
Error: rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: 8f52JJhYxldZ1FMYFxXo+aPgzjBnkys29waD2B23QZU=
Subject key identifier: CF:41:5B:DF:AE:76:21:88:39:20:6A:92:B9:5B:94:22:71:98:0E:90
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 04AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 04A5
Signing time: Tue 22 Sep 2026 03:34:35 +0000
Manifest this update: Tue 22 Sep 2026 03:34:35 +0000
Manifest next update: Thu 24 Sep 2026 03:34:35 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: vcpESrBVjrZ+6knac+yFGO4llXkKpKsrsLP9q0G/38k=)
2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 03:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Sep 22 03:34:35 2026 GMT
Not After : Sep 24 03:34:35 2026 GMT
Subject: CN=6ab1f74b-e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:6b:27:7a:42:6a:76:7c:fb:36:5b:46:af:
e9:6c:ac:13:a2:fe:10:3d:54:cb:5a:06:fd:1d:29:
ff:99:28:7a:58:6d:c9:e5:b6:f1:22:7c:79:37:21:
29:76:64:ba:58:d7:07:49:72:7c:ff:39:be:4f:d6:
86:d2:4d:8f:bf:31:45:dd:e3:4d:e5:cd:fd:07:4e:
81:ee:26:0c:a1:a8:94:bb:44:d0:66:59:9f:60:48:
6c:fa:58:d3:8e:54:ad:d2:10:b1:9a:8b:99:c8:e8:
6f:a5:f5:b8:c8:c3:6e:54:7c:40:f6:5b:8f:6c:11:
9d:f6:d2:ee:a7:ed:41:0e:b9:37:26:e2:0b:80:c6:
ec:fd:a7:54:55:28:92:0d:00:39:18:7b:de:ce:74:
d0:b9:65:b4:32:ad:39:64:be:89:04:09:50:98:3b:
6b:2a:f1:f1:4a:53:8f:c6:2b:aa:c4:86:72:96:d1:
18:78:f0:fc:35:29:a3:55:dc:9d:88:28:5d:5b:ca:
00:bc:88:ef:5b:f4:94:fa:08:b2:fd:4d:a0:fc:e5:
f8:50:67:0a:37:86:7b:d6:36:b2:c2:3c:b6:e6:1b:
51:4b:8f:16:62:36:d0:e0:06:d3:02:f7:16:9c:a4:
ae:23:1b:8b:04:ab:35:b4:90:cf:13:55:de:56:f6:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:41:5B:DF:AE:76:21:88:39:20:6A:92:B9:5B:94:22:71:98:0E:90
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b8:87:8f:42:16:33:4e:eb:4f:d7:a8:41:9a:cc:f9:5d:4e:
0e:c2:72:ef:9b:86:51:51:aa:39:96:31:79:f0:5a:91:58:ce:
29:06:c5:a6:2c:cf:1a:6d:ae:11:0b:f3:36:b2:49:bb:50:4b:
d6:61:2e:78:a5:97:56:26:f9:79:88:87:cd:b5:0a:6c:b8:fb:
39:ff:7c:db:bc:35:32:29:e1:c2:65:9f:98:63:12:55:76:a0:
a4:2e:fc:fb:d2:8d:32:2f:4b:56:6a:a8:85:fb:35:37:22:42:
4b:e4:40:b5:37:0c:ca:78:78:c9:14:93:a8:23:3f:ee:1e:c0:
43:1e:79:bb:f1:64:46:d2:c5:be:9a:a8:45:8a:c4:fb:ab:be:
5b:ec:27:6b:43:01:2c:2b:10:19:0b:08:e2:0d:fe:3e:47:ea:
d8:b6:15:16:5b:f1:c9:a8:8b:cd:f5:9d:dd:19:fb:2c:69:6d:
4e:bd:18:ee:56:16:3f:0c:70:f2:b1:28:ae:32:ac:81:b8:3d:
c5:f3:87:d7:55:cf:13:d2:21:da:ae:c3:e9:5d:0b:5d:5f:63:
34:e6:6a:3f:b9:fa:65:e5:45:5f:83:0f:5c:fd:50:29:82:e3:
9e:d0:8e:f8:d4:48:80:b3:87:ac:27:1c:49:cf:81:43:82:ae:
e7:ef:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:35:24 2026 by rpki-client