
Error: rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
File: dwjmbxwHwddnCuvbrhhtpCvLMMc.mft (raw, json)
Hash identifier: W9qb9+4Q6YTDYwV+xAqzG/dwCUNlWc2Uc9vA1vhm+tc=
Subject key identifier: B5:0E:8B:73:40:8F:31:06:D1:06:65:50:C0:55:F6:C1:30:92:0B:A1
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 02CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
Manifest number: 02AD
Signing time: Thu 24 Sep 2026 04:42:46 +0000
Manifest this update: Thu 24 Sep 2026 04:42:45 +0000
Manifest next update: Sat 26 Sep 2026 04:42:45 +0000
Files and hashes: 1: dwjmbxwHwddnCuvbrhhtpCvLMMc.crl (hash: tqTI2Wffj428wrEtJfXncir16MgwpQXLft+lzZ6niPY=)
2: 3F10B7A03CAC11F088C969D5DAE4EC9C.roa (hash: Sjpk4ysp1mNszx84MrVYy/vBQoLw8u4fp7N7mgOTEIQ=)
3: 4A4E4E98F36411EF90236562762E951A.roa (hash: wBEWNOxstUtXs1lRPFI8sqmbxPLl50bzZwGpAM/v03w=)
4: 8D38EA92F36411EFB4C65466762E951A.roa (hash: +EMSMJ3EYz9pXuGkf95ZpK0KIr/3eV/25E+zqK7H2d4=)
5: 6D9333C8F36411EFA21E3864762E951A.roa (hash: qCcMIGMPv6iLqntlPxto9IWFZxg/PkX6K91u1W/HaMo=)
6: 0728E8DAF35F11EFA9798CBF762E951A.roa (hash: r67qgSDZ7UK0rkKjw/6X4Z6plYnnEJR2/PdlSWRgXOE=)
7: 64579188F36311EF961F435D762E951A.roa (hash: ZkAad2oBHy70JS26s+e7DktMHSKgL2XdJzU4c7fdddc=)
8: 04466B80F36211EFB7841C54762E951A.roa (hash: k+w+Al72cOLFmLNM9M2TGC8l+4WDkBhNaHH0njxWTY4=)
9: 4608FD7CF36111EFB87F7D4F762E951A.roa (hash: q4VUHmXqhQLvC4tfCUsaK0VJ9DqAe9PMwDnLK46jh+k=)
10: 8CFF56DEF36311EF8011BE5D762E951A.roa (hash: 8VWmuQHjSKK3nmwbGTPPqeDrZfzpQRmMKrTS4U/AuaY=)
11: AB313988F36311EFBAC9DA5E762E951A.roa (hash: QYTpKFHcH+2F26H8AMuPN3ygS8KPNu9TR1X0KOssigQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Sep 24 04:42:45 2026 GMT
Not After : Sep 26 04:42:45 2026 GMT
Subject: CN=6ab4aa46-74b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:a8:57:4b:cf:0e:21:d0:0f:b9:c5:a5:bc:
1c:d1:cf:e1:6a:5a:84:75:dd:7e:fa:67:a8:9d:b3:
97:e1:01:4a:29:12:f5:1b:7a:85:34:c2:d4:31:09:
0f:b5:d3:04:3f:fd:b2:e1:15:19:15:4d:fa:b5:6c:
30:ac:cf:c3:c5:fc:c7:1e:c3:21:52:6c:ac:1a:90:
79:a4:f2:04:0a:c0:c1:5c:1f:ea:ec:c0:5a:7a:67:
66:9c:4e:f5:34:c8:e0:cc:95:39:8b:dd:d5:ac:02:
3f:ef:e4:d1:5a:34:39:62:69:f5:50:67:f8:b8:6e:
62:f9:20:2f:dd:0b:d2:f8:d5:03:4e:bc:9d:0d:57:
f0:89:e3:f5:7c:45:7d:92:5f:0a:28:20:82:3d:e5:
55:64:5e:fc:4a:23:1b:6b:8f:dc:64:f5:ca:78:e6:
3b:e9:3d:b4:b7:14:3f:da:90:56:27:e2:aa:11:3e:
ca:7c:5d:d4:37:67:38:97:79:09:53:93:94:89:16:
a0:d3:af:8f:ba:91:7f:0f:fb:7b:af:22:ce:71:3b:
90:cb:f8:9b:fc:82:60:9b:cb:56:11:30:e8:41:53:
bb:d7:72:a5:5f:71:32:52:57:e6:db:e2:ba:5b:85:
40:f4:6b:7e:dc:bc:a8:3c:26:06:c7:e5:86:3d:d0:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0E:8B:73:40:8F:31:06:D1:06:65:50:C0:55:F6:C1:30:92:0B:A1
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:46:45:a0:bb:5e:11:ce:a6:ef:2b:52:0e:e8:c9:21:4f:
23:ab:7c:bc:ae:2f:09:de:b5:b1:52:82:55:3f:2e:1d:5a:4e:
24:92:ea:e7:f0:3e:41:65:30:b5:3d:45:77:9e:5d:43:e7:b4:
bb:ae:42:71:df:a8:09:c3:4f:b9:14:75:21:e1:34:23:df:39:
8e:00:67:e2:88:29:51:08:fd:df:5f:d2:fb:d7:62:c2:d6:53:
80:17:2c:db:8f:7e:27:de:b3:85:9f:d0:aa:7c:2f:76:1d:2c:
e1:3d:a0:fe:be:47:08:4e:dc:6d:db:4b:4a:2b:63:8a:70:5c:
31:8b:a7:f7:44:97:1c:2a:9f:d9:04:15:22:7c:46:df:77:cd:
e2:2d:45:ab:a5:b6:cc:8e:d3:56:0a:6c:14:65:67:12:d4:a9:
c3:87:7a:a4:48:d3:7f:87:c5:6c:a9:2f:19:03:9d:10:3b:33:
fb:25:32:aa:e6:86:91:ec:7d:61:4d:c2:cf:66:ff:2a:af:58:
08:17:73:69:6e:90:88:5d:da:f9:1c:b6:d5:39:4e:62:c2:d2:
03:a4:49:ce:72:73:3e:9f:7e:69:55:11:5b:f6:1d:df:7a:3d:
4c:db:4e:c1:ef:9c:12:19:92:e8:4b:6e:3d:28:27:5c:75:3f:
e5:ea:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:59:44 2026 by rpki-client