
Error: rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
File: cDnVox_x8yuxXUeMEJeGl7YiJlc.mft (raw, json)
Hash identifier: 3Lr+pkpc0ywcs787pdjH9f2i31OfQHTMEfNtrS0pwdU=
Subject key identifier: B0:D0:68:8A:F2:57:96:3C:02:88:EC:3D:D9:BA:48:0B:F7:51:F7:61
Authority key identifier: 70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
Certificate issuer: /CN=F369A625AF/serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
Certificate serial: 0AD8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
Manifest number: 0AD6
Signing time: Sat 17 Oct 2026 01:20:23 +0000
Manifest this update: Sat 17 Oct 2026 01:20:22 +0000
Manifest next update: Mon 19 Oct 2026 01:20:22 +0000
Files and hashes: 1: cDnVox_x8yuxXUeMEJeGl7YiJlc.crl (hash: Scw0rA0vcxLofljvcAo5MTVzesz8XZvcWuPhS5qinKY=)
2: CFA5E174833711F0BAF820C0DAE4EC9C.roa (hash: 9LdX+6QJPzq+X9+Y9bU9wVAbIwwdt9RF0GdlBwu/DxU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl
rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 19 Oct 2026 00:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2776 (0xad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369A625AF, serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
Validity
Not Before: Oct 17 01:20:22 2026 GMT
Not After : Oct 19 01:20:22 2026 GMT
Subject: CN=6ad2cd57-3c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:c2:83:3f:16:4a:22:87:56:f5:61:a4:3e:
87:03:af:ef:48:d7:c4:f5:d2:0c:e7:23:fb:57:cc:
31:40:8c:cc:8b:e3:b9:3c:1d:bd:cd:86:5f:59:91:
34:53:19:a3:0b:be:a0:b6:2c:be:85:f9:4a:3e:59:
93:e7:8b:53:c6:2a:0f:9b:0b:bc:01:cd:ed:33:69:
c0:9d:31:c6:c5:b2:0a:f2:94:dc:a2:db:25:cb:fb:
dd:e5:a3:f8:92:94:70:c0:c9:2b:a1:ce:0b:d4:a5:
10:8a:bb:12:dc:23:e4:db:45:d0:4e:cf:d2:33:3d:
e2:6a:aa:bb:52:bb:08:a7:5f:b9:b5:a9:6e:38:28:
d9:6b:51:2c:78:f3:cf:d8:b1:4b:c7:97:78:53:7a:
66:77:fb:91:85:57:e6:db:12:35:8c:19:f0:86:a1:
63:04:2d:1d:86:4a:92:80:0c:8d:44:6d:65:54:3d:
3f:0f:5b:92:9f:fc:9b:f9:97:73:98:d0:da:bb:9c:
32:76:e2:7a:f7:77:74:0e:2d:69:9c:4e:8a:77:0c:
5d:50:ab:06:ee:8c:76:64:fc:8e:a8:63:43:5e:c6:
91:d8:f5:9c:a6:a0:0d:0e:a0:04:aa:4a:5f:2f:81:
c7:0e:ca:43:a5:23:c6:21:0a:fb:40:8e:6f:27:36:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:68:8A:F2:57:96:3C:02:88:EC:3D:D9:BA:48:0B:F7:51:F7:61
X509v3 Authority Key Identifier:
keyid:70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:30:3f:fd:ff:0b:e2:e5:d6:65:f6:40:5e:12:36:79:b3:be:
e1:96:d8:ff:c9:e1:38:bc:a5:86:fb:dc:ba:26:69:66:41:ae:
8d:c0:84:71:75:be:ca:00:ab:85:b9:42:e7:fd:06:df:78:67:
47:33:c8:aa:df:60:26:d8:91:1c:f3:12:01:e3:3a:2a:ca:ad:
65:2e:ff:8a:10:05:fd:97:a4:40:c1:f1:f7:14:d2:6f:e2:78:
7e:19:56:3f:af:3d:eb:ae:b1:2d:7d:31:ea:bf:22:ec:81:1d:
d6:b4:9d:60:6c:d4:1c:81:bc:96:ac:0d:82:4a:31:61:82:09:
24:5a:60:97:03:e8:c0:06:73:39:f9:ea:bc:f9:19:c6:8d:34:
e8:ab:3e:67:56:51:5a:35:70:13:3e:02:f4:98:0a:5f:42:4b:
9a:73:65:7f:ea:14:62:74:6f:5d:50:f8:5a:a4:32:38:95:2c:
d1:b9:3b:97:8b:bf:4c:ed:12:a4:d0:52:33:c7:d1:01:eb:0d:
00:00:f0:e0:6a:7d:33:08:a8:86:38:d9:96:c7:62:59:a9:96:
ec:d2:d4:3d:31:48:06:45:89:86:5f:4e:95:b4:ed:d9:33:9b:
0a:a9:20:cd:22:22:a5:36:ce:5b:e0:c4:eb:1d:fa:31:63:51:
b2:48:aa:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUE2MjVBRjExMC8GA1UEBRMoNzAzOUQ1QTMxRkYxRjMyQkIxNUQ0NzhDMTA5Nzg2
OTdCNjIyMjY1NzAeFw0yNjEwMTcwMTIwMjJaFw0yNjEwMTkwMTIwMjJaMBgxFjAU
BgNVBAMTDTZhZDJjZDU3LTNjNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDi38KDPxZKIodW9WGkPocDr+9I18T10gznI/tXzDFAjMyL47k8Hb3Nhl9Z
kTRTGaMLvqC2LL6F+Uo+WZPni1PGKg+bC7wBze0zacCdMcbFsgrylNyi2yXL+93l
o/iSlHDAySuhzgvUpRCKuxLcI+TbRdBOz9IzPeJqqrtSuwinX7m1qW44KNlrUSx4
88/YsUvHl3hTemZ3+5GFV+bbEjWMGfCGoWMELR2GSpKADI1EbWVUPT8PW5Kf/Jv5
l3OY0Nq7nDJ24nr3d3QOLWmcTop3DF1QqwbujHZk/I6oY0NexpHY9ZymoA0OoASq
Sl8vgccOykOlI8YhCvtAjm8nNgPxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsNBo
ivJXljwCiOw92bpIC/dR92EwHwYDVR0jBBgwFoAUcDnVox/x8yuxXUeMEJeGl7Yi
JlcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBNjI1LzhBMzgyNzQwNzhCODExRTk4Mjk4NDM0RkY4QUVBMjI4L2NEblZv
eF94OHl1eFhVZU1FSmVHbDdZaUpsYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NEblZveF94OHl1eFhVZU1FSmVHbDdZaUpsYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUE2MjUvOEEzODI3NDA3OEI4MTFFOTgyOTg0MzRGRjhB
RUEyMjgvY0RuVm94X3g4eXV4WFVlTUVKZUdsN1lpSmxjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtMD/9/wvi5dZl9kBeEjZ5s77hltj/
yeE4vKWG+9y6JmlmQa6NwIRxdb7KAKuFuULn/QbfeGdHM8iq32Am2JEc8xIB4zoq
yq1lLv+KEAX9l6RAwfH3FNJv4nh+GVY/rz3rrrEtfTHqvyLsgR3WtJ1gbNQcgbyW
rA2CSjFhggkkWmCXA+jABnM5+eq8+RnGjTToqz5nVlFaNXATPgL0mApfQkuac2V/
6hRidG9dUPhapDI4lSzRuTuXi79M7RKk0FIzx9EB6w0AAPDgan0zCKiGONmWx2JZ
qZbs0tQ9MUgGRYmGX06VtO3ZM5sKqSDNIiKlNs5b4MTrHfoxY1GySKpY
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:56:50 2026 by rpki-client