
Error: rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
File: ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft (raw, json)
Hash identifier: oKaWJK7LqHkCXj4N7ckUHwGR2u3lYlboWKvN6mA8gOs=
Subject key identifier: D4:26:63:48:6C:0F:A4:B3:C1:FE:43:65:61:C7:2F:9A:5A:00:A7:17
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Certificate issuer: /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial: 04DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
Manifest number: 04D6
Signing time: Sat 14 Nov 2026 03:34:45 +0000
Manifest this update: Sat 14 Nov 2026 03:34:45 +0000
Manifest next update: Mon 16 Nov 2026 03:34:45 +0000
Files and hashes: 1: ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl (hash: 0DNmE6l/AxJopQOLepEi+o9S7CiYfi0PjITjTwFGWls=)
2: F59C135AD57111EE98F3334E775412E6.roa (hash: DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=)
3: 43172C202F6711EEBE578C1B4AD9E6FC.roa (hash: olt87M5UNUaEOcxzcw5wRYVy43osgJdjsy53S5VrdrA=)
4: EA6262822EB411EEA85FC5794AD9E6FC.roa (hash: k3VP3qw0EwdYjKV3iUtgdfKB+KXoIlF7qnyQ2hPvZY8=)
5: 67238C7E541411F1AD2A15AACE1D38B0.roa (hash: R8x1/0rShcDb+3uaeVfuGgUMj+G8nfBNX3NNkFTszeQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367EEA2AF, serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Validity
Not Before: Nov 14 03:34:45 2026 GMT
Not After : Nov 16 03:34:45 2026 GMT
Subject: CN=6af7d6d5-47ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:e9:2c:dd:c3:16:cf:cf:2e:21:dd:c9:0a:
0a:11:32:11:89:61:4b:95:55:24:45:72:42:f2:14:
6e:86:97:67:e5:1c:8d:0a:dd:9f:18:68:66:79:e1:
7e:69:85:f8:c3:05:17:ba:5b:f5:b8:6e:f8:22:7b:
27:8f:18:99:4c:94:8c:d0:67:26:fd:5e:2f:f3:98:
70:e5:de:75:ef:0e:36:32:c2:cc:6d:02:6e:c2:8d:
6b:ce:e6:91:63:33:e1:7f:64:0b:ca:75:b6:03:62:
e5:5b:bb:03:96:f6:5b:8b:d5:d4:f6:48:03:9c:87:
3a:78:4e:2a:b3:7f:8f:a2:d9:e0:85:cc:18:b3:cb:
de:1a:7e:a4:48:95:cc:24:22:f0:ce:93:cd:cd:4b:
ee:dd:b2:23:f9:16:8f:7c:59:d3:8f:0a:b5:1c:72:
b8:cf:7d:5d:8c:be:f3:67:cf:46:25:7a:34:c6:4d:
13:7e:7a:7f:e6:1f:58:20:f2:c7:62:b5:64:08:26:
34:3a:e9:0f:a2:a2:f2:cc:ae:30:fc:cf:6b:0b:af:
70:26:cf:58:96:ff:37:42:82:36:cc:11:ff:4a:26:
41:09:72:e2:82:75:f4:69:87:73:43:b6:3c:35:d8:
04:fe:60:e2:5f:13:1c:b6:92:5f:c6:31:33:ed:ae:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:63:48:6C:0F:A4:B3:C1:FE:43:65:61:C7:2F:9A:5A:00:A7:17
X509v3 Authority Key Identifier:
keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:c4:32:a3:6b:7d:01:ef:8b:ac:00:ff:cd:f5:08:1c:b3:
51:2b:14:2a:b4:3c:be:88:fa:36:53:a6:57:e6:79:b1:d6:56:
45:10:15:b7:8e:d7:2e:08:a4:ee:e3:a0:00:73:1c:c4:c8:ef:
bb:b9:12:6d:b9:5f:db:5c:a9:83:67:d9:5a:14:a7:ec:83:54:
85:4b:ad:3a:10:59:f2:88:df:3f:80:b0:32:63:4a:eb:6c:6c:
a3:33:52:ff:ca:8e:fe:fa:d1:b4:b7:d4:38:bc:60:2d:93:d2:
10:4b:c4:b4:0d:bf:e1:28:4b:f1:b1:d7:06:98:43:f9:ae:19:
94:b1:33:0f:9b:9b:de:89:f7:ef:cf:cb:2f:56:4e:eb:9d:38:
06:6c:5c:26:d2:cb:db:4a:4a:5d:33:37:f3:1a:14:5c:32:6f:
6d:96:f8:43:77:1c:35:d4:bf:bb:41:89:2b:12:1b:02:5e:63:
57:af:3c:7d:57:6b:e6:00:8a:21:44:9b:8b:43:12:53:54:c0:
7a:c7:5f:99:75:bb:3f:30:e3:fa:55:63:37:17:01:1a:06:eb:
97:6f:21:7a:5c:14:d1:e2:97:1d:a3:a3:87:48:89:fb:7f:29:
e9:49:49:ec:ed:94:8c:2a:e0:d0:cd:d8:28:b6:31:fb:7a:29:
5e:ae:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:44 2026 by rpki-client