
Error: rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
File: ccZPWbtr45jRfw--bFw8IxxOFXg.mft (raw, json)
Hash identifier: nYlJK9aRnT3fQsHgkRozl6UISvHqmsPfuPubcIywZFc=
Subject key identifier: B0:2C:56:FD:45:7C:17:CA:45:6C:B0:1C:F4:CA:E5:E4:98:9D:1B:6D
Authority key identifier: 71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78
Certificate issuer: /CN=F369E201AF/serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
Certificate serial: 02DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
Manifest number: 02DC
Signing time: Sun 27 Sep 2026 04:35:49 +0000
Manifest this update: Sun 27 Sep 2026 04:35:48 +0000
Manifest next update: Tue 29 Sep 2026 04:35:48 +0000
Files and hashes: 1: ccZPWbtr45jRfw--bFw8IxxOFXg.crl (hash: BKUT9En3VV/SbCAcFX81UlID8z2HJGsWpr5Ge5nE/Q0=)
2: E469911A873811EF820368B1762E951A.roa (hash: qS04r/6eawg5wkoo0hUF/y/Lc2S12pQmIndE2YUbUMw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E201AF, serialNumber=71C64F59BB6BE398D17F0FBE6C5C3C231C4E1578
Validity
Not Before: Sep 27 04:35:48 2026 GMT
Not After : Sep 29 04:35:48 2026 GMT
Subject: CN=6ab89d25-342a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:4e:af:d9:eb:ef:fd:6a:6d:a4:b9:88:30:
3a:0f:68:4e:7d:15:93:76:9b:4e:66:9c:b2:41:0e:
eb:38:84:03:ba:49:1f:0e:84:fb:65:57:e6:84:9e:
bb:90:3e:1d:f7:e1:9b:c6:ee:85:22:9b:5d:1a:7c:
d3:ea:ec:d9:92:e0:11:a1:36:37:99:e9:35:3f:2c:
27:88:3f:2e:7a:89:3a:c0:24:a5:6e:3d:85:bb:20:
11:99:2c:78:6b:54:28:77:9d:f4:bf:8d:fa:26:f6:
a2:3e:e5:67:48:06:47:10:c0:48:b2:d8:c7:fd:02:
dd:30:9b:ff:50:d1:8a:35:d4:05:a2:1b:bf:07:4a:
cd:8c:3d:6c:da:63:01:30:f0:13:06:95:48:05:07:
7f:7b:23:30:9c:a4:a7:fa:c4:98:c2:c2:e0:73:31:
e4:65:08:51:63:ae:00:2a:de:8b:78:d4:50:94:75:
23:be:fd:35:12:78:25:00:fd:4d:fd:2a:cd:86:59:
6d:32:4e:49:bd:0c:ab:a5:4f:95:6a:97:d3:30:06:
4e:f1:4c:24:23:3b:07:67:05:4e:a0:76:6e:3d:35:
12:89:76:79:3e:3b:9f:7d:d9:18:85:a0:c8:84:89:
df:71:a4:7b:ff:c9:66:31:4e:9b:58:05:47:02:93:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:56:FD:45:7C:17:CA:45:6C:B0:1C:F4:CA:E5:E4:98:9D:1B:6D
X509v3 Authority Key Identifier:
keyid:71:C6:4F:59:BB:6B:E3:98:D1:7F:0F:BE:6C:5C:3C:23:1C:4E:15:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ccZPWbtr45jRfw--bFw8IxxOFXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E201/8BEC5E92873711EF91FD1FA9762E951A/ccZPWbtr45jRfw--bFw8IxxOFXg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:49:14:23:67:35:43:16:e0:ff:33:89:c2:d4:2f:15:31:
1f:fb:e2:bd:71:ed:8b:64:8d:04:31:c4:cb:61:91:69:a0:2b:
d8:43:4d:45:8b:02:71:1e:c2:17:81:cf:c6:28:41:12:6c:6e:
a7:73:24:6f:cc:42:19:4b:61:d8:19:72:4a:86:a8:b2:32:e3:
a3:d0:48:79:ff:fd:d3:38:1e:cd:5b:59:05:52:9e:10:c9:be:
28:c7:c5:e2:58:9e:b6:30:6e:48:43:a6:2c:08:af:49:b2:3b:
e3:7d:be:1a:51:44:49:22:73:a4:7a:92:86:92:3f:0f:bb:e5:
a7:d4:d6:4b:a8:cb:f3:37:9e:5e:02:51:7b:12:b5:77:3c:7c:
b6:3e:93:8a:35:d2:b7:be:96:fc:51:f2:32:3b:9a:59:21:8f:
f2:c4:2f:3d:be:4c:2e:db:09:ac:91:c5:30:e0:be:18:f9:a3:
2a:3b:83:f7:e2:56:41:ae:b4:61:45:f4:98:9b:a6:d0:56:fd:
3b:6a:d7:be:ee:63:5e:99:03:6a:32:ca:ca:24:4a:7b:b3:e2:
62:4e:67:fc:78:d0:a3:40:94:68:64:5d:62:3b:af:19:af:e7:
82:ff:92:87:bc:c6:23:cb:9b:5f:df:2a:f9:9c:00:8b:72:4a:
8e:83:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:11:17 2026 by rpki-client