
Error: rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File: B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier: mdWX3DeOXLlKBSDTDOSjnBre5s9NJjAqsybzSHqGQvg=
Subject key identifier: 84:B7:06:11:6D:23:25:F2:BB:6F:36:A3:1E:22:70:11:E3:FE:39:D5
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer: /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial: 025F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number: 025E
Signing time: Sat 14 Nov 2026 04:49:04 +0000
Manifest this update: Sat 14 Nov 2026 04:49:03 +0000
Manifest next update: Mon 16 Nov 2026 04:49:03 +0000
Files and hashes: 1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: xbbx43fRe6wyKd8tcn6EGfQvw+14mdjsh4tSsRfUw6c=)
2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Validity
Not Before: Nov 14 04:49:03 2026 GMT
Not After : Nov 16 04:49:03 2026 GMT
Subject: CN=6af7e840-28f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:a5:80:79:63:7e:d4:62:82:33:94:00:78:
f6:9f:af:a1:9c:74:87:e6:4f:06:94:b3:5a:e0:f3:
14:b9:ab:c8:6b:f0:d7:2c:9f:8a:d3:28:3a:88:00:
b8:3b:cd:24:09:be:42:de:32:81:24:84:b5:8f:58:
dd:b7:19:06:1d:82:b1:7d:31:75:b5:d7:b1:bd:0e:
f3:4f:fb:e5:50:ca:6b:63:ed:58:59:32:bb:b0:15:
37:b9:6d:4a:79:bf:cd:bd:dc:60:03:09:97:6a:a5:
2f:5d:9e:e4:2e:f5:16:b6:e2:5c:b3:af:6c:d6:3c:
b5:d0:2d:27:6a:37:3c:be:23:39:97:a9:41:e3:1f:
38:6a:5f:69:fc:8c:8e:6d:cd:8f:41:1d:64:3a:be:
5f:14:93:28:98:ab:8a:3b:89:57:60:d3:a2:d0:54:
8d:89:43:c8:ba:66:12:1b:eb:ad:b5:8e:37:f4:e6:
04:96:fd:47:f9:82:5c:0f:2e:52:72:04:ee:b9:6d:
07:6c:f9:7d:e5:66:91:8d:cf:85:50:f8:7a:13:83:
b5:0a:9a:67:e1:d9:4f:4e:28:ec:77:c7:c2:c8:2a:
e9:c5:24:be:82:6c:7a:82:45:95:0d:11:18:88:67:
1c:b7:ec:f6:56:89:f5:0b:db:55:b3:38:76:99:38:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:06:11:6D:23:25:F2:BB:6F:36:A3:1E:22:70:11:E3:FE:39:D5
X509v3 Authority Key Identifier:
keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:fe:b5:3b:cb:04:4f:cb:0c:42:36:81:2e:82:7a:84:34:
74:ce:0c:eb:a5:61:e4:4f:61:3a:4d:55:3b:b4:07:51:37:ea:
57:df:93:ab:46:0b:9a:3e:88:af:e9:5b:69:a0:e5:f2:ee:5b:
ef:2a:58:ef:e4:4a:76:a5:8c:f3:73:9a:ef:e2:6f:93:42:09:
a3:6e:c4:9d:dd:da:e0:ce:21:5a:6e:3b:96:52:84:29:1b:d2:
4c:10:f5:d7:a6:35:2c:59:a1:bf:f8:8f:bd:63:33:8e:6e:d9:
88:9e:f9:51:4f:15:1f:42:0c:e4:e1:e2:42:c6:8d:f4:84:03:
6a:8d:f7:40:8b:29:ea:a8:81:52:37:e9:44:9b:5b:d4:17:6e:
04:60:e5:8e:39:52:41:ab:97:6c:10:c9:1e:3a:69:a6:4f:f2:
9f:24:9e:98:87:d5:96:87:f7:09:82:56:08:3b:5e:17:36:23:
ba:8f:5a:b3:34:d3:f8:6e:9a:a6:4b:ef:82:a9:f3:0a:0d:f0:
60:33:91:0f:ec:38:5f:a6:84:85:71:56:d9:eb:1e:02:eb:0b:
df:ce:6c:c6:78:22:f6:07:f9:03:a5:2c:1a:89:7d:fb:d5:9a:
ef:cb:1b:98:05:7c:24:2f:58:45:cf:1c:7e:a4:6c:c3:b0:37:
77:bc:e6:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkzODlBRjExMC8GA1UEBRMoMDc2MTI1N0RDOTg5QzY3Q0JGRTE2Mzc0ODM0Q0U4
NTkyMTY4Qzk2NDAeFw0yNjExMTQwNDQ5MDNaFw0yNjExMTYwNDQ5MDNaMBgxFjAU
BgNVBAMTDTZhZjdlODQwLTI4ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsJKWAeWN+1GKCM5QAePafr6GcdIfmTwaUs1rg8xS5q8hr8Ncsn4rTKDqI
ALg7zSQJvkLeMoEkhLWPWN23GQYdgrF9MXW117G9DvNP++VQymtj7VhZMruwFTe5
bUp5v8293GADCZdqpS9dnuQu9Ra24lyzr2zWPLXQLSdqNzy+IzmXqUHjHzhqX2n8
jI5tzY9BHWQ6vl8UkyiYq4o7iVdg06LQVI2JQ8i6ZhIb6621jjf05gSW/Uf5glwP
LlJyBO65bQds+X3lZpGNz4VQ+HoTg7UKmmfh2U9OKOx3x8LIKunFJL6CbHqCRZUN
ERiIZxy37PZWifUL21WzOHaZONp7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhLcG
EW0jJfK7bzajHiJwEeP+OdUwHwYDVR0jBBgwFoAUB2ElfcmJxny/4WN0g0zoWSFo
yWQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5Mzg5Lzg2RTNGNjkyMEI0MTExRjA5MkY4NzE2OTc2MkU5NTFBL0IyRWxm
Y21KeG55XzRXTjBnMHpvV1NGb3lXUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0IyRWxmY21KeG55XzRXTjBnMHpvV1NGb3lXUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTkzODkvODZFM0Y2OTIwQjQxMTFGMDkyRjg3MTY5NzYy
RTk1MUEvQjJFbGZjbUp4bnlfNFdOMGcwem9XU0ZveVdRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbWv61O8sET8sMQjaBLoJ6hDR0zgzr
pWHkT2E6TVU7tAdRN+pX35OrRguaPoiv6VtpoOXy7lvvKljv5Ep2pYzzc5rv4m+T
QgmjbsSd3drgziFabjuWUoQpG9JMEPXXpjUsWaG/+I+9YzOObtmInvlRTxUfQgzk
4eJCxo30hANqjfdAiynqqIFSN+lEm1vUF24EYOWOOVJBq5dsEMkeOmmmT/KfJJ6Y
h9WWh/cJglYIO14XNiO6j1qzNNP4bpqmS++CqfMKDfBgM5EP7DhfpoSFcVbZ6x4C
6wvfzmzGeCL2B/kDpSwaiX371ZrvyxuYBXwkL1hFzxx+pGzDsDd3vOb7
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:30 2026 by rpki-client