
Error: rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
File: HZidq5_JTcsumLGO3tmPX49Zyuo.mft (raw, json)
Hash identifier: bTgqZBsuSSQnjPRZjnCPiDKW+QZ3boqW0nCid65Sa7I=
Subject key identifier: 95:5C:BA:B1:63:4D:00:D9:67:E8:4E:6E:06:F6:23:B8:C8:51:15:E8
Authority key identifier: 1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA
Certificate issuer: /CN=F3693F0FAR/serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
Certificate serial: 79
Authority info access: rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
Manifest number: 77
Signing time: Wed 23 Sep 2026 05:40:16 +0000
Manifest this update: Wed 23 Sep 2026 05:40:15 +0000
Manifest next update: Fri 25 Sep 2026 05:40:15 +0000
Files and hashes: 1: HZidq5_JTcsumLGO3tmPX49Zyuo.crl (hash: alJLGWwLjNrKr/JxF/HWhhM8pLZxMxeDYQt4PS8852g=)
2: BD108C8C5FFD11F181D1EC1ECF1D38B0.roa (hash: 0RAAHj2DRHeGQw2/3zb6fZlhOfTZehAueYQXWNTpjEk=)
3: 1B7ED73A5FF211F1A5FB5EDACE1D38B0.roa (hash: tBsb3KoqmQYJZoFJrHv9Cghp2s7SewPhq2+i08NAc3U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693F0FAR, serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
Validity
Not Before: Sep 23 05:40:15 2026 GMT
Not After : Sep 25 05:40:15 2026 GMT
Subject: CN=6ab36640-39c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:8e:11:16:28:81:5b:9c:63:19:af:30:fc:
cd:5b:c3:77:ae:0a:17:4b:fb:8d:58:1d:c4:d2:96:
42:e6:e7:62:c6:7f:5c:cc:bc:b5:ed:48:ac:74:29:
1d:28:ff:41:19:70:68:ca:5f:58:3f:c7:f2:c1:d9:
95:d6:d0:54:00:2e:4c:44:01:e8:69:b7:75:12:a6:
88:60:e2:ce:64:f8:4f:af:71:01:b2:ae:db:1e:21:
f7:01:b8:30:ba:22:c2:41:1b:be:16:0d:6a:c4:08:
49:f2:47:fb:65:fd:de:01:df:a6:71:e0:a9:07:01:
c7:38:ce:af:69:6e:d5:12:b9:95:6f:4b:13:21:a3:
ce:9b:72:fd:9c:0a:60:41:56:e5:46:09:a4:99:19:
1c:e2:f1:b1:87:b3:4b:39:bb:48:10:11:aa:da:b6:
78:55:81:82:21:48:9d:72:e8:c4:f2:db:35:5c:d3:
16:d7:c4:7e:cc:c3:9e:16:48:67:37:16:9e:73:d0:
98:05:81:52:14:b6:ff:db:cc:60:41:2c:92:a2:0e:
79:58:5e:18:72:b3:f4:23:0f:0f:c3:81:b6:12:12:
75:db:a9:4d:8a:77:86:6c:43:28:a6:4d:d2:91:72:
dc:be:28:55:8e:1a:bd:17:bc:4e:50:28:fb:af:8a:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:BA:B1:63:4D:00:D9:67:E8:4E:6E:06:F6:23:B8:C8:51:15:E8
X509v3 Authority Key Identifier:
keyid:1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:91:ce:33:22:10:eb:e0:53:e0:63:ed:7e:ad:6e:fc:2b:ff:
9d:f0:8c:3d:43:bc:90:78:d1:57:35:b5:e6:fb:46:e2:32:35:
ab:2f:33:a4:cd:3f:9a:38:75:8a:39:ee:b8:78:97:96:b9:eb:
f4:74:d5:26:3d:c6:c3:23:ce:90:3c:89:ac:61:57:64:a1:82:
a8:53:c4:3b:ec:af:65:9e:01:a7:37:c6:eb:4a:d8:2e:ee:12:
6f:3b:07:c3:58:21:63:38:81:b0:28:78:e5:8a:c0:5f:82:92:
56:49:74:0e:a9:3f:96:97:b9:12:2e:c8:77:fc:77:40:51:83:
ca:9d:3c:d2:0a:21:be:74:43:74:05:8b:55:1a:c8:b2:bc:e4:
66:b5:80:66:bc:26:f9:2a:16:27:17:65:f2:84:00:0b:5e:c3:
07:24:d9:2b:57:fb:4e:60:d4:75:41:4c:97:21:63:5b:55:a6:
0d:59:91:42:c7:76:08:bf:fc:d9:4d:a6:64:ef:93:0d:bc:22:
65:b5:c6:af:a8:e2:5a:e9:8d:a8:59:41:ed:bd:78:9b:b6:fe:
8d:0f:85:48:9e:ab:d7:bf:d0:bb:a2:70:f4:f5:52:4a:8d:b1:
d1:7e:46:bd:9b:6d:f2:0e:87:1e:62:84:8a:1a:92:c1:1a:6a:
4e:f8:6c:4f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBeTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
M0YwRkFSMTEwLwYDVQQFEygxRDk4OURBQjlGQzk0RENCMkU5OEIxOEVERUQ5OEY1
RjhGNTlDQUVBMB4XDTI2MDkyMzA1NDAxNVoXDTI2MDkyNTA1NDAxNVowGDEWMBQG
A1UEAxMNNmFiMzY2NDAtMzljMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiFjhEWKIFbnGMZrzD8zVvDd64KF0v7jVgdxNKWQubnYsZ/XMy8te1IrHQp
HSj/QRlwaMpfWD/H8sHZldbQVAAuTEQB6Gm3dRKmiGDizmT4T69xAbKu2x4h9wG4
MLoiwkEbvhYNasQISfJH+2X93gHfpnHgqQcBxzjOr2lu1RK5lW9LEyGjzpty/ZwK
YEFW5UYJpJkZHOLxsYezSzm7SBARqtq2eFWBgiFInXLoxPLbNVzTFtfEfszDnhZI
ZzcWnnPQmAWBUhS2/9vMYEEskqIOeVheGHKz9CMPD8OBthISddupTYp3hmxDKKZN
0pFy3L4oVY4avRe8TlAo+6+KiDECAwEAAaOCArUwggKxMB0GA1UdDgQWBBSVXLqx
Y00A2WfoTm4G9iO4yFEV6DAfBgNVHSMEGDAWgBQdmJ2rn8lNyy6YsY7e2Y9fj1nK
6jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTNGMEYvNzBBRUQ5Nzg1RkYwMTFGMUJFQjM1OEQwQ0UxRDM4QjAvSFppZHE1
X0pUY3N1bUxHTzN0bVBYNDlaeXVvLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SFppZHE1X0pUY3N1bUxHTzN0bVBYNDlaeXVvLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY5M0YwRi83MEFFRDk3ODVGRjAxMUYxQkVCMzU4RDBDRTFEMzhC
MC9IWmlkcTVfSlRjc3VtTEdPM3RtUFg0OVp5dW8ubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB2RzjMiEOvgU+Bj7X6tbvwr/53wjD1DvJB4
0Vc1teb7RuIyNasvM6TNP5o4dYo57rh4l5a56/R01SY9xsMjzpA8iaxhV2ShgqhT
xDvsr2WeAac3xutK2C7uEm87B8NYIWM4gbAoeOWKwF+CklZJdA6pP5aXuRIuyHf8
d0BRg8qdPNIKIb50Q3QFi1UayLK85Ga1gGa8JvkqFicXZfKEAAtewwck2StX+05g
1HVBTJchY1tVpg1ZkULHdgi//NlNpmTvkw28ImW1xq+o4lrpjahZQe29eJu2/o0P
hUieq9e/0LuicPT1UkqNsdF+Rr2bbfIOhx5ihIoaksEaak74bE8=
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:40 2026 by rpki-client