
Error: rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
File: bvB88gdsxaYJayVyrgiV_Wc_RxI.mft (raw, json)
Hash identifier: 613O+7kO86U6dNJEAlVyRdynecZzdAhF8DhUUx03ZWo=
Subject key identifier: 31:3D:1B:82:F6:9D:0B:9D:83:C7:B6:88:DF:F8:F2:02:94:7D:BC:1C
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 0A79
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
Manifest number: 0A73
Signing time: Mon 05 Oct 2026 01:32:34 +0000
Manifest this update: Mon 05 Oct 2026 01:32:33 +0000
Manifest next update: Wed 07 Oct 2026 01:32:33 +0000
Files and hashes: 1: bvB88gdsxaYJayVyrgiV_Wc_RxI.crl (hash: H8tesvaF/e4OjT6OGutYc0GSQYcsRho+OnrY2MxbTLk=)
2: FD8F3AE8BC2511EEA262C8AF775412E6.roa (hash: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=)
3: 10BE688A8A5711F18C506009CF1D38B0.roa (hash: lC/r5XRT9wiwQaTE7675t9IEuG/3v0/7lZJEiCHl0Jw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 Oct 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2681 (0xa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Oct 5 01:32:33 2026 GMT
Not After : Oct 7 01:32:33 2026 GMT
Subject: CN=6ac2fe32-5bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:0e:00:dc:e6:64:4b:98:e9:02:fe:ca:bb:
29:2a:fe:af:24:1d:e2:94:19:b5:dc:02:76:59:81:
48:90:e1:39:9e:30:8c:48:0e:cd:b7:6e:9f:66:e5:
0f:34:93:71:02:a4:67:29:f3:68:86:a2:85:d8:f2:
ff:60:da:42:01:7f:67:7a:73:d1:bb:a6:2e:21:23:
dc:7e:6f:37:b9:ca:f0:bf:06:9c:99:b9:8e:c9:b8:
b8:e3:cb:d9:4d:3e:dc:ed:3d:30:8c:d5:dc:a3:4b:
84:f9:6a:8b:72:c7:78:cf:a5:3e:8e:e9:17:85:74:
ca:f8:7d:ea:a8:13:4e:0b:77:69:3e:e5:37:e1:48:
f3:62:42:30:63:ba:0c:fe:3a:e3:88:c7:aa:31:ed:
69:9f:1b:33:bb:e2:c4:44:7b:d0:05:1a:67:c5:e0:
d5:6d:c4:aa:ab:fd:9a:94:f2:50:fa:18:c1:d5:65:
72:a5:f7:64:35:f4:58:a5:ed:c3:76:56:d5:d2:6f:
20:1d:fb:4a:1d:36:f7:e3:26:b9:eb:3f:ef:13:c1:
6e:0b:c1:b4:6f:e3:17:87:74:2c:74:a7:c4:1a:46:
5e:18:58:5e:89:23:47:67:e0:ca:2e:e5:4a:b6:14:
4a:37:ab:2d:84:33:ad:14:e9:25:ce:e7:92:98:3e:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:1B:82:F6:9D:0B:9D:83:C7:B6:88:DF:F8:F2:02:94:7D:BC:1C
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:53:d0:5b:fd:ba:ef:58:c5:9f:46:0b:5b:d1:ab:65:8e:64:
5b:21:64:3c:0a:74:db:ed:87:91:28:d8:ed:c7:b3:76:77:6a:
9c:e7:1a:38:a6:5b:1e:d8:bb:7f:83:9b:99:47:89:ec:fc:72:
a9:cb:3e:1a:c7:1a:09:1e:83:dc:1f:a7:78:ec:44:92:ba:51:
e2:0c:2c:bc:33:d4:bb:e1:fd:df:d0:0b:2f:da:90:74:d3:93:
97:b9:95:ce:26:23:1c:87:b1:5d:fe:7d:a0:73:bf:36:17:ea:
66:67:d0:f1:b3:b0:cb:d1:8c:00:b3:2e:9b:4a:e6:6e:70:24:
18:ad:2e:e8:99:ef:1e:aa:6e:65:33:62:f8:09:ef:c4:67:2b:
c4:be:62:71:1f:b8:8c:79:fb:a5:d9:20:a3:a4:3f:84:31:9a:
9a:fd:19:0e:3e:da:a7:19:2a:8e:a0:96:36:f1:ce:54:e3:3a:
08:90:b5:6f:b6:94:59:7d:1d:ce:19:b2:ba:5d:d4:bb:08:ba:
79:f5:10:4b:f8:bb:67:69:7c:57:47:84:65:39:f0:e0:22:44:
7b:0c:85:e9:d7:eb:67:3b:41:8b:ed:b5:08:e8:07:bd:6a:e2:
3b:04:16:ac:7f:fc:04:a3:99:1f:01:88:cc:9f:fd:6c:92:d0:
f4:38:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:51:51 2026 by rpki-client