
Error: rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File: KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier: TbaHz26IRtIIzek5j3aUR/hLu47vxH6SpN9wIRcL7vE=
Subject key identifier: E2:78:EC:BD:B2:E3:10:CD:2D:A3:7D:6F:36:F5:C2:6B:72:78:C0:B6
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial: 1030
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number: 1022
Signing time: Fri 25 Sep 2026 00:55:54 +0000
Manifest this update: Fri 25 Sep 2026 00:55:53 +0000
Manifest next update: Sun 27 Sep 2026 00:55:53 +0000
Files and hashes: 1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: i0lHlwVIBIYiGGOUBuYOSXCW9WfeG0tjk6900E4m6fc=)
2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
4: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
5: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
6: CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa (hash: otkoUIeVC07ZHogmrq0P3r+9c9Hq45HdG/7TPnP6EBo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Validity
Not Before: Sep 25 00:55:53 2026 GMT
Not After : Sep 27 00:55:53 2026 GMT
Subject: CN=6ab5c69a-4899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:bb:4e:05:3f:33:4d:2d:8e:34:f5:86:23:
31:dc:f0:19:6f:64:d8:c3:14:74:69:e1:44:ca:17:
52:6e:7c:56:4f:f4:78:3c:39:3b:17:00:bb:cc:c8:
35:bf:57:26:41:7f:03:6f:b4:b4:35:c3:47:01:15:
70:c4:02:d8:59:13:dc:ad:5f:4b:f8:0a:7e:c1:80:
71:1f:c2:11:21:22:70:5b:7d:74:78:be:04:76:c7:
91:41:c7:f4:1e:94:c4:cd:24:81:c8:34:36:63:8d:
50:d4:e0:41:2d:1e:86:0f:cb:32:01:48:8e:73:a6:
da:57:15:09:1a:d1:fc:66:46:63:db:bc:d3:5b:09:
d6:36:aa:72:b8:98:9b:5d:47:48:33:bd:2d:cb:1e:
24:c1:15:07:ab:6a:0d:65:55:cd:06:76:44:f5:05:
9b:a5:e2:e8:37:8c:e2:34:e8:4e:3b:6b:e9:17:09:
18:ee:80:17:96:3c:4c:bd:fd:db:b5:f7:1f:34:00:
c2:91:9f:67:36:ef:a1:d4:28:45:0a:f7:e1:05:12:
24:dc:7b:ec:12:55:1e:c2:16:57:51:18:dc:24:18:
9b:a5:c8:47:c8:d2:1d:b3:c1:5a:57:5b:ab:8c:1b:
01:68:a2:82:a6:43:3e:82:5a:fa:92:9e:ba:cd:b2:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:EC:BD:B2:E3:10:CD:2D:A3:7D:6F:36:F5:C2:6B:72:78:C0:B6
X509v3 Authority Key Identifier:
keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:f0:16:66:72:cf:8b:9b:98:6f:18:de:ee:2c:c6:53:d2:
1c:ef:69:7d:1f:8f:0b:85:09:e2:5b:f4:4c:cf:e9:3e:69:be:
e8:50:4a:00:c6:6c:68:b1:60:e5:d0:fa:80:c1:9b:86:d7:ae:
f5:0d:22:56:8b:ef:31:40:de:51:bf:5f:7b:45:51:1c:fa:80:
5e:d8:94:52:21:fa:12:70:d8:58:4b:96:9e:d8:77:71:43:e7:
45:6a:b0:87:e4:a1:e8:6c:b8:5e:8a:56:c1:1d:27:1b:81:93:
a7:3e:30:1b:75:25:3b:72:91:99:34:b5:1b:e6:a1:03:da:02:
0d:ee:14:cb:a6:b6:02:5d:af:10:32:4d:20:60:c2:d5:4a:d6:
b8:a7:be:a3:4f:81:f5:3b:f2:de:3d:91:d3:d9:94:83:85:a8:
19:ff:10:a5:20:20:9e:e8:54:84:ef:8c:72:aa:64:e9:0e:56:
73:8e:4c:8b:60:da:d8:8e:87:4a:57:67:68:19:1b:91:4a:99:
f9:ef:72:97:6a:d5:01:e9:e2:cc:2d:fe:fe:b0:fa:36:b3:70:
b6:34:4b:ce:f4:77:cb:8f:16:d0:52:4a:4d:39:7e:58:19:af:
b3:29:d2:ca:f1:1f:4e:1b:57:8a:49:fc:a4:88:cd:ca:d5:34:
91:91:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:08:29 2026 by rpki-client