
Error: rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
File: CW2z073uu30kcGbciyW5ZMxAmdc.mft (raw, json)
Hash identifier: ccGGeF/s0EGnf5m99lHJWgCPf5T9yHOKB1qEhG/EzWs=
Subject key identifier: CC:41:40:C1:AF:0B:11:30:64:36:06:AC:ED:6D:B3:29:86:F7:8B:01
Authority key identifier: 09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
Certificate issuer: /CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Certificate serial: 03CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
Manifest number: 03C6
Signing time: Sat 26 Sep 2026 04:03:40 +0000
Manifest this update: Sat 26 Sep 2026 04:03:39 +0000
Manifest next update: Mon 28 Sep 2026 04:03:39 +0000
Files and hashes: 1: CW2z073uu30kcGbciyW5ZMxAmdc.crl (hash: wS82MLvRoHtNWYVMTAHGqREdRkHnyyqbFX9lxPdXAZk=)
2: 7DA422ACD4C511F0B1311BECDAE4EC9C.roa (hash: 6V8Z71gkmFS44iG++1MEDpGgXR97Y4NjsKUF87yk400=)
3: 788D2BE0D8AC11EE9DB58DA2775412E6.roa (hash: 65eF1Tp/RlXNcWyLpB3YoIRfdS2c/kR79xeADgOJBXo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AEEAF, serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Validity
Not Before: Sep 26 04:03:39 2026 GMT
Not After : Sep 28 04:03:39 2026 GMT
Subject: CN=6ab7441c-7268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:da:d0:57:37:da:05:57:da:1f:11:77:8a:
ff:05:f0:2d:87:12:fd:4e:01:cf:cd:ea:0b:ec:7f:
94:5a:3e:65:ba:4d:de:c5:b8:20:4d:58:1e:a1:45:
73:ad:09:83:d7:e1:69:cc:b0:ed:88:ee:8a:b2:16:
64:0a:18:9d:91:a8:b3:fd:f5:f7:d6:9a:7b:17:12:
d0:cb:78:30:8a:d2:72:2d:69:17:ae:ce:02:fc:58:
b7:59:24:e5:02:f6:10:c3:f0:74:e9:6c:49:63:4d:
f3:ff:c0:2e:5d:5f:31:75:bb:28:dc:bf:87:94:fe:
11:13:06:af:3b:54:e3:cb:ea:ba:87:25:73:a1:16:
a9:45:02:88:5a:86:64:e3:45:a0:6d:a5:82:98:99:
f2:3a:50:8f:a5:43:6d:88:d3:5e:ea:bc:9a:e6:79:
48:f4:00:e8:7c:b4:1e:30:06:74:dc:e3:2d:43:2f:
28:2f:7c:8c:29:8b:e5:85:43:67:f2:d0:fa:5b:b7:
47:2a:e8:37:23:0e:69:cd:1e:73:a2:e7:cc:62:5c:
f8:01:66:b5:87:84:a1:d4:a1:84:75:32:db:66:47:
f2:ea:dd:b7:55:a3:da:5a:50:68:51:0b:fc:6a:8f:
3a:e3:5d:c7:09:25:fd:28:59:c6:be:5f:39:cc:d6:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:40:C1:AF:0B:11:30:64:36:06:AC:ED:6D:B3:29:86:F7:8B:01
X509v3 Authority Key Identifier:
keyid:09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:f3:cb:ce:c5:35:35:6f:6b:1c:0a:05:a3:d9:fe:22:fe:80:
d7:a2:b1:2a:4b:72:39:01:cc:76:93:9b:8a:c8:02:ac:66:96:
b0:fe:96:2e:59:bb:86:af:30:9a:a4:62:c0:d1:26:88:5f:9a:
66:b5:1f:48:45:e5:02:1a:d2:21:de:42:c2:03:8b:1e:2b:ee:
dc:9b:cc:29:10:e1:78:7b:76:3c:3a:11:61:5e:69:6e:db:90:
bb:02:ad:46:15:72:10:db:de:49:71:a1:9f:db:a2:a2:5b:b4:
26:f7:7a:c3:f2:20:36:d9:61:98:89:6a:5c:b8:b6:3e:6b:ae:
83:c7:d6:e5:ee:47:26:74:a5:a1:cc:55:50:a9:d0:c1:84:5c:
33:2f:03:f4:01:c5:10:af:e6:9f:bf:76:18:c9:ae:75:3d:7e:
bf:b7:02:29:2c:12:6a:a8:f5:6f:ba:2c:fc:fb:05:93:b9:14:
fc:1b:ae:43:70:57:dc:8f:13:c5:e9:20:88:13:71:13:28:39:
04:40:81:41:36:52:9a:04:c5:d1:14:71:0e:b4:4b:26:ee:be:
c1:41:c5:75:e1:2b:73:31:11:46:a2:34:b1:42:d2:96:32:57:
bd:e6:6c:12:02:aa:7c:e3:06:bc:76:14:33:da:ac:d4:d4:6f:
81:1d:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:07 2026 by rpki-client