
Error: rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
File: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft (raw, json)
Hash identifier: q0nRtzi9HCZkj1y5s1beZNc84KbKInbpbonDjQTtBcA=
Subject key identifier: 58:BD:02:76:BC:75:FC:89:42:41:B7:63:1E:D0:4D:43:73:51:82:58
Authority key identifier: 55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
Certificate issuer: /CN=F3617560AF/serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Certificate serial: 0648
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
Manifest number: 0642
Signing time: Tue 22 Sep 2026 02:48:18 +0000
Manifest this update: Tue 22 Sep 2026 02:48:17 +0000
Manifest next update: Thu 24 Sep 2026 02:48:17 +0000
Files and hashes: 1: VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl (hash: x0RPcbX2LG8odjnwgwV8vaVpu2WQR+GtRknLIwuoDws=)
2: A621E03860AD11F184B819D2CE1D38B0.roa (hash: Jmq4unja5DzvfSBmhbdnQaMaFOiJ/5epzprsOMlWzMo=)
3: 0F017D1260AD11F1B5A1E2CDCE1D38B0.roa (hash: eS18DiySWyYvUU6o4IL9+Uz5q6U7DX44S61JdbmHeq0=)
4: 8CD4BF9E60AB11F1B29B57C5CE1D38B0.roa (hash: eaUeu3KkKpNcCw9HrgYvB/pha9SYhwNNA6TnXg77ADw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617560AF, serialNumber=559608F1905C17B2C1EB888134CC383C8FD4EEF4
Validity
Not Before: Sep 22 02:48:17 2026 GMT
Not After : Sep 24 02:48:17 2026 GMT
Subject: CN=6ab1ec72-0a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:6c:12:31:a2:1c:44:35:d9:b8:67:d4:2c:
6e:02:1c:f8:23:6d:44:3c:57:98:cc:ef:0b:d1:63:
ad:1e:77:e4:dc:41:0a:7f:6b:a0:45:2a:8c:ea:db:
d6:86:ff:a1:47:eb:cd:44:3f:29:8e:64:71:a0:97:
11:1e:3c:8c:e6:0b:aa:a5:24:32:10:89:46:91:5f:
79:4b:55:a9:94:d5:4e:54:c4:b0:5a:ca:18:e7:04:
e4:06:63:c3:31:a5:8c:85:96:d6:0e:b0:5d:46:9f:
ac:40:08:78:68:b0:d0:91:cd:ee:87:4a:7a:88:0e:
de:4e:26:f7:4c:92:7f:15:70:1e:30:c4:98:c9:c2:
27:c9:30:b9:5b:80:29:0d:66:ad:9e:d9:3b:3e:36:
fb:51:92:0e:d9:58:8d:56:a7:a5:2f:7a:c6:4c:00:
13:cc:61:56:e5:4f:50:a1:16:b9:d1:05:bc:e0:2a:
bc:84:5c:73:c1:53:3c:31:fa:85:88:43:67:11:5e:
95:a5:18:35:0b:2f:2c:29:47:e4:a1:8c:1a:5f:06:
79:be:54:00:91:01:36:24:a0:72:92:11:13:ab:1b:
3a:22:9b:9f:8e:e3:71:6c:54:9c:99:09:fa:22:83:
d8:fd:52:6b:05:a7:f2:98:87:e0:30:f1:71:57:92:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:02:76:BC:75:FC:89:42:41:B7:63:1E:D0:4D:43:73:51:82:58
X509v3 Authority Key Identifier:
keyid:55:96:08:F1:90:5C:17:B2:C1:EB:88:81:34:CC:38:3C:8F:D4:EE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/30C4542CF25911EC90D029C2F1222468/VZYI8ZBcF7LB64iBNMw4PI_U7vQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:ae:34:3f:5f:44:eb:87:59:68:11:e9:36:f7:d7:49:ec:
d4:8d:96:ad:66:23:28:11:0a:a1:d4:d5:ce:6b:ca:1f:21:48:
ab:6b:28:10:52:ea:05:c7:e2:52:61:ba:0c:70:d7:85:44:bb:
a5:af:9c:65:b3:69:5a:a4:0c:28:ec:8d:1f:cf:d6:0c:6d:f5:
49:3e:a0:3b:e3:74:87:cc:3a:2f:98:9d:df:da:01:74:4c:b2:
7a:d0:98:76:5c:3a:31:de:8c:e6:83:d5:28:5f:37:52:bf:26:
2e:f8:1c:fc:9f:dc:08:d1:d9:7e:07:02:c1:b6:37:de:c1:d1:
30:1d:c8:31:b3:8c:04:dc:df:62:e5:ae:44:18:fd:a1:c1:71:
0f:01:b4:92:e8:1a:e3:d6:65:25:92:a9:55:9b:4d:a3:24:f2:
88:f2:1b:d7:59:96:d5:9a:94:a5:da:1a:02:95:5e:36:15:fb:
b7:d2:5f:a1:96:07:a4:df:80:86:90:a8:d9:2c:4f:16:57:11:
71:b1:bc:72:e7:47:14:9a:c0:e3:8a:f8:be:53:3b:8b:64:24:
36:e3:6e:ad:e9:79:07:23:0d:7f:f3:93:e2:1a:3d:1b:fc:df:
e2:21:d2:c7:c6:17:00:ba:be:6c:b0:1b:07:4c:33:61:65:8e:
65:53:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:44 2026 by rpki-client