
Error: rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File: UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier: 7Ll6Oaa++DwEIA00lF8gQPAGqo+MtUgj3W/nDf3Utss=
Subject key identifier: 2F:69:DB:EB:62:3A:2B:81:60:7D:46:9D:BC:9A:FC:45:42:9A:57:5F
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer: /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial: 0565
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number: 0561
Signing time: Mon 21 Sep 2026 03:10:58 +0000
Manifest this update: Mon 21 Sep 2026 03:10:57 +0000
Manifest next update: Wed 23 Sep 2026 03:10:57 +0000
Files and hashes: 1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: IJWQGui44gFj8m/ke1FVJhaTr2Ax/IPaTRjrOnW882s=)
2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 03:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Validity
Not Before: Sep 21 03:10:57 2026 GMT
Not After : Sep 23 03:10:57 2026 GMT
Subject: CN=6ab0a042-be11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:19:46:74:99:e2:f0:81:e9:0b:eb:86:24:
11:11:7f:fc:89:3d:2c:db:3a:66:7b:15:bd:9e:19:
65:74:87:8a:08:62:aa:47:1b:17:ae:dc:36:15:32:
57:cf:b4:aa:3c:e0:e6:3c:d7:af:08:54:38:c0:90:
e6:85:7c:2d:93:6e:24:c4:f2:05:d1:ad:8c:4a:12:
1e:32:ca:91:7d:28:ff:b3:d8:e7:33:6e:e6:f4:ca:
00:2c:e1:65:f4:b7:ea:13:ba:d6:98:17:07:f4:c9:
36:ea:4f:58:17:e2:b8:5b:ee:f9:89:3e:2e:92:fc:
97:86:5e:f0:71:e7:e0:e6:62:be:f8:49:0c:1b:61:
94:c9:d8:ce:ca:c4:6d:48:a9:b8:17:3c:7d:17:5c:
5c:3a:f5:57:85:60:8e:dc:09:4f:d6:36:e0:68:5b:
2a:4e:14:d9:ec:78:52:1a:29:32:db:e5:71:2f:61:
1e:51:0d:0e:53:4c:a1:97:ed:85:4a:8a:db:f7:08:
dd:8f:9a:57:9a:3d:f4:6b:75:a8:42:5a:f1:81:9b:
91:13:d0:c4:dc:07:7a:09:86:f5:ca:29:c9:c0:b0:
82:f1:17:31:ff:51:72:cc:62:f8:a3:76:6e:7e:51:
22:51:92:2b:53:0c:04:f8:88:89:f4:35:20:99:f6:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:DB:EB:62:3A:2B:81:60:7D:46:9D:BC:9A:FC:45:42:9A:57:5F
X509v3 Authority Key Identifier:
keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:cd:e1:c4:41:19:84:2f:34:b5:96:fe:52:ce:aa:d9:29:
8f:05:37:c1:e1:44:f5:3d:89:4e:e4:05:8b:2f:a2:a9:ea:56:
df:27:17:ac:e2:5a:a8:c0:af:8f:cb:32:e8:22:7d:f5:5f:e6:
eb:6f:37:37:85:9c:04:38:c0:9c:dc:47:db:61:ed:3f:31:42:
36:cf:15:4b:2d:8d:61:12:a2:d3:a4:dc:b0:67:21:12:3d:67:
03:9a:52:8f:13:50:7c:23:82:2d:a3:74:b5:1f:63:ec:7f:b8:
ed:b1:e3:75:73:ed:7b:ec:5b:dc:f8:26:15:44:f3:bc:fe:62:
55:6e:b5:08:14:cc:e7:94:04:0a:9b:57:3a:b6:a1:09:54:72:
e3:bb:95:0a:bf:c3:43:b1:05:db:da:5b:84:36:d8:2e:ec:06:
da:2a:28:ca:65:fe:d5:b3:2d:c2:63:7f:e3:bf:39:b6:df:ab:
4a:05:45:18:e4:b2:cc:15:f6:cb:ec:d9:2e:df:41:b7:47:5c:
34:23:90:ff:04:fb:d6:31:19:31:3f:c0:6a:39:f2:2f:76:4e:
3e:66:14:01:76:fe:f1:90:c7:f4:27:7b:14:71:9a:f2:6d:3a:
cb:de:3b:84:f8:38:22:56:50:8b:73:52:d6:cc:13:8b:f1:ce:
19:ca:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:18:36 2026 by rpki-client