
Error: rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File: yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier: +J+O8IdIuDYpeze1NQqKmjX01KPQzxcB0LDdZoWXZpE=
Subject key identifier: 7C:3D:02:DD:4E:4A:69:F2:1F:55:5C:B8:0A:90:71:38:4F:20:95:51
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer: /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial: 0B1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number: 0B11
Signing time: Sun 11 Oct 2026 01:17:35 +0000
Manifest this update: Sun 11 Oct 2026 01:17:35 +0000
Manifest next update: Tue 13 Oct 2026 01:17:35 +0000
Files and hashes: 1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: wTSPkOSI9810kcmhmk7Zg02jFNGuGRtuiXXdWE8mfSQ=)
2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
3: CF05ECFCA77411F198E04AEDCE1D38B0.roa (hash: iYESV8f6QL3YpRdWWw9rt0Ncx/khSrDTjVayuJcHApQ=)
4: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
5: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
6: 90AD6192A77411F188D6BAE9CE1D38B0.roa (hash: fWmY6i/CSL5/fkan32p1pVRsVhJJHvl/8SPguXbL6cM=)
7: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Validity
Not Before: Oct 11 01:17:35 2026 GMT
Not After : Oct 13 01:17:35 2026 GMT
Subject: CN=6acae3af-8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:08:1f:52:77:27:d3:92:9e:f8:87:1a:47:
ea:4f:57:53:70:f1:63:d9:68:02:24:f6:65:07:6d:
a5:58:5e:f2:62:9b:43:2d:93:00:78:82:85:ed:02:
57:4d:a8:6b:7c:d1:65:4b:69:7c:ef:41:3e:6e:25:
55:f6:d6:25:09:f7:b3:32:5b:8e:c8:34:08:06:35:
15:d7:7f:72:15:9c:b3:65:cd:a7:3b:68:b3:87:b1:
6f:5f:c9:b5:8f:6f:07:8b:38:c5:18:c7:93:9d:46:
13:a2:e3:96:5a:e1:46:96:21:fd:21:71:98:71:18:
0f:86:47:c5:bd:50:a0:7f:f5:38:90:bb:61:c6:a7:
b5:bc:9e:63:ab:6e:f1:e8:37:86:c0:b8:ac:da:d8:
ed:46:2d:77:a7:62:7e:12:0a:32:30:b0:1b:24:33:
92:82:b5:a4:56:67:6c:bc:9e:2b:4a:ab:0d:3a:0c:
9e:4a:8a:93:84:05:7c:2a:42:6b:1a:b7:c7:a2:ff:
27:6e:ff:88:47:fb:87:e2:98:c2:94:f8:95:fb:50:
53:5c:3e:57:65:81:37:02:a2:ca:5a:63:79:24:2c:
c0:80:92:29:7a:cd:ec:de:c8:02:ea:85:06:08:7b:
52:f1:0f:fd:5d:da:07:cb:22:eb:62:76:32:27:52:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:02:DD:4E:4A:69:F2:1F:55:5C:B8:0A:90:71:38:4F:20:95:51
X509v3 Authority Key Identifier:
keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:82:56:50:c1:31:b9:61:4c:65:4b:c8:51:81:39:45:2b:
c6:ca:c2:c0:c5:2c:c8:24:b9:33:a2:c0:01:9f:92:23:28:38:
f0:9e:b9:29:3c:db:24:6c:36:11:ac:a0:1c:1e:58:7e:29:94:
be:d3:de:78:78:33:9e:b8:67:fc:c5:8f:ae:91:31:2b:df:6d:
70:16:85:3c:f4:66:1f:42:53:79:44:26:e6:b2:ba:f9:6c:ab:
35:44:02:59:fb:7d:da:27:33:a4:6b:a3:4b:05:14:20:d4:20:
cb:6e:59:9d:5c:cb:c0:06:2a:55:72:0b:14:2a:1a:b5:50:9c:
4c:98:a8:09:d7:f3:f1:1c:f2:8b:43:04:f2:7b:cf:fc:7f:cf:
48:7a:c9:7c:b4:6e:b1:30:ea:12:8c:6b:39:b6:17:84:c2:a4:
80:3e:8f:35:b9:db:d1:84:9a:e2:2e:fe:71:b1:68:78:39:eb:
9f:cd:ad:c2:0a:f5:4e:2c:04:77:0e:a6:ae:12:ca:02:49:70:
77:bd:6e:6b:8f:2d:62:62:e0:a5:28:c3:9d:32:6e:de:ab:c0:
e6:6b:9c:72:84:6e:cd:3a:89:78:e8:dc:73:33:3b:be:05:4d:
d2:21:8d:60:4e:21:03:83:23:9e:f7:e1:9e:6e:7f:c7:e3:01:
d5:6f:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:32:06 2026 by rpki-client