
Error: rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File: IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier: yVoLg5R44qpIRK/O4qkf1z9cI6aojziRZ3nn0cw046Q=
Subject key identifier: 96:0C:D1:52:B5:68:99:8A:96:07:EE:0F:7A:C9:9B:E7:E4:EC:41:92
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer: /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial: 0315
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number: 0311
Signing time: Sun 11 Oct 2026 04:28:26 +0000
Manifest this update: Sun 11 Oct 2026 04:28:26 +0000
Manifest next update: Tue 13 Oct 2026 04:28:26 +0000
Files and hashes: 1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: othUZEAGFPx8SoQXKHhqwXoJuPQjZu/gN3Zyed6Qrhk=)
2: C00EBB487EC011F1A02B611BCF1D38B0.roa (hash: gCmNtUdXuEUu53fztVj0ryayk/YMUurBf8PkCG1BN38=)
3: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 04:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C3F1AF, serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Validity
Not Before: Oct 11 04:28:26 2026 GMT
Not After : Oct 13 04:28:26 2026 GMT
Subject: CN=6acb106a-28c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:4d:52:b8:e1:10:5e:86:4a:32:cc:24:74:
42:96:3f:16:7f:78:f2:6f:6a:c4:63:07:09:65:2b:
0d:97:70:61:77:a3:00:3f:f0:42:ad:be:9c:e7:6e:
d0:cc:4a:29:68:b4:a3:75:7d:24:d8:f8:fb:2a:fd:
d2:2c:c9:84:a6:0e:76:85:85:91:53:33:1e:bb:e3:
60:fb:2a:4b:63:d2:0f:e0:ee:70:df:a7:5f:79:49:
f2:8b:82:f0:9b:15:83:c6:b0:f5:98:e1:68:54:75:
ac:75:56:75:62:12:cc:88:9d:92:5c:85:13:8c:6e:
c0:33:44:2a:83:59:95:7c:4e:a6:56:6a:0e:f8:66:
36:a8:8c:60:b7:bf:c6:bc:b7:ad:80:b9:e0:18:a5:
e9:bb:8c:aa:61:2e:e4:ea:1e:a9:48:a1:b2:bc:1a:
7c:76:e8:2b:32:16:31:c5:eb:18:eb:1b:77:9b:31:
a4:67:25:00:6d:0b:f1:2e:ea:c0:96:8b:11:a3:ba:
08:34:26:3e:30:dc:03:ba:4c:61:32:64:0b:9d:eb:
61:53:eb:5c:77:31:45:ef:26:68:fa:e5:0d:2f:8d:
7c:1b:06:34:80:29:17:05:40:b7:65:aa:fb:bb:07:
32:9f:ed:5e:49:65:d1:93:17:6d:c1:c5:65:44:d8:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0C:D1:52:B5:68:99:8A:96:07:EE:0F:7A:C9:9B:E7:E4:EC:41:92
X509v3 Authority Key Identifier:
keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:dd:5d:f8:42:8a:e9:66:57:64:f8:48:c0:f6:2d:99:2c:
44:f2:22:72:41:fa:17:03:85:40:42:3f:f4:23:2e:81:c7:ca:
26:bd:6f:03:44:ca:78:54:2b:3a:e4:86:68:df:b8:6b:72:58:
7d:d2:dc:7e:ae:b1:39:69:95:25:05:8c:3f:b8:0f:28:6b:4d:
02:2e:34:68:bd:29:27:22:95:fb:97:f2:c5:59:90:25:66:02:
12:5c:c3:2b:4a:73:77:0d:f3:d9:dc:a3:c3:54:7f:cf:bb:ef:
b9:41:a4:d7:f5:4e:c5:eb:d1:59:d4:ee:6a:3c:a4:6d:57:ba:
f0:ef:11:89:db:18:cd:8a:a4:fe:50:ef:73:db:23:ca:9f:4d:
48:7f:83:dc:1f:ed:c7:88:24:f8:91:49:5e:9a:0b:36:a8:13:
e8:42:0a:6d:00:28:7d:09:14:63:80:a1:ba:b6:ce:c9:c5:11:
ea:7a:eb:5d:70:c7:b0:41:80:32:a2:8c:8e:86:90:b7:32:45:
ae:ff:8b:e9:b9:83:19:05:36:91:b3:b4:14:e5:11:0e:d0:15:
1c:39:1f:77:8b:00:0f:a6:14:8e:96:45:a6:3a:c5:3e:08:a7:
29:3b:3f:0a:b2:39:13:2d:35:1b:ce:e5:ca:2c:b8:fc:70:8c:
af:c6:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:51 2026 by rpki-client