
Error: rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
File: HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json)
Hash identifier: imqk/cyODMVPmlSKeelcJIxeS+TXrJsAW+WDKyn2KTs=
Subject key identifier: EF:EB:D9:EB:4C:C0:D1:0F:4F:CF:0A:2A:00:B2:44:4B:BC:28:4C:8B
Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
Certificate issuer: /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Certificate serial: 0354
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
Manifest number: 0351
Signing time: Mon 21 Sep 2026 04:14:41 +0000
Manifest this update: Mon 21 Sep 2026 04:14:40 +0000
Manifest next update: Wed 23 Sep 2026 04:14:40 +0000
Files and hashes: 1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: a87MeT9KyrvNLcNszlvIgK/3z5+Q2eFPo14lJ5kIGbs=)
2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=)
3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852 (0x354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Validity
Not Before: Sep 21 04:14:40 2026 GMT
Not After : Sep 23 04:14:40 2026 GMT
Subject: CN=6ab0af31-aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:01:ad:51:9a:f2:a0:ec:74:82:b1:92:28:
e2:3b:9e:d3:94:d8:78:f8:3f:a7:c9:7a:d7:18:2f:
06:34:70:3e:29:d9:69:61:3f:fc:1c:e1:b0:55:cb:
fa:d0:c1:7a:75:a9:00:93:c7:06:d6:5e:b1:96:4f:
f2:83:8d:61:97:9d:f7:16:8c:fe:63:ea:1c:0a:1a:
62:c1:68:eb:ce:cc:46:90:a6:25:7f:34:54:d5:53:
4e:f7:73:61:e3:2c:2b:3f:fb:46:fc:3f:bb:54:a5:
30:1a:30:38:47:f6:22:9c:b2:a3:84:e1:fd:d7:33:
9f:26:8d:34:f4:96:75:20:a9:67:18:6a:b7:b5:ba:
04:27:6c:90:44:94:f7:ae:0e:0e:ad:45:e9:56:0a:
f9:90:18:2c:1c:a3:bb:c8:61:a2:b9:ca:23:f7:82:
db:c5:1f:4f:9b:87:cc:33:d2:71:b8:53:8a:25:34:
67:12:23:c4:a1:6d:9d:61:18:cd:65:bb:ee:9f:73:
7b:75:4c:d9:58:28:33:90:d1:75:c6:c8:7b:39:ca:
85:0f:76:9e:c1:07:69:cf:e6:36:b8:96:37:d0:9e:
5f:c8:05:14:4c:b0:2f:e4:f1:57:a6:4f:95:23:de:
41:28:9d:62:2f:56:42:e2:a3:a1:3c:26:0d:b5:8c:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:D9:EB:4C:C0:D1:0F:4F:CF:0A:2A:00:B2:44:4B:BC:28:4C:8B
X509v3 Authority Key Identifier:
keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:01:6f:08:45:00:28:5f:6d:c4:5e:5b:44:de:4d:96:01:af:
3c:a5:67:04:82:8b:5c:c9:27:20:33:1b:50:c9:94:1d:29:00:
c0:a4:47:77:d7:f8:0d:c0:a0:21:e3:cd:11:e6:f4:8a:46:a4:
d7:1a:0c:94:c8:b2:c4:1f:8e:aa:20:7b:a5:54:1b:7c:1b:1b:
80:f4:d3:d6:21:98:b1:11:ad:53:76:bb:f4:ec:6e:3b:8c:8c:
dc:bf:b1:36:ce:49:c8:98:ca:e8:1c:e8:ef:fd:07:d5:0d:0b:
4e:a2:13:b3:17:0d:3c:05:67:23:7a:d5:6f:9e:58:7f:ea:17:
08:e3:19:57:bb:92:76:e3:21:62:db:9b:d2:3a:f9:b8:45:50:
89:27:68:37:11:76:8a:fe:54:be:e1:24:a6:85:aa:95:d4:43:
42:1b:a2:14:14:79:55:3a:16:1d:4d:84:13:5d:79:9d:48:f8:
af:11:f4:a8:d3:4f:63:6c:96:a2:4c:95:20:e3:76:bc:9e:93:
c2:8f:07:b0:3b:6d:e0:8d:7e:62:c0:b7:e1:36:2c:74:87:84:
e5:87:f8:82:ce:b6:8d:6f:ea:af:5e:2d:74:28:e4:82:14:7a:
1d:62:90:0a:f8:83:3f:80:2c:fc:7d:17:e3:d4:2e:d2:00:69:
5b:50:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:22 2026 by rpki-client