
Error: rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File: ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier: XQeejI8HDCunHZI+cEeUB/dwrBz3PJzItZho83xRG14=
Subject key identifier: C6:6F:15:85:9E:74:EC:FD:13:73:BC:A7:D4:7C:E4:38:B8:BB:D3:02
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer: /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial: 0E93
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number: 0E91
Signing time: Wed 23 Sep 2026 01:05:30 +0000
Manifest this update: Wed 23 Sep 2026 01:05:29 +0000
Manifest next update: Fri 25 Sep 2026 01:05:29 +0000
Files and hashes: 1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: +ZO9Ry1QLCeDeLMH3Zqr6KoYOnVFfRS0CPx7ihuk0yM=)
2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 01:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3731 (0xe93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Validity
Not Before: Sep 23 01:05:29 2026 GMT
Not After : Sep 25 01:05:29 2026 GMT
Subject: CN=6ab325da-604f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:0c:53:39:16:b4:b6:d0:5d:5d:ff:bf:3a:
f6:a5:71:8e:ae:9b:85:71:8b:14:c3:57:af:c7:7c:
16:68:99:0a:bf:81:37:b2:47:e2:23:c0:bf:d8:70:
bf:3a:e9:ce:33:ac:ed:19:26:49:ef:d3:69:48:00:
47:cd:4d:e1:f7:5d:a6:df:b4:92:5a:17:93:f8:ca:
d5:40:27:ee:64:83:d3:dc:f5:96:2f:04:ae:02:7d:
cb:8b:2b:41:0c:0e:d2:4c:63:1d:45:82:18:12:de:
10:77:2a:c4:08:81:85:e5:ac:60:d9:29:67:d6:2d:
2b:be:e3:3b:94:cb:42:52:4e:68:5c:47:51:f5:47:
55:8a:26:3a:3c:f0:55:80:72:32:1e:0a:03:ed:d5:
a5:4d:93:31:d9:83:d6:3d:f5:f6:9c:b9:05:e0:86:
ce:87:76:b0:2e:54:e5:20:18:83:2f:e3:cf:84:3e:
d4:09:7f:4a:b1:c9:c1:bd:d0:29:f7:d5:16:e6:23:
17:47:44:c3:c3:cf:97:32:5e:51:0e:3b:ca:fe:cc:
4b:67:db:42:28:c5:80:f2:8c:25:9f:5d:1e:92:3b:
cf:bc:ba:47:79:bd:89:a3:4a:96:f8:f8:87:b3:e5:
b3:df:24:03:fd:d6:ca:00:38:bb:06:3e:12:aa:0d:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:15:85:9E:74:EC:FD:13:73:BC:A7:D4:7C:E4:38:B8:BB:D3:02
X509v3 Authority Key Identifier:
keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:49:47:78:0d:ca:03:de:74:a3:c3:aa:57:c7:21:e7:56:
dd:26:fd:12:e3:64:73:36:3e:05:fa:e1:40:cd:51:01:05:48:
84:0e:6e:a4:90:76:d6:f0:98:21:ac:fc:30:a2:f5:30:01:bf:
5e:54:ce:8a:6c:00:8d:9a:c5:4d:11:0d:25:71:ed:aa:c1:41:
78:f8:99:25:46:09:19:7d:7a:e3:66:03:8e:e6:3e:9b:23:af:
c1:71:ec:10:e6:8a:e0:78:fb:d2:7e:54:da:b3:64:36:6d:47:
c5:b0:14:6c:a9:de:98:12:3f:38:f7:cd:37:68:ad:c9:01:7e:
c7:42:66:df:e5:73:4c:ad:53:7e:a2:98:e1:f9:05:64:aa:7a:
58:35:25:e1:31:4f:1e:b8:23:d0:71:bc:db:16:94:ce:6b:1e:
db:17:25:c6:c1:2f:88:4f:f2:ed:99:d0:60:28:8b:ed:c0:4c:
c0:fc:cc:a2:26:de:b5:54:c4:31:3d:4e:b1:ca:75:5b:0e:72:
9f:86:f9:a4:78:62:fd:32:15:70:06:f5:58:38:02:62:2b:f7:
e6:3f:98:b0:0f:08:07:e4:e4:cc:ea:99:3e:2d:7e:06:36:9b:
a8:fa:02:e0:45:f1:1d:48:12:72:64:26:80:6a:e6:a8:1d:4e:
0c:23:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:51:49 2026 by rpki-client