
Error: rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
File: DG5701tCYU_PjSJN2I63sPfvwYI.mft (raw, json)
Hash identifier: KYdUk96qjR+FchVcg197Fq31cnOTe2e7iTVe77MegiI=
Subject key identifier: F3:7E:A8:81:36:01:AF:7E:45:53:29:31:25:00:0D:48:93:E5:D0:9A
Authority key identifier: 0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
Certificate issuer: /CN=F365BA89AF/serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Certificate serial: 01B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
Manifest number: 01AC
Signing time: Thu 24 Sep 2026 05:06:53 +0000
Manifest this update: Thu 24 Sep 2026 05:06:52 +0000
Manifest next update: Sat 26 Sep 2026 05:06:52 +0000
Files and hashes: 1: DG5701tCYU_PjSJN2I63sPfvwYI.crl (hash: WJdXLwKsGf8lOS4clfxw4be73uip3Mxv8SFVg/12IGs=)
2: B3B9441AB4AB11F0AB1503F2DAE4EC9C.roa (hash: RwHD+Trhxws3zYvrFRwgdKof2CblxIDy9QFXW4Tleeg=)
3: BCC19C20802A11F08F97F0E7DAE4EC9C.roa (hash: oc0j3RlYEgdI4U0HFrR3Y7CfmN04fsE2aq4oX+gpdNQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BA89AF, serialNumber=0C6E7BD35B42614FCF8D224DD88EB7B0F7EFC182
Validity
Not Before: Sep 24 05:06:52 2026 GMT
Not After : Sep 26 05:06:52 2026 GMT
Subject: CN=6ab4afed-2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:92:4a:a3:07:04:b9:f4:d3:7c:3a:cd:3e:
c5:78:51:22:bf:9e:5d:b9:da:7b:8c:3e:da:87:c6:
ff:84:6d:c9:77:1d:02:68:f3:c7:49:5f:06:4d:a4:
0c:10:d1:86:4f:a0:29:83:b8:ea:97:8e:6d:f9:20:
5e:01:0a:d7:61:4a:cd:4c:12:5f:68:f0:52:76:d2:
a5:ce:fa:81:1d:c5:8a:b6:35:fb:16:62:98:de:d6:
ec:33:46:b5:41:08:6a:ac:00:8b:1d:2b:58:52:73:
d7:05:22:f7:ce:fe:3e:f5:ba:90:e7:16:a3:aa:5d:
1e:6b:e2:89:03:2b:07:01:34:15:ea:85:a1:39:ac:
d9:38:59:95:26:2f:f0:53:1d:00:a8:b2:4d:c2:83:
c8:e1:c1:2c:cd:76:c8:eb:37:a4:9a:35:40:ed:1f:
bd:51:6a:93:45:a8:7a:22:16:43:94:9e:8d:fb:0c:
16:36:fe:c4:9c:1a:02:a0:a0:1b:ff:0f:36:9f:3b:
1b:14:46:a7:8b:c6:d2:b0:34:06:fa:4c:06:e5:01:
90:05:ee:12:1c:22:6f:c4:d0:80:0d:94:94:a7:5c:
eb:d5:8a:08:e3:23:ab:6b:0b:1e:26:d1:99:a6:c8:
40:9c:66:6e:ac:e9:79:5a:b9:f1:d9:5b:cb:69:3f:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:A8:81:36:01:AF:7E:45:53:29:31:25:00:0D:48:93:E5:D0:9A
X509v3 Authority Key Identifier:
keyid:0C:6E:7B:D3:5B:42:61:4F:CF:8D:22:4D:D8:8E:B7:B0:F7:EF:C1:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DG5701tCYU_PjSJN2I63sPfvwYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BA89/38C9CA227F3B11F0B19C74C8DAE4EC9C/DG5701tCYU_PjSJN2I63sPfvwYI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:b6:5b:45:5c:b3:e8:ca:92:89:2a:6e:54:e2:ec:b0:51:
36:c1:24:23:0d:0b:32:57:4f:ba:1c:07:b2:24:2e:39:87:0a:
7f:88:a1:e2:90:13:99:fb:ef:89:61:6d:b6:d2:fd:e9:35:ec:
f7:1e:11:e6:16:ad:d5:73:48:b7:d4:71:6b:96:0c:01:b3:0d:
c3:0f:9c:16:fd:33:b8:f1:bc:93:fd:1d:cc:19:de:07:18:66:
2e:03:40:32:e4:d4:ce:b8:92:fa:4f:22:ff:bd:f2:a6:b3:e6:
b9:9f:ef:04:ab:d3:85:5e:48:a2:b9:8c:fa:ec:5a:d5:1d:6e:
86:2c:d7:0a:74:4c:ae:f9:cf:6c:54:46:35:8b:83:9e:45:3d:
e5:b6:a3:d0:00:63:a9:12:dd:21:7b:ee:ca:97:14:b9:5d:83:
bc:69:44:2e:84:ad:35:eb:43:1f:31:5a:44:c7:0d:08:d7:21:
e1:ab:9a:00:70:52:2b:d7:d2:f7:3b:88:8d:3c:70:77:e9:cf:
db:57:87:75:a6:be:af:67:1c:ce:a0:65:52:29:66:d6:af:8d:
37:0d:a9:6c:14:5e:d0:48:91:3f:59:25:80:4b:26:8d:cf:17:
45:58:47:1f:09:a6:db:6d:b2:78:a7:97:29:a1:77:9e:bf:4a:
ed:a9:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:50:55 2026 by rpki-client