp1
9JIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QTQ0LzJEQTc1NjgwOUNBNTExRURCNDBGRjM5OUYxMjIyNDY4L0ZzZE9j
NVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ZzZE9jNVhjSWQyRVNpS2dFU2dXRWhwMTlKSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTRBNDQvMkRBNzU2ODA5Q0E1MTFFREI0MEZGMzk5RjEyMjI0
NjgvRnNkT2M1WGNJZDJFU2lLZ0VTZ1dFaHAxOUpJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLbdpWyjU0+h0d0gI7T4NrcWkkxIIlClUS
Dv4Y1Sk0fTG8QFvfUdrrhw1oSGECUSKFQOD+QIy77Gzv0XfxSf6eRIO+8LFo+urO
bvFEm3Hllk/ZJD4mYaEgw5Ue7SUoifE2ZzBRnDQ+wmyzD8qpuJqR/DTuhJOuckgJ
ve4wjHCvRdI9ovbCBDcwMAPZE+gkYcvfgVtX/+vD2rHuwCimJDD//3fbTVnichQ/
/xV9ZwPK8xU7SPTXZsoixKxyvezpHXyn0wSv2PVhIhBFk0uvD1wl2nTADwJecdNe
doxgtsnCbLMUV9VbgwZdnBLqRl/mJTLJ+VMLZ60cs8vu1nD+ypUR
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:06:10 2026 by rpki-client