
Error: rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File: 1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier: nxd82F93ClPAgMq9151FCgYqfhIWQ1wBe6hOK+Sh8/8=
Subject key identifier: F2:DE:A9:62:B3:59:C9:57:41:4C:18:7E:D5:69:D1:A5:7F:24:89:24
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer: /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial: 079C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number: 0797
Signing time: Thu 24 Sep 2026 02:17:07 +0000
Manifest this update: Thu 24 Sep 2026 02:17:07 +0000
Manifest next update: Sat 26 Sep 2026 02:17:07 +0000
Files and hashes: 1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: gzvNyiVsgQrHfhjv3M0aefy+FvhI+Ir1Y62jalmAm8A=)
2: 2D74E6CE2CDE11F1B13255A8DAE4EC9C.roa (hash: +81hzYpM3W36exbMJDzXr2Ri1//pFW7oRixW0r8/AJY=)
3: 526901882CE611F1BF63EBD6DAE4EC9C.roa (hash: aw2Z7KwdzkCBr55pTjeJJCbVsjj0x/wKbNsblVOzb6E=)
4: FF757B4E2CDD11F19B6540A8DAE4EC9C.roa (hash: 5UlL0ZRX7x5wQWu7za/SUcPB92F6HJ1BFe+lS7nnTtc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Validity
Not Before: Sep 24 02:17:07 2026 GMT
Not After : Sep 26 02:17:07 2026 GMT
Subject: CN=6ab48823-202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:bd:00:7e:b2:ec:8b:28:4b:e0:a9:7e:73:
d1:63:a5:80:e0:e7:6e:d4:4b:ca:20:6c:9b:82:9f:
95:4c:4f:0b:83:d6:6b:c2:85:b6:25:0d:3e:5b:e0:
af:60:a0:55:30:29:9a:da:a2:89:0a:c6:27:e0:5d:
5d:11:7f:0d:51:bf:0c:5a:ca:b7:23:a3:f2:9b:fe:
5c:0f:b9:8b:13:9d:d8:b5:9a:73:c6:b5:9d:90:af:
bd:7b:3a:0f:12:50:b5:16:b2:a6:92:ed:87:84:11:
f6:f8:3b:7d:7c:c7:11:15:fe:04:94:b4:c8:cf:2f:
b1:a8:84:bd:18:66:84:bb:2d:67:4a:01:ae:5f:7e:
64:a9:a4:78:36:19:67:04:6f:a0:e5:c5:df:c2:14:
89:fc:0d:39:18:6a:6b:69:f8:7b:e2:b1:e6:97:60:
e7:b3:e0:dc:37:0a:af:8a:8a:66:72:64:0b:60:2d:
8e:2f:29:45:4c:3d:a2:af:88:00:28:ba:a4:49:18:
38:ba:14:3f:1b:28:d6:c8:81:42:38:4e:f1:56:11:
10:f6:ed:b5:89:2a:bc:3b:4d:dc:2a:fa:4c:e3:57:
19:62:b6:16:7d:69:10:8e:25:74:03:ff:19:63:f9:
ec:6f:27:d9:f3:31:7e:21:c1:49:d9:22:7c:f9:b9:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:A9:62:B3:59:C9:57:41:4C:18:7E:D5:69:D1:A5:7F:24:89:24
X509v3 Authority Key Identifier:
keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:3d:84:ec:69:00:4d:86:6b:6a:80:06:76:a9:8f:5e:b5:
67:01:20:f7:5a:07:69:e4:c0:dc:57:45:03:24:4b:ab:a0:b2:
92:7e:40:c1:6b:23:58:b3:40:50:88:5e:cc:61:d4:b6:38:df:
ef:b7:42:39:3c:77:0a:b8:48:aa:1e:4d:80:87:46:f8:4d:fd:
8b:d4:b5:33:09:97:26:a6:fb:2d:d4:d7:da:96:93:b8:32:56:
b8:1d:24:74:d7:45:49:eb:95:6e:5c:88:21:28:dc:ad:6a:ca:
8c:fe:aa:a8:b6:a5:20:c7:e7:d7:d3:6b:49:20:b3:06:56:8c:
b5:1d:87:14:25:66:6a:6f:9a:c6:85:af:e6:a4:cf:c4:4a:51:
7c:e0:81:05:7c:ff:12:6e:cf:09:fa:e3:c6:ae:27:9b:65:45:
4e:22:9b:b3:da:6e:34:79:49:36:c4:7c:8e:8e:96:e6:09:56:
36:4c:a2:ba:18:85:8d:b2:f9:7b:4a:99:e6:ef:8f:d4:e0:f7:
f7:72:38:bd:a2:d6:c2:ce:e2:ca:63:35:91:d7:22:b4:33:fa:
1c:4d:e3:bc:a9:a0:54:ee:60:0e:e9:ee:a3:41:20:14:06:a4:
5f:bf:be:f0:ad:db:7f:73:59:fb:75:ef:33:64:c9:45:4c:27:
e3:35:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:02 2026 by rpki-client