
Error: rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
File: WNo74zGmEqquT2owY3cEBjrD3UI.mft (raw, json)
Hash identifier: nNLGcSwkciqHev1O/jvYIc/08Z1qiJ+3W1TRTO0cm8g=
Subject key identifier: B3:11:21:B4:F0:7F:1D:31:6D:E7:D8:CF:A0:DD:7A:EF:E6:4E:7C:E5
Authority key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Certificate issuer: /CN=F36CA351AF/serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Certificate serial: 044E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
Manifest number: 0429
Signing time: Sun 27 Sep 2026 04:00:15 +0000
Manifest this update: Sun 27 Sep 2026 04:00:15 +0000
Manifest next update: Tue 29 Sep 2026 04:00:15 +0000
Files and hashes: 1: WNo74zGmEqquT2owY3cEBjrD3UI.crl (hash: 4ZKEG6kGk/ei1pGbFRZxbOqpR+uSwRho9L79eM85Tbs=)
2: BCF64E3ECFF311F08A0CEAABDAE4EC9C.roa (hash: j7CRom0lOGZ8lIcKQpUnN53ebTJRhvCHiwerxahwuFc=)
3: 1475A26ECFF311F096054DA7DAE4EC9C.roa (hash: DIhkt7w9XQYMikWyfPDe9zR1unEC2k2dd5ZETrYVeCo=)
4: F85AF57E067211F09411CC9B762E951A.roa (hash: M7iTLJiKvNwSTd9F5Yj4i6rXdd1RJ7bKnAkeW0q5GC8=)
5: 6A831B68067311F0A5B3819F762E951A.roa (hash: dHewD/xYlqQhiWTpdXFrkxy+Gj1C9QIhRZsurBV3l/c=)
6: 2F1A0898067311F091A5799F762E951A.roa (hash: CNCaOGq5e+fSVQ4wKVSRok1jWDlNhofbmJTl2fwntNQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CA351AF, serialNumber=58DA3BE331A612AAAE4F6A30637704063AC3DD42
Validity
Not Before: Sep 27 04:00:15 2026 GMT
Not After : Sep 29 04:00:15 2026 GMT
Subject: CN=6ab894cf-eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:93:80:2d:f1:63:89:b3:bd:ee:d0:a7:42:
02:9c:b6:83:1e:1a:82:5f:fb:c0:05:58:e2:f3:d2:
82:a8:df:15:a0:bb:45:9c:2c:4b:0f:99:5f:c5:d7:
e4:fd:72:49:05:d3:26:df:52:f7:71:8d:85:bf:74:
35:21:d6:ad:0e:4f:22:b4:45:86:bf:15:dd:86:ea:
03:63:d6:a8:88:7c:10:1c:a0:7c:bc:1e:a1:bc:e9:
12:03:61:2c:57:c4:fd:cb:b9:d5:57:f8:21:c9:41:
1a:e4:2e:34:2a:c0:bc:6b:df:f8:4f:7c:37:75:16:
e2:ba:a1:f5:6b:31:c4:e7:6b:3f:fe:91:45:27:41:
0e:07:20:23:20:0d:fb:9f:91:d6:c6:9c:18:2d:ca:
52:90:c1:f1:d5:e6:6f:6f:43:00:bc:9a:49:3c:34:
b5:4e:02:10:45:80:8b:be:bf:19:cb:08:f3:16:f9:
1e:92:eb:14:7b:e3:bc:46:a9:3e:92:a7:96:56:50:
9f:88:ff:83:54:94:10:1d:0f:a6:4a:23:06:3a:d6:
c6:65:c8:43:c5:0a:df:e0:12:f2:4f:f9:76:dd:8c:
25:76:8a:6a:16:bc:42:63:0f:ed:64:68:11:a1:a1:
62:4d:c3:c8:38:11:b4:02:ab:2a:38:c9:c3:75:21:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:21:B4:F0:7F:1D:31:6D:E7:D8:CF:A0:DD:7A:EF:E6:4E:7C:E5
X509v3 Authority Key Identifier:
keyid:58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2d:e7:3e:5b:a2:36:8a:cb:10:8f:f0:c2:a4:86:47:b0:a1:
10:bf:3e:3b:12:8e:ff:5c:63:97:08:aa:99:c4:b0:f7:cf:06:
61:ab:11:ef:86:73:21:1f:c6:53:e7:e7:44:82:7e:72:03:11:
a1:d1:ba:b2:09:5e:d9:61:84:56:20:e0:b7:5e:9d:7e:72:d7:
d8:69:dc:b8:33:23:d2:a5:1a:40:50:75:44:b4:ff:a5:3f:36:
88:9f:ab:66:ee:90:3a:a2:cc:8a:56:d5:6a:0c:5d:77:17:9f:
10:90:09:c7:74:25:db:fd:8d:02:76:50:31:a6:d6:7d:b2:50:
07:b1:90:4f:7a:6c:3a:8e:ef:e0:60:a1:e2:17:ac:a9:07:d3:
d0:b3:16:f1:4b:c3:12:9b:61:84:0b:18:7b:af:b1:60:5d:db:
2b:44:00:d5:c9:a3:c6:96:3c:22:fe:9c:eb:92:3c:2e:db:7d:
0a:99:fe:0a:45:5f:0e:96:68:b0:02:af:da:31:f4:81:6a:21:
fd:38:a9:99:9d:00:e4:a4:fd:b0:44:42:e7:eb:52:05:53:2d:
b5:ce:f6:46:77:40:d8:f4:df:90:56:d4:8f:1d:84:cf:e9:94:
d1:b0:85:d8:f6:b9:08:a0:1d:f8:70:bc:2d:5a:8c:9c:00:c5:
d9:fb:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:41:12 2026 by rpki-client