
Error: rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File: qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier: ZcVJhHS2PlDoIUtf0S1ADoXJw8kA55T8jB5D62Q+uog=
Subject key identifier: 70:10:4B:B7:2C:36:80:9D:FF:A8:AD:C9:85:1D:B3:D4:83:E1:06:96
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer: /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial: 0766
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number: 0761
Signing time: Sun 11 Oct 2026 02:26:39 +0000
Manifest this update: Sun 11 Oct 2026 02:26:38 +0000
Manifest next update: Tue 13 Oct 2026 02:26:38 +0000
Files and hashes: 1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: f/aJhZXMsctiC5UPaxnMfLggsp+NpqBWTBiB4D8q5/0=)
2: A9D6E48A5D0611F1B78F8114CF1D38B0.roa (hash: opmRLpWk66BQlDryATDPPW9ebEfSz1NeYe47ioBWCPI=)
3: 3F6B56B65D0711F1B227D016CF1D38B0.roa (hash: jUtRcjoVuee0qBhTJVMW1WeuK3DD+4zwQr0sc3H9Qp4=)
4: 1C8C9C50C42B11F19678B9DCCE1D38B0.roa (hash: qOwoEaKZhZFoVWkSlupguO3fwwSn+hYGh63GDRAF4D4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Validity
Not Before: Oct 11 02:26:38 2026 GMT
Not After : Oct 13 02:26:38 2026 GMT
Subject: CN=6acaf3de-e43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:8f:dc:65:7d:6f:09:e3:d1:b0:12:ec:3e:
e5:f7:26:3a:57:61:83:b6:eb:84:87:6c:ad:43:43:
27:5d:4e:ef:4d:4e:3e:66:2a:41:41:a3:e6:a8:5a:
00:c4:20:4b:55:14:ae:f6:b0:7b:f8:bb:2e:23:2d:
be:cb:d0:6d:62:c8:f8:4e:75:d0:93:06:1b:f1:e7:
0c:21:4e:e0:7d:77:be:dd:a9:27:07:3c:70:c3:94:
d6:f5:b3:d7:ea:b0:a0:de:28:10:27:17:f5:d7:e7:
59:72:01:04:b4:6f:f1:c8:81:2f:81:62:50:5f:21:
c9:52:8c:9c:db:00:46:49:af:5f:2c:de:f3:96:0b:
f3:51:c9:c5:c8:64:85:ad:91:0f:74:91:48:6a:18:
78:2f:fc:c8:08:e0:19:b3:2f:dc:a9:14:34:62:8a:
6d:33:25:ba:c8:90:c8:a4:e1:e8:e9:43:ea:ee:4d:
4e:ba:87:d4:63:56:5e:25:31:4e:7c:11:2e:89:0f:
dc:01:7c:ab:fe:8d:6f:48:c8:52:96:04:20:a5:9b:
e0:4f:cf:a0:ed:da:12:36:d1:d8:b1:46:4c:3b:07:
62:63:b6:0a:9b:95:63:05:23:15:59:65:85:00:04:
af:20:26:a9:03:d2:b5:c0:71:f0:d0:43:78:16:c4:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:4B:B7:2C:36:80:9D:FF:A8:AD:C9:85:1D:B3:D4:83:E1:06:96
X509v3 Authority Key Identifier:
keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:b0:ba:ed:03:b4:79:81:1a:39:69:e2:1d:ca:39:f1:03:
61:9f:1f:b0:2c:d9:6f:a7:f4:b2:78:f9:f8:88:da:48:72:e2:
cd:ba:1a:a3:27:81:1e:bb:24:36:4e:ba:7f:0d:80:0a:38:1d:
2f:8a:3e:4c:72:1f:ff:5f:08:02:3c:b7:63:1a:02:c1:60:48:
66:9a:5c:f6:0f:50:4a:63:ea:55:f8:cf:eb:d8:28:79:62:53:
00:0f:67:d7:df:5b:80:b9:0c:a2:b8:46:ea:7b:29:e6:92:b2:
47:42:8c:af:19:f3:03:1b:7c:95:2e:59:dc:3a:86:e7:97:62:
cb:4d:9b:e4:cb:db:0a:ce:80:f3:02:b4:e6:7c:cf:84:31:fe:
4b:9f:bd:58:31:d8:3e:17:a7:20:e3:e0:0b:7f:64:70:eb:1d:
cb:d1:03:32:33:d6:08:38:7f:75:6e:ba:98:1a:93:07:a9:a8:
ef:ee:9e:32:38:57:fd:97:5c:3f:ae:69:af:08:c7:fb:2c:12:
a6:97:f5:fc:b9:46:fc:cc:94:bd:d3:23:3c:4d:b9:88:7e:51:
9f:aa:54:15:d0:2e:03:29:f3:a5:bf:b6:29:85:4f:1a:41:df:
82:60:39:73:bd:3c:91:5f:47:7c:e2:55:f0:2b:fb:67:c3:39:
65:99:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:54:09 2026 by rpki-client