
Error: rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
File: J3k9IV8IgF240LqJLTNvKat7sFs.mft (raw, json)
Hash identifier: sI3CdRBRCWvlOSXqW8mnVFMPeQ13VtWk2EQO2ewiSV8=
Subject key identifier: D8:82:06:AF:9D:1A:31:88:47:46:CD:3B:A1:68:BB:F2:6D:1C:C9:78
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 0629
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
Manifest number: 0615
Signing time: Tue 22 Sep 2026 02:56:11 +0000
Manifest this update: Tue 22 Sep 2026 02:56:10 +0000
Manifest next update: Thu 24 Sep 2026 02:56:10 +0000
Files and hashes: 1: J3k9IV8IgF240LqJLTNvKat7sFs.crl (hash: wviWSugvClUNsix+fXnA5V3VEEs0xNOw8T4uMCIsC+k=)
2: DD851EDE8AC711F1ADF3F9AECE1D38B0.roa (hash: iCDYgU2+SKpeQzQaU+mrTaji/0hiNcDZ+TL2MuxqLEU=)
3: C64E95D28AC811F184603AB5CE1D38B0.roa (hash: 7YEuA2VOavsPvBxjsk4vEJsovfUYi9Dd9ZYLz3aRjrQ=)
4: E87CF5D88AC111F18BD6DA09CF1D38B0.roa (hash: wAfY8kLqZnXXJoKn8K0yeemJEp7SpmtL2+EGPJfF7W4=)
5: 1642FE7A8AC911F1A47447B5CE1D38B0.roa (hash: FNM19ZjkMFO84jFscTN4Bb3t+zjkVvUyMhpR+gcZsmg=)
6: CC15C4C08AC011F19E9BC601CF1D38B0.roa (hash: CLEdi3dH6VLoAeQY7RC1HiDFnjkuwPHPEYCtOB/eMtU=)
7: 7E01BE968AC111F18CFBDD05CF1D38B0.roa (hash: wKdAINsDPIWS1ZmU8I02GrZCpDAtG4wE8mc2xedhZKs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 02:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Sep 22 02:56:10 2026 GMT
Not After : Sep 24 02:56:10 2026 GMT
Subject: CN=6ab1ee4a-6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:db:0a:b1:5d:96:c8:09:ac:4e:25:3b:52:
33:0e:5f:1f:ac:d8:1b:68:d0:58:bb:5c:8b:ac:3b:
d9:6c:44:bc:b9:9c:cd:d0:32:fc:46:94:3c:70:c7:
6a:b3:0e:a2:28:a3:82:a9:b1:6b:ca:9f:47:b1:02:
1d:05:3a:78:27:8f:6e:cd:24:98:e8:51:c2:2c:96:
89:2f:75:56:25:c3:69:d2:21:f1:00:35:f4:f8:22:
2f:07:83:80:92:a2:cd:8b:d9:19:fb:f8:74:b6:9f:
44:e1:96:00:f1:0b:41:3c:d8:a6:d1:94:5c:e8:73:
ad:a9:b8:d2:ed:34:68:b2:a7:80:9f:93:7e:5a:af:
dd:38:b7:7a:68:7e:5c:df:42:83:44:94:b9:ab:bc:
17:f4:b9:a3:5c:94:7f:b8:17:45:c2:d8:9e:ad:c2:
4f:7d:3d:cf:92:94:c5:11:f6:a2:b1:0a:b2:f9:d5:
4f:80:d6:fc:db:02:db:80:e9:f3:3b:68:9f:46:68:
85:ab:59:b7:9b:a5:fa:26:49:b6:1e:e3:c3:a0:46:
65:f0:b5:f2:df:90:69:3d:cf:79:51:15:3b:5f:6b:
6e:67:41:79:49:b0:f2:93:bd:3d:d4:3f:ad:25:55:
4e:83:4e:8c:3d:d9:cd:49:49:c7:d1:fc:67:b7:4c:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:06:AF:9D:1A:31:88:47:46:CD:3B:A1:68:BB:F2:6D:1C:C9:78
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:59:32:fa:fd:e8:f9:60:6f:a0:67:16:fb:f3:1d:6d:67:
9a:b9:8f:ac:ac:00:ca:55:c5:97:46:21:cd:96:fd:db:c6:d1:
f3:bc:ae:58:dc:e6:69:31:7b:08:b8:19:85:ff:ad:69:be:55:
4d:89:f5:f6:9e:bc:98:08:e2:f2:6d:07:6f:21:9e:72:28:8e:
e3:6b:b2:28:1a:ce:06:38:ef:1d:8a:cd:3b:a9:2b:0b:a8:0a:
a6:c5:75:82:bb:02:8f:10:3d:78:b7:9a:d1:85:b9:a9:0f:7e:
4a:37:bf:3c:8b:79:51:d2:d6:87:99:e0:b1:9a:8d:6a:d2:9f:
49:39:71:fe:15:02:9b:9a:a6:18:eb:53:38:17:46:63:d7:dc:
6e:0a:d6:99:a2:d8:45:43:5e:48:ac:33:59:91:d5:f8:40:9d:
41:ee:e6:fc:07:71:ea:26:1d:8c:e3:14:5a:a2:0d:42:2e:05:
68:80:86:12:6b:e8:20:73:28:89:6a:92:ef:ec:cb:38:e3:35:
89:12:50:74:c3:4d:3b:b5:8a:0e:04:c0:a4:bf:ea:99:34:88:
c2:da:fa:91:e4:bb:56:98:cd:92:e0:2d:f0:c0:0f:ed:8e:75:
47:1a:8d:55:37:ca:37:da:c6:8a:ae:65:db:57:bc:dd:af:e9:
b7:7f:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:14:24 2026 by rpki-client