
Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File: wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier: FXw4e8GIeMJxKSz0kCvJ/UFoQoY8rLd1ocfFiH2e86U=
Subject key identifier: C7:FF:51:9E:1E:E2:34:D4:25:73:E1:A9:04:29:CA:FE:50:96:83:37
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer: /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial: 0131
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number: 012D
Signing time: Thu 24 Sep 2026 05:17:30 +0000
Manifest this update: Thu 24 Sep 2026 05:17:29 +0000
Manifest next update: Sat 26 Sep 2026 05:17:29 +0000
Files and hashes: 1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: 4UwfMRUr3LGgTZvFcihCywms4hsO47izVaE8iXpWj+8=)
2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Validity
Not Before: Sep 24 05:17:29 2026 GMT
Not After : Sep 26 05:17:29 2026 GMT
Subject: CN=6ab4b26a-e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:1b:0f:19:55:2e:0f:3a:94:1c:90:a4:d0:
ea:39:d2:f4:d6:4d:f3:cd:1c:93:16:a5:d4:0f:fd:
f4:ba:1f:c6:90:ac:1c:30:3f:f8:13:e8:fb:af:39:
17:8d:d7:06:ac:d3:7c:50:12:ab:19:1d:07:a1:46:
f3:25:39:43:16:43:01:1e:eb:97:5c:30:4d:0b:a8:
ab:e1:70:77:12:21:8c:0c:7b:19:f9:89:6d:66:81:
90:a0:6a:16:7a:5d:64:7d:27:16:d6:f0:8f:16:c0:
2c:8b:ec:33:b3:6d:18:66:42:05:8e:a4:b6:d7:2e:
67:c6:a2:8d:44:1c:d7:b2:5d:8d:17:0a:e2:6a:5a:
47:8b:a2:1c:37:4f:4e:ca:08:2d:1e:ed:58:c8:2a:
20:00:7b:95:30:7d:77:95:c3:5b:ca:ab:b7:96:a5:
12:0b:d2:9a:0a:5d:10:8a:c4:57:20:be:6a:3c:27:
d9:bf:36:8a:4f:c5:58:59:52:5e:8d:9d:9f:63:c6:
73:e0:5b:38:1c:ac:3c:cf:e8:41:03:cc:82:67:3f:
2f:e2:eb:12:0f:7a:ce:12:af:7b:f4:b7:68:1d:38:
da:b4:c3:4d:b1:2d:13:9f:60:b0:61:9b:db:c0:a0:
bb:4a:12:16:6b:6d:99:fc:d4:a9:67:b7:8f:ac:2d:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:51:9E:1E:E2:34:D4:25:73:E1:A9:04:29:CA:FE:50:96:83:37
X509v3 Authority Key Identifier:
keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:db:26:45:24:71:1f:9c:35:94:27:05:e5:4d:b6:08:c2:09:
e4:95:f9:07:d4:f2:26:63:96:ee:d0:56:29:b3:fe:2f:2d:8c:
fc:84:7a:6a:68:94:ad:1b:5c:61:44:31:e8:40:db:e7:2c:cf:
5a:c0:38:d8:ae:8a:e7:0c:1f:80:dd:0c:e2:7a:5b:5b:e8:f3:
b9:f4:9c:0b:e2:34:6d:59:fd:b2:99:f8:12:ae:9b:28:a6:2e:
4b:6e:34:0c:2c:7f:de:8f:60:b4:80:98:6c:2f:d6:c0:b8:04:
e0:e5:eb:a7:9e:30:d6:c8:1c:06:ce:69:06:a2:7e:2d:13:a7:
15:10:e6:3d:30:8a:1e:81:66:55:ee:d6:25:5f:ab:00:88:b4:
84:84:55:cc:be:6b:8c:1c:e9:e3:50:b0:bb:8c:7b:c5:02:57:
91:90:49:e0:92:5d:6d:12:33:62:07:42:db:29:d4:b9:2a:a3:
da:5c:83:27:6d:cb:a5:1c:b5:6e:4e:ca:ce:11:a6:6d:fc:b0:
86:37:af:c7:cb:fc:48:62:29:29:0a:ab:3d:7c:ce:7e:45:ec:
ba:f9:2b:5c:67:b5:9b:86:2f:95:5f:42:ec:8a:c2:74:9c:18:
1a:68:63:d7:a3:64:2d:03:2b:f2:ac:cf:42:eb:60:25:ba:26:
25:cb:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:06 2026 by rpki-client