
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: aRu1Be0aR11N0oriYl8dBD2cXOW7/sP0Lna/SKSFctw=
Subject key identifier: 57:A6:BB:14:E3:7C:78:9B:05:5D:BF:3D:E2:01:20:CD:47:AB:9E:FC
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 04BA
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 04B7
Signing time: Sun 27 Sep 2026 03:35:29 +0000
Manifest this update: Sun 27 Sep 2026 03:35:28 +0000
Manifest next update: Tue 29 Sep 2026 03:35:28 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: szmUxBxyG9GyorXzR6xTsjDljQP6l6QM7tVVE3mL5ms=)
2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Sep 27 03:35:28 2026 GMT
Not After : Sep 29 03:35:28 2026 GMT
Subject: CN=6ab88f01-88dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:6f:b1:91:c2:4f:d3:c7:0a:6d:97:bf:11:
7a:57:46:09:60:7f:cd:2d:05:56:ec:0d:3f:5b:60:
5d:8c:b4:29:72:c3:e1:97:ff:58:c0:11:ab:f7:a4:
e1:2e:fb:9a:d6:b4:e2:3f:55:17:ff:6d:b2:d6:76:
f4:78:60:3d:a7:22:2d:8f:91:b8:6c:85:b8:34:10:
6f:41:0d:3f:f3:ed:e9:58:ac:0a:59:be:c0:9d:a2:
e5:0e:47:3f:b1:60:60:5d:03:e6:50:09:99:f8:35:
c5:1a:23:d8:88:4d:84:c0:0e:df:2e:f4:9b:4b:3d:
2a:5c:48:96:31:32:4f:6b:02:da:df:91:a6:66:73:
67:bf:45:35:ad:66:cc:fd:a7:e5:50:42:a5:3e:44:
d4:c0:fb:5b:2b:7f:90:64:73:9a:88:c5:47:2b:13:
14:47:9c:40:b9:d6:0f:82:de:74:dc:dd:88:30:74:
65:01:b2:ee:4c:07:78:e8:bb:a5:66:7a:2e:e8:e0:
4f:ea:1a:10:2c:8a:09:60:16:a5:01:c5:2a:67:52:
09:cf:81:d6:6e:88:c1:e5:11:42:d7:14:86:de:54:
27:3e:7f:5e:90:d2:1b:9b:bc:e1:84:9c:15:39:b2:
9c:ae:11:20:b7:07:6f:84:cb:db:7c:fb:71:e5:95:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:BB:14:E3:7C:78:9B:05:5D:BF:3D:E2:01:20:CD:47:AB:9E:FC
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:ef:ab:98:52:c8:27:e0:d0:dd:2b:b2:d9:a8:29:8b:61:
38:f0:cf:f7:4f:dc:26:95:66:62:ac:0d:f0:3d:af:b4:a9:b6:
0c:44:21:91:44:18:6e:a9:12:e7:cd:75:b3:aa:b1:c8:b2:61:
9f:bf:52:71:e5:3d:ba:8e:bf:a0:6f:c1:34:1a:b2:2d:02:45:
c6:95:08:1c:18:96:09:53:b7:9b:4b:b1:b0:7d:27:bd:74:c8:
cd:40:84:1d:d5:ea:ab:c1:cf:f6:cf:b3:7a:a0:d6:d6:d0:24:
76:3a:3c:75:30:62:bb:0f:3b:6a:0e:17:6b:b5:11:15:92:97:
ba:d9:8b:0b:94:9b:37:72:e8:77:0f:25:48:f3:0a:9a:75:33:
25:5f:95:16:65:a9:b5:a6:0a:cb:78:ec:19:08:c3:52:ae:c7:
74:c0:bc:6d:a0:56:76:b3:05:ef:40:e3:12:7b:34:bc:fb:32:
12:46:c3:3b:b4:b7:05:38:b5:bc:cf:05:73:10:1b:22:60:02:
02:37:e4:51:47:80:40:f6:6f:81:0a:b6:cb:2b:8a:f7:c7:4e:
17:99:27:5e:03:b5:86:fb:2d:84:21:a1:7e:d3:24:90:c3:a0:
4a:c9:a9:9e:09:c7:84:83:d0:09:b2:48:b8:61:37:64:a8:c5:
50:6f:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:42:15 2026 by rpki-client