
Error: rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File: X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier: sPPXSKfhQanIH++iQk+b8AxTyWLfp95dW3u05SK+TuY=
Subject key identifier: B0:35:68:F3:AF:44:BF:8A:43:59:D1:44:16:CA:53:95:B5:20:BA:66
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer: /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial: 07F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number: 07F5
Signing time: Sat 26 Sep 2026 02:05:55 +0000
Manifest this update: Sat 26 Sep 2026 02:05:54 +0000
Manifest next update: Mon 28 Sep 2026 02:05:54 +0000
Files and hashes: 1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: 5f2MaLKI2UJWIXFVkheFNEfMQxOrPbGNPEjTFocttF0=)
2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Validity
Not Before: Sep 26 02:05:54 2026 GMT
Not After : Sep 28 02:05:54 2026 GMT
Subject: CN=6ab72883-4c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:8a:2e:5b:d6:1c:3d:8d:33:ea:8d:5b:c8:
2a:34:25:bb:6f:ef:77:35:c4:ed:5b:39:d4:7d:89:
1f:20:0d:93:e8:29:6e:3d:f0:be:6c:82:bc:19:77:
be:16:30:ce:a8:cd:f9:b5:c5:f9:3d:c1:62:5f:9c:
70:34:5c:ac:c1:53:ea:c0:7c:7b:e1:90:9a:4c:b4:
05:6c:9e:cf:33:f9:4b:56:8b:16:70:ba:48:58:fd:
4a:e7:83:82:06:b4:83:4c:3e:f6:87:4b:27:a7:ba:
6b:8a:29:01:fe:81:b9:43:2f:b2:7e:f9:32:b5:e7:
4a:75:1d:34:a9:3d:5e:77:29:c5:7c:44:ee:6a:a6:
d7:c3:7b:c0:08:10:61:66:db:50:04:c7:20:9c:2e:
8d:d0:08:9a:26:89:e6:06:f3:08:e4:07:a3:98:bc:
1f:14:1c:0e:7f:ce:5f:5a:3b:91:30:82:f2:bf:b2:
90:9a:3b:40:47:a6:b3:a2:b3:80:f4:76:69:87:cd:
6f:da:a1:15:90:b0:ac:76:0b:02:b8:7c:32:a0:74:
54:84:8a:ad:7d:c8:a4:16:9d:94:9e:cc:ce:4b:87:
e6:3a:3e:f3:cb:19:10:49:fa:53:8a:23:e1:87:9c:
15:2a:de:a1:3b:6a:ec:70:b9:f0:83:71:7f:6c:3f:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:68:F3:AF:44:BF:8A:43:59:D1:44:16:CA:53:95:B5:20:BA:66
X509v3 Authority Key Identifier:
keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a8:53:7a:f0:5e:f0:87:53:ef:70:a0:ef:0a:0a:52:b8:c5:
c5:07:75:df:3b:66:05:96:72:ed:ad:15:de:bb:7e:94:a9:b6:
ed:3a:39:6b:b7:4b:68:27:0f:a0:08:6d:d3:c0:4b:9c:6a:43:
84:58:42:1f:06:a7:43:3a:f0:97:62:be:92:cd:08:fd:e9:e5:
a6:06:ed:49:f1:c6:6b:e7:c6:46:5f:a9:f1:95:13:85:87:9b:
b1:96:65:20:47:78:58:17:13:44:4c:7b:f2:94:7c:26:5d:62:
d2:9a:0c:fa:9e:73:60:53:48:90:8b:a1:c8:0b:10:44:90:97:
73:9b:5a:97:15:99:05:a5:3f:fc:18:65:9a:cb:f1:53:03:a3:
47:f5:78:42:bd:45:df:73:81:66:d4:01:aa:7e:7b:4c:06:31:
10:18:d7:b0:25:6b:37:56:f7:3e:49:a8:a3:95:ef:68:b4:57:
8a:67:a2:7b:16:f7:13:4c:07:9c:47:e1:79:f1:d7:2e:b7:23:
e9:50:45:ef:7c:9c:ba:dd:59:fa:3b:5f:e6:b9:d0:4e:cb:73:
b5:bb:a6:6b:2c:3a:fc:f4:d3:f2:b5:71:b5:bc:e9:1a:59:d9:
8f:aa:86:8c:bf:57:c7:ac:25:9e:7d:ea:a7:b8:6b:23:9a:ca:
87:81:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:03:57 2026 by rpki-client