
Error: rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
File: HWc407_GEdh98N50A9JdoPZOseA.mft (raw, json)
Hash identifier: j1RxN1pTYH2+9Ne/EkcECK7s/vm3MzuWGeb6SCHC9Bo=
Subject key identifier: 7B:A5:1C:6A:1A:25:7F:B0:12:D3:74:12:2A:8F:BE:23:4F:3F:DE:B8
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 02C0
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
Manifest number: 02BC
Signing time: Sat 03 Oct 2026 04:36:53 +0000
Manifest this update: Sat 03 Oct 2026 04:36:52 +0000
Manifest next update: Mon 05 Oct 2026 04:36:52 +0000
Files and hashes: 1: HWc407_GEdh98N50A9JdoPZOseA.crl (hash: lLbqJaVxKotiTibKNqB12i0nXchdTk88R5+UdsaojNY=)
2: 315F293AEEF411EF81CB7343762E951A.roa (hash: V4KjGZgIPKcP1/MjXCNEypEICjJinDEh0PjdL2zARpk=)
3: 6B46698EEEEE11EF911C519D762E951A.roa (hash: Tu4GUApjh+qdeFTI+yn4KBIGDwp03a2AGvdYk9j0K9w=)
4: B68CCC76A68211EFA7605193762E951A.roa (hash: hVK4/Rx1S8B8kokV3evOakeSn1xgDl+NOOvc1/7Zypc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Oct 3 04:36:52 2026 GMT
Not After : Oct 5 04:36:52 2026 GMT
Subject: CN=6ac08665-b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:6e:29:3d:24:71:eb:c4:c3:fd:a7:f3:99:
fb:c0:61:fd:81:60:3f:cc:e3:40:38:8a:84:49:24:
fa:48:ea:e5:1b:af:95:c7:54:8d:c9:f5:8b:c2:7b:
ba:bd:c0:5e:43:9e:c8:9e:bf:11:0d:b3:27:a3:73:
92:4c:79:64:3f:13:04:25:4f:53:e3:51:9f:f3:c7:
94:22:01:98:02:9b:4e:eb:d5:d2:7d:ab:eb:05:8f:
b4:98:f0:32:cc:81:61:b4:95:f6:f4:c0:a2:b7:96:
e3:ec:4d:86:ff:3d:63:87:81:3a:43:c1:ef:67:2e:
08:16:12:22:d0:54:27:71:ab:e0:a9:5d:27:92:11:
7f:8d:09:1b:6f:70:12:d2:d9:cf:38:9f:a3:fd:0e:
a3:b2:a8:a7:10:06:df:8e:b3:1c:6a:0b:d3:2f:e6:
3d:b2:76:14:43:ed:ac:58:43:8e:73:9b:07:a6:75:
f2:e8:49:6a:cd:52:10:83:21:4b:7c:da:62:8f:5d:
c2:2f:0c:e5:df:9c:20:4e:85:54:92:7b:e5:78:33:
04:ac:d3:e4:f5:00:28:be:21:0a:16:bb:80:cf:fd:
6c:3e:df:77:52:b3:75:6a:06:48:49:d0:6b:18:e5:
85:32:27:a8:d6:b2:0a:31:72:71:be:a9:f7:c0:d1:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:1C:6A:1A:25:7F:B0:12:D3:74:12:2A:8F:BE:23:4F:3F:DE:B8
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:51:b7:b8:ff:90:4a:3b:5d:3c:95:4e:90:8b:ce:9f:6c:
9a:76:2d:d3:cb:a7:0d:24:f8:2e:79:bb:d2:18:3a:4b:c0:88:
fa:51:93:d2:45:81:6d:f2:7b:3a:39:2e:13:57:95:67:c3:cc:
1b:55:de:e6:2f:34:47:de:e9:83:6d:2a:a5:ef:de:8c:d9:06:
c1:4e:5c:d0:39:4d:e0:b6:46:ba:ee:48:87:48:a5:18:35:f0:
75:2e:7c:0d:e1:78:9c:33:2e:52:f7:41:b6:17:a3:eb:11:a4:
25:a8:d1:c3:bd:35:82:c0:79:29:ba:b7:1a:60:f1:24:ce:92:
46:6d:5c:4e:68:59:12:15:fd:1a:21:ad:71:af:53:26:c1:53:
e6:d7:00:cf:49:b4:20:df:72:bc:d7:d0:4a:02:28:45:a0:4a:
21:fe:12:31:35:91:e4:7b:d5:32:08:4e:51:c0:cc:c4:81:69:
0c:4e:02:d7:40:9b:73:fe:dc:be:24:7c:b9:f7:52:b6:b2:2d:
c7:46:a7:f6:50:ee:39:5b:15:86:c0:83:98:b2:c6:e4:78:16:
1c:a0:63:da:a3:50:2a:14:50:b6:0f:e4:04:38:4c:b1:df:71:
5f:f5:93:24:b8:46:e1:a8:29:ae:fd:7a:9a:fc:62:23:25:d4:
67:29:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:35:56 2026 by rpki-client