
Error: rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File: dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier: 99wjHfooDVNHzLH6Ftzk+/L/4dSh1u6Lr1PujzuZDaI=
Subject key identifier: 67:F8:74:06:AA:DC:2C:7F:2D:41:F9:38:32:6B:73:5F:36:7E:B4:89
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer: /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial: 0A5C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number: 0A58
Signing time: Fri 25 Sep 2026 01:34:01 +0000
Manifest this update: Fri 25 Sep 2026 01:34:00 +0000
Manifest next update: Sun 27 Sep 2026 01:34:00 +0000
Files and hashes: 1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: f4ljtGX6pjC/ciplR1SrKYwhV2FgcSOjgEXXP/5jejs=)
2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
4: 6707E92063FE11F18E4F77F5CE1D38B0.roa (hash: Mbiya0jc46golC3r0vHLc0oTgvNsMn+R43Ns9ZWPs90=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 01:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Validity
Not Before: Sep 25 01:34:00 2026 GMT
Not After : Sep 27 01:34:00 2026 GMT
Subject: CN=6ab5cf89-1324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:1b:a8:2c:0b:e8:79:54:b9:fc:19:1b:2a:
c2:f2:61:ab:14:58:d7:09:70:45:f4:93:59:9b:94:
e8:3b:03:78:fe:a3:b8:b6:35:cd:60:2b:1d:d0:c5:
b3:9d:ac:81:0c:c9:8c:38:d1:da:05:90:b7:b4:6c:
1d:0b:00:6b:54:b0:5b:4d:d0:9c:1b:e3:c4:e4:d2:
8d:c0:c9:bc:f7:91:83:5f:9c:53:7b:bd:3e:70:4c:
09:ab:cb:94:69:d9:47:32:ef:f9:5f:67:e1:4e:b6:
66:ee:24:78:b6:93:1f:1e:4a:2f:e3:1c:a9:5b:d5:
89:7b:16:2b:9f:ed:ac:8f:ab:75:e2:7b:c7:fc:00:
1d:54:b6:be:3f:dc:4e:d6:d7:bd:a9:4a:39:27:90:
e8:c5:36:b9:72:cb:d0:b4:ff:f5:12:8f:fe:30:d5:
a2:c0:5f:47:ef:94:26:25:32:a3:44:38:b5:7e:b7:
5c:d3:93:18:ab:53:24:9b:0d:64:1f:e4:bb:db:cc:
73:ab:ef:d5:3f:67:7f:33:e4:b0:be:a2:c8:7c:f0:
df:5f:b1:69:ca:e5:e5:40:69:7a:3e:e8:f8:93:10:
ca:2b:24:5e:88:60:7d:5c:47:7d:f2:88:39:50:5e:
84:7f:c8:73:7f:b1:ac:22:f7:d4:2e:0a:10:7a:f1:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:74:06:AA:DC:2C:7F:2D:41:F9:38:32:6B:73:5F:36:7E:B4:89
X509v3 Authority Key Identifier:
keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8f:64:7a:3b:2a:8a:63:11:7a:34:05:70:6f:95:2d:aa:43:
4c:ab:99:35:13:a6:8f:b9:6d:d3:04:ed:58:7f:3e:4b:c8:cb:
9d:86:06:94:0a:42:59:5e:57:c3:fb:1a:3a:83:74:3a:c3:51:
d8:e1:9a:43:4d:49:0c:c0:44:54:e2:6b:49:9e:57:6f:44:47:
bb:d3:31:ff:26:f8:56:7d:cc:32:cb:99:d5:64:12:f1:37:b3:
20:e5:04:c7:fb:ec:aa:24:ae:18:f5:e2:e3:94:56:d6:d5:01:
6f:28:8a:8b:e0:a6:d9:f9:47:42:b6:ef:0e:bd:3e:5e:5c:b3:
fb:c6:60:bc:03:0f:28:ea:a6:34:be:fe:92:1e:9f:96:27:01:
a3:50:5e:02:78:c0:55:00:07:cb:f5:ee:51:79:74:e4:0e:50:
60:2f:67:59:a3:6a:fb:4c:eb:d0:3f:ca:99:18:6b:c2:66:fc:
8f:c0:96:12:06:cc:6b:cb:06:06:f0:e7:2d:f0:37:88:e5:7e:
d7:d3:cf:ef:01:4c:7a:80:e5:1b:1d:00:05:9d:51:34:9e:0e:
d6:5c:de:14:1f:fa:a8:c1:7e:f4:91:3b:ac:89:ca:e5:60:0e:
c9:81:af:ff:d8:d4:09:2c:d2:3f:e0:f0:cb:61:90:ec:31:31:
a5:4e:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:45 2026 by rpki-client