
Error: rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File: ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier: S22z2nv1MPu26Ur49RPxGlk6wvA90zh7FeXc7WggBzI=
Subject key identifier: 10:D2:C8:59:C8:F1:4F:B4:35:AE:A3:D0:48:EC:5E:CE:35:E0:02:F4
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer: /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial: 058E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number: 0584
Signing time: Thu 24 Sep 2026 03:09:03 +0000
Manifest this update: Thu 24 Sep 2026 03:09:02 +0000
Manifest next update: Sat 26 Sep 2026 03:09:02 +0000
Files and hashes: 1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: ++d2NpeSrbN5gGtbG4Cvv4HHKu03Yia0kyQ9H9gjBbM=)
2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Validity
Not Before: Sep 24 03:09:02 2026 GMT
Not After : Sep 26 03:09:02 2026 GMT
Subject: CN=6ab4944f-a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:b4:c0:01:67:f9:df:f4:b8:d9:e4:58:ab:
f5:2d:be:22:6a:61:3d:44:4a:2c:3f:7b:c1:b4:d4:
04:63:d1:e4:b2:5f:53:38:2d:ec:b1:0a:0f:d4:ff:
8a:c1:9e:8b:87:fd:98:f2:4a:ab:5b:b4:be:8a:02:
c4:29:d7:6b:2d:92:a3:99:c6:6f:48:79:a7:53:5b:
19:f3:f7:69:9f:23:5f:fe:4f:61:98:82:90:2d:98:
bb:8b:58:ce:00:c1:14:16:98:92:63:a1:a9:6e:e0:
83:12:6e:e4:8e:cc:2d:29:fb:62:73:a4:c3:ba:b0:
6e:77:31:63:88:6f:41:e8:75:0b:bd:38:42:f4:80:
75:8e:9b:d0:39:90:9c:68:12:28:62:58:22:d1:9e:
9e:2f:20:3a:09:30:20:3f:a9:23:76:01:44:1e:6e:
f2:62:fd:61:cb:0f:e6:a3:34:7d:94:1a:e1:1d:4b:
1e:9a:46:b0:5a:60:8b:c9:25:5f:6a:67:2a:bb:23:
e5:7d:7c:9b:ae:34:16:b5:11:55:0d:d2:3e:36:bb:
d5:db:e3:f2:60:2d:c5:35:31:53:50:91:29:d6:4a:
2e:87:17:d9:16:9f:c8:8c:11:ad:13:34:d4:33:94:
1c:6c:2c:91:5b:b8:5a:f9:d8:9e:a8:c4:8c:f2:79:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:C8:59:C8:F1:4F:B4:35:AE:A3:D0:48:EC:5E:CE:35:E0:02:F4
X509v3 Authority Key Identifier:
keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:11:f4:0d:92:5a:4f:55:4b:68:7f:c5:0e:8a:3f:42:37:50:
28:ee:86:e1:93:5d:17:8f:06:4d:fe:63:ff:85:2a:9a:b3:3a:
b3:4f:08:93:31:f6:d2:09:2b:bc:16:87:0d:bf:ed:6c:94:82:
ce:74:58:ba:16:7d:84:a7:1b:6a:98:e7:64:58:33:b1:08:a6:
88:12:35:57:a3:1c:8a:1e:4d:86:6a:4f:27:25:77:fa:bc:27:
00:97:42:c7:0a:eb:01:06:b3:6e:8f:a4:7a:f3:10:97:c5:e3:
9a:6f:33:ed:86:ba:42:f3:7b:95:99:07:e8:1b:2e:09:23:07:
c1:99:e7:60:d7:30:9e:f5:b2:59:06:26:f9:ce:7f:0e:c2:e4:
02:c9:33:0b:4b:d2:9d:ca:88:6c:31:68:c3:27:69:06:92:f1:
27:e6:de:d0:1a:94:4a:45:17:14:7f:a1:c4:99:57:e6:b4:91:
9c:41:50:02:9f:3d:7c:2b:38:aa:fe:50:39:1c:3e:2f:47:78:
2c:e7:3c:40:65:47:94:d7:e6:c4:67:b3:94:5f:5a:ce:05:0a:
24:03:0c:a2:21:8f:9d:4c:81:ed:b7:de:28:c3:1c:f7:8f:56:
e2:de:1a:23:65:55:f7:3a:53:59:59:f1:58:a9:72:fb:8b:98:
dc:28:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:45:16 2026 by rpki-client