
Error: rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
File: bvB88gdsxaYJayVyrgiV_Wc_RxI.mft (raw, json)
Hash identifier: NL5q9Tap2ftaUHktcpCRzW13jGGVUpMtFUpvPwEGpJ8=
Subject key identifier: 65:CC:23:DC:C8:31:AA:78:CF:8A:4B:E6:40:3F:35:4C:5C:3A:8A:7E
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 0A77
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
Manifest number: 0A71
Signing time: Sat 03 Oct 2026 01:32:15 +0000
Manifest this update: Sat 03 Oct 2026 01:32:14 +0000
Manifest next update: Mon 05 Oct 2026 01:32:14 +0000
Files and hashes: 1: bvB88gdsxaYJayVyrgiV_Wc_RxI.crl (hash: EgGzxxLI5FNGY03dtUzBSdIsHv1yghh0TUEuC+YCAuw=)
2: FD8F3AE8BC2511EEA262C8AF775412E6.roa (hash: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=)
3: 10BE688A8A5711F18C506009CF1D38B0.roa (hash: lC/r5XRT9wiwQaTE7675t9IEuG/3v0/7lZJEiCHl0Jw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Oct 3 01:32:14 2026 GMT
Not After : Oct 5 01:32:14 2026 GMT
Subject: CN=6ac05b1f-b4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:11:3e:3a:e0:78:1f:b0:8d:2d:64:e3:89:
8b:10:d2:97:49:52:e3:77:8f:2b:74:3f:f3:e3:c8:
c6:80:58:cc:7a:6c:36:3a:e6:bd:16:1c:db:f9:85:
6d:ea:39:aa:09:23:d8:e6:71:80:d5:36:55:e6:1a:
f5:ba:f9:94:34:41:9b:2d:a7:2f:fa:36:b3:cf:89:
4d:47:68:df:fb:5e:98:e0:b9:56:aa:df:a7:3e:c7:
0e:1a:40:6b:3a:bd:cf:44:bd:a8:ea:42:b8:7e:b9:
be:ec:2e:14:a5:72:13:8b:0b:8d:3d:14:1c:bc:f7:
85:de:79:cc:d6:ef:86:cb:24:4e:a5:77:0e:b3:50:
d3:5f:bc:a5:3f:c7:84:05:45:1e:c5:5d:aa:36:2c:
4b:b6:5f:0b:cb:ce:cb:69:83:25:c0:79:66:ca:f0:
c3:a6:ad:b3:48:d9:d2:e6:3d:43:72:d2:52:2d:a4:
73:dd:c0:3c:bd:43:82:de:5c:30:19:84:b7:b7:35:
01:cc:0d:76:16:fe:5a:cf:a6:4f:09:7f:99:8d:32:
20:de:94:19:01:cd:35:63:50:14:f8:d0:d2:e2:40:
74:a0:7f:5c:30:fa:e4:89:0f:d7:dc:2c:71:6b:be:
07:0d:8a:ee:83:e9:20:dc:f9:3c:67:69:42:49:ae:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:23:DC:C8:31:AA:78:CF:8A:4B:E6:40:3F:35:4C:5C:3A:8A:7E
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:fb:f5:cc:0c:92:60:09:fe:92:ab:8e:e4:e4:91:97:be:bf:
ea:d5:d1:b8:0e:6c:e2:4f:cc:eb:0e:4b:18:35:f3:27:c8:44:
4d:8f:e8:9d:3a:21:2a:1b:8b:32:09:7f:87:14:81:bc:ec:55:
51:44:08:e0:a4:53:e9:a5:6b:eb:40:44:9f:0c:e8:b3:8f:39:
ea:be:1e:0e:61:81:a2:87:d0:66:2e:33:be:9e:69:42:eb:65:
4e:61:d8:5e:0d:29:24:3a:fb:b5:2e:33:95:4e:30:dc:8e:ea:
62:f6:b8:e0:a4:32:2a:73:80:49:b5:e6:ec:09:7d:c2:58:bd:
20:63:80:d3:64:a1:38:1c:23:f1:6e:e2:bf:00:df:ec:9e:ae:
8d:fe:9a:41:08:7d:2c:14:d8:c7:ce:a5:77:9a:31:39:27:02:
2a:22:ec:0c:99:5d:0f:4e:0f:04:67:ba:ed:94:6a:7d:2c:08:
58:eb:c4:c0:10:44:4f:76:18:1c:b0:b1:37:15:1f:7e:f5:e2:
ae:c0:40:6c:a6:32:79:74:40:ee:b7:5a:68:d7:a3:f4:e1:64:
84:af:8b:15:2a:5c:06:11:70:50:b0:7f:65:71:09:79:5b:17:
7f:60:62:3e:4a:51:f2:a5:6d:da:65:96:99:f9:94:99:13:29:
eb:4a:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:35:46 2026 by rpki-client