
Error: rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
File: k84fICcYK4EpqwxxOo_1IcE9RI8.mft (raw, json)
Hash identifier: Eg27WCAxekXV4NR0XyOslxkJYdXpVCpDD1mVQIEj9XE=
Subject key identifier: 39:BE:A9:EB:97:C8:91:63:6D:3C:42:D9:69:41:0B:71:54:76:C3:CF
Authority key identifier: 93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
Certificate issuer: /CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Certificate serial: 03FB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
Manifest number: 03F6
Signing time: Tue 13 Oct 2026 03:58:56 +0000
Manifest this update: Tue 13 Oct 2026 03:58:55 +0000
Manifest next update: Thu 15 Oct 2026 03:58:55 +0000
Files and hashes: 1: k84fICcYK4EpqwxxOo_1IcE9RI8.crl (hash: m5h5/CqbQEnKuR5DVhcWQmYrpN6z1QGX7hlMBeRH/ro=)
2: 84F4D7E4C01E11EE96125668775412E6.roa (hash: foQPn6FWgsOZWx9YjKT409OmY84gXqjIzpo0LoTYpbM=)
3: 318B732EC01E11EE8B99BA67775412E6.roa (hash: EvtUtlYSfWZNzMNqGozZFQ05R7pmC383dcyBeyy04bo=)
4: B3968148BF7811EEB0ABC6B6775412E6.roa (hash: nQGeEEKitg0zBrxMzLb+bML7Bdg6QLf+TUFkV5DPzoE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 03:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FB04AF, serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Validity
Not Before: Oct 13 03:58:55 2026 GMT
Not After : Oct 15 03:58:55 2026 GMT
Subject: CN=6acdac80-e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:56:e3:82:54:ec:bc:cb:a8:3f:38:f1:a1:
67:b0:35:b2:51:0a:ff:c3:9b:30:78:d0:6e:7f:42:
68:dc:88:93:33:87:52:4c:e2:72:c9:ad:61:1a:dd:
fb:0c:43:23:6e:59:8b:52:e5:16:fa:5e:00:38:89:
f6:92:96:fa:30:8b:e3:5d:f8:43:1e:fc:3a:05:b8:
81:ab:8c:2d:f4:08:48:07:eb:81:e2:ef:05:ba:ba:
89:70:d2:40:e8:32:56:cf:5c:a3:6c:a1:4d:26:04:
b7:18:6a:9c:23:2a:18:38:64:c1:3c:2f:02:68:70:
4a:e0:5f:95:d6:3e:a4:f1:e9:c2:0a:99:7a:ae:5e:
d6:bd:d3:78:62:95:18:6a:69:8f:9d:85:aa:a6:89:
24:6c:db:89:6c:34:88:55:53:ca:0e:02:37:15:83:
e1:cf:fc:10:13:50:bc:c3:5f:bf:7c:ba:b1:d7:df:
4f:04:e6:2d:f6:bb:d8:5c:00:d4:25:29:ef:46:81:
3d:bb:bb:fa:6f:7d:ec:ec:a7:ca:f3:e6:c4:12:f7:
47:90:a7:e1:3d:a3:f9:f9:3a:c6:c7:ca:83:9e:dd:
7a:10:35:23:a9:98:c6:b4:85:93:fb:9e:38:53:df:
32:c8:82:10:42:0f:66:8c:71:da:31:6d:94:e4:cd:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:A9:EB:97:C8:91:63:6D:3C:42:D9:69:41:0B:71:54:76:C3:CF
X509v3 Authority Key Identifier:
keyid:93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:75:f4:7f:1d:9c:46:59:09:d9:74:45:4e:e1:04:22:f1:30:
6d:4c:42:f1:74:76:d6:57:f3:e7:18:8c:9b:6e:38:9a:33:79:
cc:54:4c:8c:b7:8c:5d:f2:52:62:c0:47:3e:2a:bb:62:57:17:
25:b1:9d:bd:07:c2:9a:29:04:b7:09:f3:9a:88:57:a2:2d:a6:
d9:5a:fe:2e:7b:36:04:fb:bf:3a:90:70:c2:e3:55:a5:6c:c1:
a8:13:d3:34:5e:f8:1f:e6:89:2a:21:84:4b:d7:17:81:0c:f1:
79:01:e4:38:47:0a:47:40:04:55:67:b0:a5:ad:ed:07:e9:84:
c1:e3:a9:38:5f:5b:89:66:32:5a:46:7d:3e:23:2f:7e:1c:ad:
d4:d4:24:c9:c4:37:7a:58:3d:02:8a:70:6f:0d:c4:6c:28:8e:
09:fb:cc:f7:c6:e9:dd:9e:48:b1:53:64:dc:3c:ee:35:26:a7:
47:1d:1e:1c:c9:ea:0c:30:8b:bb:a1:6d:ce:90:99:28:60:88:
cd:50:ee:c5:34:8b:01:97:36:1b:9e:f7:1f:ce:64:67:5c:46:
8d:1d:a2:87:0d:7d:2a:3b:4e:aa:3a:e8:65:15:78:58:a2:e8:
d5:87:66:9f:a2:3a:e3:93:a6:92:02:91:a0:db:20:14:a9:69:
bf:71:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:48:54 2026 by rpki-client