
Error: rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File: 7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier: ceZI6MSqJv083ysFqNgh4sc5qqz9CIkthrGZA3O7HI0=
Subject key identifier: 25:6F:0D:B1:30:13:29:15:B0:49:FE:B4:09:57:87:3E:B4:1B:9C:A5
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer: /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial: 09F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number: 09F6
Signing time: Fri 25 Sep 2026 01:39:54 +0000
Manifest this update: Fri 25 Sep 2026 01:39:54 +0000
Manifest next update: Sun 27 Sep 2026 01:39:54 +0000
Files and hashes: 1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: 4hR4MAd7jDtJ8/qdNp003xWeKDkthroFPgTS3OjzUq8=)
2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 01:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2552 (0x9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Validity
Not Before: Sep 25 01:39:54 2026 GMT
Not After : Sep 27 01:39:54 2026 GMT
Subject: CN=6ab5d0ea-779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:23:57:38:ca:f5:6b:34:26:da:3c:20:b4:df:
95:1c:79:97:28:06:5e:85:27:2c:b9:49:a1:74:bd:
b9:35:a6:cb:ca:ec:f8:bc:2d:43:91:b4:31:5c:9f:
76:78:7c:0b:e2:ca:b7:fd:ae:e8:40:5a:bf:8d:ff:
81:cd:93:69:3a:35:85:60:3a:3f:ab:ff:ea:6a:5b:
e7:1c:90:3a:75:8b:b6:44:0c:04:05:81:59:df:7d:
f9:c9:13:2e:28:70:1f:a4:d1:d1:79:75:c9:51:f6:
88:d2:54:b4:8e:5c:40:fc:52:3c:8e:6c:fd:6f:00:
86:af:8c:d3:54:e1:47:e1:f2:1c:bc:e4:fd:9c:ad:
2b:37:26:1a:c4:ca:1a:ec:12:3f:a7:8c:94:93:5f:
08:03:93:4e:d8:da:f1:98:2f:25:01:f3:ec:e5:b3:
dc:1d:42:2a:6d:89:e3:6c:28:8d:3d:85:ef:79:bb:
3e:2f:0c:fe:0f:ad:38:3f:01:31:f1:63:d0:0c:de:
48:b6:53:c7:6b:6b:2d:d5:f1:21:e8:a9:e4:6f:63:
e5:3c:46:63:1d:83:05:b9:64:a0:e0:95:a3:d7:15:
40:35:07:a5:64:09:1b:7b:11:f4:57:89:13:1c:52:
6c:3e:62:1d:0b:f3:85:56:91:f4:80:00:a9:df:07:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:0D:B1:30:13:29:15:B0:49:FE:B4:09:57:87:3E:B4:1B:9C:A5
X509v3 Authority Key Identifier:
keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:7e:a2:88:f3:6a:07:91:d3:3b:cf:8c:d8:94:c0:ca:62:
04:19:d3:4f:02:02:c3:7c:d3:b3:c7:2d:11:a7:b2:6b:c2:bd:
73:02:2f:1a:40:88:b0:80:22:75:ff:b3:84:55:09:3c:35:36:
d9:62:7f:00:34:2a:56:73:9a:4e:88:22:9a:c9:69:52:2b:4d:
f8:c1:c9:fc:28:5c:f3:b8:43:3c:ce:18:b8:c6:85:c0:70:aa:
30:93:6c:41:0d:72:2f:b9:3b:cc:8b:b6:21:70:29:e5:45:b2:
12:9a:85:14:70:5c:f4:0e:76:43:92:0a:15:7a:7c:e8:b7:4f:
ca:b1:1f:a1:5b:94:78:b5:4a:d0:f4:06:82:24:ea:47:cc:74:
f8:27:a1:29:9f:53:6b:14:ad:7b:49:a8:1d:67:7f:79:eb:f5:
a2:fb:5f:e5:73:87:81:75:0f:15:72:fe:ba:27:cd:e4:a9:21:
5a:4d:42:6c:bd:b8:6b:fd:20:57:ce:04:21:93:8a:02:ed:52:
27:a8:de:e6:1f:d1:27:f3:30:5d:26:86:1c:87:f7:b7:2a:c7:
9e:fb:1d:e9:55:81:2e:a2:e0:60:62:d9:41:22:a0:13:de:16:
58:c2:3c:e3:12:ca:29:69:96:fe:e2:f7:47:f7:02:ea:d8:a2:
63:90:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:29:39 2026 by rpki-client