
Error: rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier: 8QBRAtXMQh1lAlql2bk5I+Vx3PTopfqaGM84hLJYZ6Q=
Subject key identifier: F9:62:F7:E5:07:21:7B:67:FB:41:D9:CC:01:AD:E5:FD:DC:A0:D0:B2
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer: /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial: 075A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number: 0756
Signing time: Sun 27 Sep 2026 02:25:03 +0000
Manifest this update: Sun 27 Sep 2026 02:25:02 +0000
Manifest next update: Tue 29 Sep 2026 02:25:02 +0000
Files and hashes: 1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: tITT+fVONHhiI7yGXH2T9Ox83GRWYCntVS8ZGTLeanI=)
2: 41154872962911F1979923DACE1D38B0.roa (hash: 5lt3Yq+7+mrDu7Rgxl913ugiuhww8fYeSDHdmofrW5s=)
3: BE375CAA962911F1878869DCCE1D38B0.roa (hash: Y3X1SBiD4AkB1iF8TfEGnqcGwMoyf7vwpW8s0D8Pl5I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Validity
Not Before: Sep 27 02:25:02 2026 GMT
Not After : Sep 29 02:25:02 2026 GMT
Subject: CN=6ab87e7f-249b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:99:e1:17:d7:a9:5a:31:5b:fb:9e:ec:b5:
64:ca:6e:78:9e:ab:18:20:bf:bd:85:af:1f:83:fd:
3e:dd:38:ab:e4:98:e3:2a:99:e5:c0:de:b5:b8:08:
fe:fc:dd:41:2b:95:16:fc:5e:59:c0:7e:8e:73:c9:
4d:91:4e:73:04:c9:f5:d5:01:90:4b:ba:14:83:20:
8b:2f:41:fa:47:0a:cf:16:cf:dc:3d:91:11:9f:68:
28:6b:04:32:b3:2f:99:8a:ca:76:bf:d5:28:3f:c5:
60:1c:b5:28:d0:4c:da:65:16:de:8e:bf:ce:8b:4b:
96:87:a3:d0:2a:d1:78:96:1a:1d:7c:2c:9c:f0:e7:
8a:ba:96:db:f3:79:2c:da:80:cd:14:9b:ef:35:34:
e2:8d:84:ca:ad:f1:f6:6e:6f:b4:93:db:db:2c:1d:
d9:29:f4:cd:b5:c6:b0:2d:15:24:4c:a3:b4:e8:72:
cb:4e:4e:28:19:1b:f8:59:5f:07:01:16:c0:90:03:
08:39:1d:a0:4c:af:26:6d:33:d1:a0:c0:64:78:e9:
a8:78:96:ef:e5:d2:0e:b7:47:09:10:f7:be:93:84:
e9:7e:54:87:08:ae:35:1b:91:5d:6b:85:a4:cb:fa:
71:9f:e5:64:95:47:9d:6a:60:cd:30:a5:13:7a:3d:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:F7:E5:07:21:7B:67:FB:41:D9:CC:01:AD:E5:FD:DC:A0:D0:B2
X509v3 Authority Key Identifier:
keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:25:6e:b6:5f:c5:58:70:b0:49:d2:53:ec:87:4c:d3:e8:
f0:bf:62:24:6a:2b:5e:e9:d9:26:19:8b:47:af:89:f6:39:8b:
3e:f0:2d:f6:48:a7:91:06:45:0b:e5:b3:a2:83:10:a0:dd:11:
62:37:7e:3b:b6:f7:06:a8:e7:72:32:b0:c9:5b:90:ab:29:39:
71:83:33:cd:f4:7e:ac:7b:f6:b5:de:af:67:c8:61:72:5b:86:
ac:d1:7a:45:0e:d8:21:4b:9c:29:86:30:57:e4:b5:d6:31:43:
e4:a7:44:9d:63:a9:64:18:33:06:d2:6c:81:c3:69:ed:fe:5f:
5a:91:2e:e0:0c:a2:d7:d0:7f:4e:78:24:87:b4:9a:75:f0:e4:
29:25:6f:02:ad:d1:d0:4f:67:d6:5a:5a:fb:ce:c9:4d:16:54:
38:f6:76:ba:da:b0:94:13:7f:c3:0b:f7:bb:a6:85:b7:5b:1d:
1a:50:e9:df:51:ad:4c:d9:bf:c9:56:a8:30:5f:83:0e:fd:6e:
56:ee:61:e8:56:9b:93:81:da:a2:4b:6a:b4:19:95:8c:04:54:
1e:bb:52:5b:c7:3a:f5:30:f1:cb:a0:56:f7:84:47:28:ae:b3:
a2:f5:a5:51:8b:02:40:ce:2f:89:3a:63:6c:40:13:f0:b6:6e:
76:58:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:33 2026 by rpki-client