
Error: rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File: y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier: jHbZq+W9hFY7TQWG3l+GceWAd6xyZTiAALBhIv9Xbi0=
Subject key identifier: 27:5E:13:07:A9:DC:AD:0E:1B:19:7F:9E:FC:DF:5C:4A:6D:C0:A7:36
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer: /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial: 097D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number: 0976
Signing time: Sat 03 Oct 2026 01:45:06 +0000
Manifest this update: Sat 03 Oct 2026 01:45:05 +0000
Manifest next update: Mon 05 Oct 2026 01:45:05 +0000
Files and hashes: 1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: n/KwaLEv0HYF/gUn8slKriqoQpCde/26wcJ3x37/Dmk=)
2: 7780EF6C630A11F180A1E4B2CE1D38B0.roa (hash: fkIhbGcLK27MDR00HJfXuZdrNmz7WeoBwxqN+OBnQWA=)
3: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
4: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Validity
Not Before: Oct 3 01:45:05 2026 GMT
Not After : Oct 5 01:45:05 2026 GMT
Subject: CN=6ac05e22-2194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:84:e5:70:55:7c:d6:7a:0c:ce:97:c4:d2:
17:74:7b:48:75:0a:bb:62:53:33:41:02:3e:34:30:
ad:d8:7c:a6:64:11:d4:0a:bb:63:4f:b1:7a:33:b5:
39:73:2d:5a:ac:b9:c9:2c:97:1f:67:d3:84:87:ba:
e5:32:31:61:f0:15:71:24:38:7b:a2:b2:ca:14:8d:
5d:2e:6c:2e:7e:72:89:04:a9:fd:82:89:e5:b0:b7:
72:52:6e:47:12:dc:ba:e8:c4:5e:0f:91:ca:54:6d:
42:d6:d7:02:e4:0f:24:70:51:cb:cd:93:84:42:16:
11:b2:bc:c2:98:d9:69:83:e1:a9:85:fc:cd:8e:62:
fd:ba:05:41:21:34:da:cf:3b:59:c1:4d:18:da:eb:
8d:da:fc:92:a6:c0:df:7f:7d:2e:00:99:76:89:bd:
bc:18:44:97:43:df:6a:d2:ec:3d:05:97:7f:07:23:
2d:c5:0e:95:91:15:c5:57:fa:16:a6:9b:3d:9e:b7:
c6:0e:b1:dd:1d:1e:2e:25:97:df:ee:0d:fc:ab:4e:
74:0c:6a:1d:45:bc:c6:0a:03:13:fa:5a:d6:6e:be:
c7:ca:fe:51:e3:a5:1c:10:c7:56:62:8a:af:46:e6:
47:76:e7:21:d6:d5:36:e1:d6:4d:27:9c:84:74:6f:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:13:07:A9:DC:AD:0E:1B:19:7F:9E:FC:DF:5C:4A:6D:C0:A7:36
X509v3 Authority Key Identifier:
keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:87:c7:18:36:07:37:74:3f:56:31:cb:aa:2f:7b:2b:f7:f4:
8d:03:af:ff:6a:5c:75:11:fc:e3:a2:f3:89:d9:e6:af:25:9d:
cd:e9:b1:3a:5d:6e:8b:88:9e:bc:85:29:60:4e:59:5f:f6:29:
46:16:67:2c:31:bc:79:c8:78:e3:ac:8b:cf:39:19:62:8c:b5:
77:81:59:69:94:0d:40:c1:43:2e:76:c6:6f:85:eb:f0:97:f3:
4b:43:db:1c:e2:40:25:2c:de:4c:5f:97:58:db:25:19:eb:c5:
b6:68:3a:85:5d:f2:cf:88:9c:d9:2a:da:6d:69:22:f8:dc:31:
cb:b0:ed:3a:f8:63:2f:9c:e0:47:af:bb:58:e3:ea:f9:1b:df:
36:66:8d:ca:ed:0f:a8:28:66:81:1e:a6:02:36:11:42:a4:23:
56:16:d3:65:3b:70:13:a9:52:e8:71:92:31:9a:08:11:fe:12:
70:d6:e1:98:4d:25:ee:d8:2b:63:94:5b:c2:4f:ec:cd:24:3f:
9d:35:8e:cc:46:18:5c:0d:03:03:0d:d8:b6:6b:14:0e:45:1e:
e3:c0:e0:ba:11:11:a0:81:a9:51:d4:1a:b0:1e:eb:c2:72:22:
3a:dc:ed:60:96:45:34:fb:c8:4f:81:c0:74:e5:b1:4c:96:04:
71:fd:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:07:29 2026 by rpki-client