
Error: rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier: at4G2S7MjmPgEmLyLu426QS7b/mXnfdTnfaJ1uGz2kQ=
Subject key identifier: 98:48:21:75:58:6F:7C:82:8A:A8:C0:86:A6:32:74:9A:48:62:C5:B5
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer: /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial: 012E
Authority info access: rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number: 012C
Signing time: Sat 26 Sep 2026 05:18:22 +0000
Manifest this update: Sat 26 Sep 2026 05:18:21 +0000
Manifest next update: Mon 28 Sep 2026 05:18:21 +0000
Files and hashes: 1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: MMswP4RrN1vY9zy2xX7p/Is457UUFaLYs2S/CglbQFo=)
2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 05:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Validity
Not Before: Sep 26 05:18:21 2026 GMT
Not After : Sep 28 05:18:21 2026 GMT
Subject: CN=6ab7559e-c26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:7e:ac:c4:53:ef:c6:28:30:13:49:ff:23:
fb:61:0d:e8:59:a5:23:80:6a:52:a4:a8:24:0e:26:
8d:6a:71:3a:16:97:af:3a:94:8b:70:5a:bc:a5:a8:
3d:50:50:7c:fb:87:fa:23:3c:c7:88:24:da:98:73:
d8:99:8e:e6:42:83:8c:89:ea:8f:84:61:b5:90:53:
4f:7f:f8:05:bb:68:64:45:d9:ea:39:c9:10:e6:3c:
f3:d6:9c:9f:76:c7:b3:d0:0b:fa:2e:dd:05:e3:5b:
7d:f8:c0:67:d2:6a:c9:c5:e6:46:4d:c6:bb:9a:1e:
6b:40:96:61:8b:1f:af:16:b5:86:1e:27:31:43:67:
54:76:74:b4:2d:cf:87:51:df:b9:4f:3b:99:0a:aa:
e7:36:c3:36:92:88:b3:4b:d9:75:ef:ce:90:88:8b:
99:60:70:83:af:30:39:1f:d8:21:dc:ef:af:93:06:
89:aa:ef:1e:6a:5e:c1:19:77:d1:b5:65:8a:98:ec:
6d:91:3a:4d:22:72:07:92:39:6e:15:8e:04:da:73:
72:c0:5a:ba:a4:b7:0c:6c:f3:7d:99:d3:ee:6f:78:
e3:35:76:8e:a8:bf:f2:db:a5:c2:6f:7c:10:78:ce:
02:2b:37:6a:18:39:c0:22:d3:15:b9:ad:e0:66:db:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:21:75:58:6F:7C:82:8A:A8:C0:86:A6:32:74:9A:48:62:C5:B5
X509v3 Authority Key Identifier:
keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:22:3a:17:b5:81:97:08:f7:41:d9:96:59:68:31:58:e4:c1:
27:14:6e:e0:e9:61:9f:de:20:17:ea:8e:3d:e9:ca:6a:e5:48:
fb:59:b4:da:9a:65:6f:a8:ac:95:9c:55:7b:48:d2:ad:b9:71:
1c:23:bc:54:54:a9:00:7c:e4:9f:3f:be:2f:d6:8d:46:b5:3c:
91:71:c1:5a:70:89:0e:6f:1e:6d:dc:70:1d:1c:8b:22:a8:be:
e3:14:7c:6f:6c:f5:03:c3:0d:d6:b1:90:e3:c6:9e:ce:c9:96:
a0:e6:a8:09:69:4d:14:ea:82:a6:de:cf:38:cd:6e:bc:b6:a3:
08:52:18:f3:7a:b0:e9:99:6e:38:fe:05:67:59:c6:15:04:f0:
9a:8c:e3:d3:54:28:7e:99:6b:eb:e4:83:56:15:0a:cf:9f:cb:
b6:f6:37:b8:8e:09:b8:cb:d2:f1:64:03:cd:36:b4:38:ed:c1:
d6:f3:03:e9:73:b4:51:e0:64:9c:e3:9a:81:a1:f4:aa:fd:95:
0f:41:82:3d:50:e6:c4:51:91:c5:e5:66:5f:9c:24:c1:d6:f7:
63:51:96:89:ea:c8:57:56:81:93:39:de:47:d9:f3:1f:d6:07:
03:ca:ad:98:80:1f:b0:10:10:c7:4d:a9:09:7a:27:c6:f6:af:
e6:c3:27:29
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0NDNjhBUjExMC8GA1UEBRMoQUNBOUM5QkVCQkU4RDA5OTdDMDY0RTJGQjM4RkZF
MjlCMzk5MDczRDAeFw0yNjA5MjYwNTE4MjFaFw0yNjA5MjgwNTE4MjFaMBgxFjAU
BgNVBAMTDTZhYjc1NTllLWMyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxjH6sxFPvxigwE0n/I/thDehZpSOAalKkqCQOJo1qcToWl686lItwWryl
qD1QUHz7h/ojPMeIJNqYc9iZjuZCg4yJ6o+EYbWQU09/+AW7aGRF2eo5yRDmPPPW
nJ92x7PQC/ou3QXjW334wGfSasnF5kZNxruaHmtAlmGLH68WtYYeJzFDZ1R2dLQt
z4dR37lPO5kKquc2wzaSiLNL2XXvzpCIi5lgcIOvMDkf2CHc76+TBomq7x5qXsEZ
d9G1ZYqY7G2ROk0icgeSOW4VjgTac3LAWrqktwxs832Z0+5veOM1do6ov/LbpcJv
fBB4zgIrN2oYOcAi0xW5reBm2xMtAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUmEgh
dVhvfIKKqMCGpjJ0mkhixbUwHwYDVR0jBBgwFoAUrKnJvrvo0Jl8Bk4vs4/+KbOZ
Bz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdDQzY4LzZBN0IwMTY0RDM1RDExRjA4OTlFQTU5N0RBRTRFQzlDL3JLbkp2
cnZvMEpsOEJrNHZzNF8tS2JPWkJ6MC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JLbkp2cnZvMEpsOEJrNHZzNF8tS2JPWkJ6MC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0NDNjgvNkE3QjAxNjREMzVEMTFGMDg5OUVBNTk3REFFNEVD
OUMvcktuSnZydm8wSmw4Qms0dnM0Xy1LYk9aQnowLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClIjoXtYGXCPdB2ZZZaDFY5MEnFG7g6WGf
3iAX6o496cpq5Uj7WbTammVvqKyVnFV7SNKtuXEcI7xUVKkAfOSfP74v1o1GtTyR
ccFacIkObx5t3HAdHIsiqL7jFHxvbPUDww3WsZDjxp7OyZag5qgJaU0U6oKm3s84
zW68tqMIUhjzerDpmW44/gVnWcYVBPCajOPTVCh+mWvr5INWFQrPn8u29je4jgm4
y9LxZAPNNrQ47cHW8wPpc7RR4GSc45qBofSq/ZUPQYI9UObEUZHF5WZfnCTB1vdj
UZaJ6shXVoGTOd5H2fMf1gcDyq2YgB+wEBDHTakJeifG9q/mwycp
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:56 2026 by rpki-client