
Error: rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File: KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier: viNxPzlH1FJq4fhezr7AMORDgkpzcvnfFL8eOi0wABQ=
Subject key identifier: DD:69:27:09:EF:37:E6:F2:D1:72:78:1B:E0:BA:7C:59:46:D4:32:93
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer: /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial: 06E9
Authority info access: rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number: 06E1
Signing time: Mon 28 Sep 2026 02:36:08 +0000
Manifest this update: Mon 28 Sep 2026 02:36:08 +0000
Manifest next update: Wed 30 Sep 2026 02:36:08 +0000
Files and hashes: 1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: ancEJ4qSB2LvnT95rB2XdBlQVpig7WFbuA0hVhoELTA=)
2: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (hash: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=)
3: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
4: F05CDE6684E611F1886BCED9CE1D38B0.roa (hash: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=)
5: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (hash: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=)
6: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Validity
Not Before: Sep 28 02:36:08 2026 GMT
Not After : Sep 30 02:36:08 2026 GMT
Subject: CN=6ab9d298-b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:eb:5f:fb:44:6e:5e:42:52:b3:24:b0:8d:
62:7a:fc:26:3f:60:45:ac:75:93:6b:dc:1b:08:54:
1d:22:da:8c:66:e8:b3:61:77:a3:4c:19:58:33:95:
f6:a6:d7:91:b3:68:02:7c:b7:ce:05:b0:9c:1c:16:
62:62:b2:b0:05:5c:b8:ce:4d:4b:c6:91:0b:36:98:
4f:8c:52:24:6d:e3:d5:83:04:58:07:26:0b:75:f5:
ec:51:4e:52:78:2a:d8:14:6b:22:aa:cc:ec:02:93:
d9:3b:a3:8e:b3:26:ed:2e:35:97:e5:55:9b:5e:43:
58:8a:f5:5a:fe:48:7b:4c:fa:a9:d6:5e:ee:58:bc:
59:fa:4a:0b:20:b7:fb:52:84:c2:9d:f4:ca:c7:24:
07:3a:c6:b3:bd:35:d6:b7:69:0b:f0:b6:86:aa:ff:
8f:3e:d5:57:7d:a6:82:85:d3:4b:ef:0e:ef:b7:08:
70:87:3d:54:db:07:b9:26:ce:fa:98:76:86:3f:8a:
a9:94:a8:8e:79:10:72:2d:65:0c:4a:6f:1a:d0:9e:
75:a8:a0:ef:8a:85:3b:8b:a4:fc:06:aa:12:66:b5:
cb:94:45:1b:3b:1f:54:b9:e9:b5:45:9a:c4:fe:b3:
07:1f:e9:5b:b2:9b:b8:c1:d9:32:b5:98:cd:6e:78:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:27:09:EF:37:E6:F2:D1:72:78:1B:E0:BA:7C:59:46:D4:32:93
X509v3 Authority Key Identifier:
keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:e8:67:3d:a8:30:c5:fb:45:da:5e:f4:d9:62:d4:13:0e:
16:b2:67:e9:52:4e:f1:58:a2:d6:48:7a:ad:9b:31:f2:0a:0a:
16:6f:54:b8:30:79:4a:a9:c0:bf:7f:d0:3d:f8:f4:18:bf:21:
98:66:d1:4c:8a:57:a4:3c:4d:c1:f4:a4:ec:88:33:89:77:eb:
8a:5e:67:b2:5c:78:cf:11:26:07:79:de:0a:34:35:06:ea:ec:
95:53:49:de:71:e3:91:f0:f5:93:87:70:4e:5f:42:51:cd:16:
f6:ae:10:09:56:c0:b0:dc:91:54:32:98:0c:c4:0a:1d:06:f0:
76:61:ae:bc:46:e9:54:41:0c:03:bc:f9:73:bf:04:f3:d4:20:
48:c6:8e:a6:ce:87:15:fe:61:72:77:d8:f4:b1:69:6f:68:0c:
67:90:a3:ca:c2:0d:05:d1:00:98:64:fb:f2:f7:9b:a3:2d:6b:
11:03:22:fd:bf:3c:ce:dc:f3:11:8f:df:c8:46:f4:c4:65:76:
2b:58:1e:d4:39:e7:a3:e0:f2:32:ea:a9:9e:42:b5:10:ee:0e:
3d:d6:c0:48:5b:9d:a9:02:3e:00:37:f9:9e:5d:af:88:bc:96:
ae:a6:fc:22:c7:c4:60:19:a1:25:a2:6d:d9:f7:01:dd:be:53:
b1:00:62:86
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBukwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAzNjlBUjExMC8GA1UEBRMoMjk1OTFDNjU1MzNFRkQwODk3MkY0QTk3NUJFQzQx
QzY1QjQ0NUVFMDAeFw0yNjA5MjgwMjM2MDhaFw0yNjA5MzAwMjM2MDhaMBgxFjAU
BgNVBAMTDTZhYjlkMjk4LWI3ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqZetf+0RuXkJSsySwjWJ6/CY/YEWsdZNr3BsIVB0i2oxm6LNhd6NMGVgz
lfam15GzaAJ8t84FsJwcFmJisrAFXLjOTUvGkQs2mE+MUiRt49WDBFgHJgt19exR
TlJ4KtgUayKqzOwCk9k7o46zJu0uNZflVZteQ1iK9Vr+SHtM+qnWXu5YvFn6Sgsg
t/tShMKd9MrHJAc6xrO9Nda3aQvwtoaq/48+1Vd9poKF00vvDu+3CHCHPVTbB7km
zvqYdoY/iqmUqI55EHItZQxKbxrQnnWooO+KhTuLpPwGqhJmtcuURRs7H1S56bVF
msT+swcf6Vuym7jB2TK1mM1ueF73AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU3Wkn
Ce835vLRcngb4Lp8WUbUMpMwHwYDVR0jBBgwFoAUKVkcZVM+/QiXL0qXW+xBxltE
XuAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMzY5LzU2NTA1MjkwN0U3ODExRUM5RkFEMTRDQjVBNDBENTc3L0tWa2Na
Vk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tWa2NaVk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzAzNjkvNTY1MDUyOTA3RTc4MTFFQzlGQUQxNENCNUE0MEQ1
NzcvS1ZrY1pWTS1fUWlYTDBxWFcteEJ4bHRFWHVBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSAehnPagwxftF2l702WLUEw4WsmfpUk7x
WKLWSHqtmzHyCgoWb1S4MHlKqcC/f9A9+PQYvyGYZtFMilekPE3B9KTsiDOJd+uK
XmeyXHjPESYHed4KNDUG6uyVU0neceOR8PWTh3BOX0JRzRb2rhAJVsCw3JFUMpgM
xAodBvB2Ya68RulUQQwDvPlzvwTz1CBIxo6mzocV/mFyd9j0sWlvaAxnkKPKwg0F
0QCYZPvy95ujLWsRAyL9vzzO3PMRj9/IRvTEZXYrWB7UOeej4PIy6qmeQrUQ7g49
1sBIW52pAj4AN/meXa+IvJaupvwix8RgGaElom3Z9wHdvlOxAGKG
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:10 2026 by rpki-client