
Error: rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier: Fil+LbHfxt8g7Oe4jnVcxdXoQ+WdQxYp+wgptIgohEw=
Subject key identifier: 0D:B8:46:A1:26:6B:D5:97:20:FD:E3:5E:20:99:5E:19:A6:E3:79:DD
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 0456
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number: 044B
Signing time: Fri 16 Oct 2026 03:50:57 +0000
Manifest this update: Fri 16 Oct 2026 03:50:56 +0000
Manifest next update: Sun 18 Oct 2026 03:50:56 +0000
Files and hashes: 1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: YVY93LxhrdeBSmNdxjWLpdYBoEpvm6N+SrQDWkxpYkI=)
2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 18 Oct 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Validity
Not Before: Oct 16 03:50:56 2026 GMT
Not After : Oct 18 03:50:56 2026 GMT
Subject: CN=6ad19f21-42fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:20:f3:a2:f7:49:0b:69:91:a7:2b:b4:2c:
41:f7:a7:2f:50:5d:17:a2:2d:88:6a:d5:a1:a8:37:
cb:38:cb:d4:f0:73:54:22:74:0a:e1:e5:da:95:3b:
7f:a6:70:ce:57:01:32:dc:65:81:2d:4a:df:f5:b3:
83:b4:c5:fe:35:d8:8b:55:76:73:70:13:07:d8:84:
f5:53:b6:a1:eb:e5:d3:ca:df:cf:cb:96:04:ab:45:
7a:e7:f3:82:96:a7:66:fc:8c:5e:48:86:a0:6e:b0:
e3:a9:e5:f5:9d:a4:aa:79:88:88:00:3f:0d:70:3e:
dc:0a:c9:bd:76:70:49:72:aa:a3:80:ef:21:63:7c:
6d:3d:cb:2e:f5:80:08:2e:6d:d8:20:f1:6f:a0:44:
4c:c9:3d:03:6d:46:86:7a:a4:9b:7d:a1:8d:03:7e:
e6:1b:8c:0d:df:1c:11:50:91:4e:47:01:3f:10:13:
f5:08:18:76:e3:77:c1:05:1e:5e:6b:71:54:99:5a:
0d:76:cf:df:66:cc:2b:62:44:23:94:2d:05:3a:00:
df:fd:e3:89:8f:06:9b:94:87:bb:5d:cd:d8:87:14:
40:3f:1d:2e:d1:0e:3b:81:23:91:6f:e0:80:b3:90:
2d:61:90:6c:6c:4a:e4:0f:e1:53:3f:ec:be:74:5c:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:46:A1:26:6B:D5:97:20:FD:E3:5E:20:99:5E:19:A6:E3:79:DD
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:87:98:df:07:28:f7:c8:30:a4:6e:a7:4c:22:b5:98:7f:c3:
c2:cd:de:da:2d:52:fc:22:b2:8d:ed:5e:6f:40:ff:70:01:7a:
da:f5:2c:ad:f9:7e:83:17:f5:ee:31:19:83:cd:09:70:07:1d:
72:64:b0:5c:b2:01:94:7a:38:d5:69:18:9e:90:52:b6:da:e8:
c8:87:db:5a:5d:18:74:c5:ca:37:1e:45:18:6b:5b:2d:07:d4:
2f:c3:d5:1f:e5:05:ed:35:5d:2a:be:2c:6e:b3:79:80:ff:ec:
67:28:ec:0c:5e:c7:0f:a1:b9:33:4f:b4:f8:d4:19:e5:7a:81:
2f:72:0c:b9:c5:18:e6:3a:59:50:f4:00:c9:4b:48:f6:82:19:
86:3d:42:01:d0:8c:ea:d2:ea:98:b7:5f:5c:c4:7c:8d:e3:a5:
19:a9:fd:fd:24:d3:89:4f:fb:d9:8c:ba:4e:ff:0a:12:0c:1d:
be:35:da:08:c8:52:71:fa:d7:e3:f8:1c:c2:a0:1b:bc:e4:a2:
6a:83:2e:5c:d1:6c:d0:51:22:5c:8b:59:a0:f1:00:3c:8c:db:
23:77:45:c0:78:ba:70:3a:4d:6d:32:0c:3d:bb:f2:7b:33:9a:
c8:d2:ba:e9:22:e2:07:17:b2:70:3e:56:a9:96:a4:25:6e:33:
6b:40:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:36:10 2026 by rpki-client