
Error: rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
File: WIdwDF8kkPVYQ4L55-dSatZVSLM.mft (raw, json)
Hash identifier: AM++Ejaw/l16QCciGQmikDbgYpXEyd9nQNB4j2l7KEQ=
Subject key identifier: DE:17:D7:AB:CC:44:3B:38:66:B4:BF:CD:07:5F:09:BA:A5:E9:0D:AF
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Certificate issuer: /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial: 07DC
Authority info access: rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
Manifest number: 07D6
Signing time: Sat 26 Sep 2026 02:10:17 +0000
Manifest this update: Sat 26 Sep 2026 02:10:16 +0000
Manifest next update: Mon 28 Sep 2026 02:10:16 +0000
Files and hashes: 1: WIdwDF8kkPVYQ4L55-dSatZVSLM.crl (hash: eLd3o8GqVGCnRMN2uRsshxCP5BjhZc/9F7yZvZnP2Z4=)
2: 25BF7DCC7B7111F1A3CD0DF9CE1D38B0.roa (hash: HQj0ezVFNm0IyaCMur10comY5AWBNF/4kn1xaLyn1Ak=)
3: 89E136148F0911F1BE9146B4CE1D38B0.roa (hash: 0Bibn/zgW9nQetOuDrSsmtgMFzcRPNQvalv4kLZon/A=)
4: AF286D2C7B7011F18DD180F8CE1D38B0.roa (hash: t1UaMVD7lHB3+6q7/cetlK1vXbXkKAdnQU2pB0WVI4g=)
5: 459695BAD4DF11EB8D761947F8AEA228.roa (hash: V+fApY3tgq+qpHqlmWamZgFjrncOkO2wIFJyIOrmaiA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Validity
Not Before: Sep 26 02:10:16 2026 GMT
Not After : Sep 28 02:10:16 2026 GMT
Subject: CN=6ab72989-5d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:46:f2:43:e4:10:52:b2:31:fe:f8:68:1e:
86:11:4d:65:9e:95:50:1d:86:52:66:23:ce:57:d0:
e7:a4:e2:5c:81:d7:a3:c6:20:c8:ef:78:02:b4:39:
d2:5a:dc:07:6b:38:65:2c:7b:87:9e:58:af:fa:5c:
60:2f:3d:d4:99:05:a7:24:c1:62:4b:19:7a:35:b9:
2f:fe:ad:b5:9a:6f:5f:1a:1b:63:3a:c4:f0:83:8b:
25:99:5d:bf:0a:3a:2e:f0:d2:88:05:72:78:c8:a1:
a6:8b:dd:7c:1e:52:69:e8:47:3b:87:48:ad:65:62:
aa:76:d9:c1:cb:da:bb:d1:7d:47:89:91:52:9c:71:
cb:76:3b:13:d7:ed:07:1a:ce:8d:a9:6f:af:5a:c3:
10:0d:35:40:a3:e7:7e:7f:84:bf:16:22:20:d9:b7:
60:c1:0d:1e:a7:3f:1a:ea:a3:61:98:a1:2b:79:72:
f0:fb:c1:87:ab:22:d1:17:27:21:53:35:7e:a4:22:
f1:8d:c9:6f:42:85:2b:fc:cd:bc:c1:ab:fc:b3:95:
df:d4:db:e3:3f:35:29:d8:43:c4:34:72:15:41:05:
78:fc:4e:dc:7e:fc:e4:6c:60:e3:af:77:e3:c5:b5:
98:d3:8c:54:c9:72:03:c4:93:d7:45:7f:c5:7d:78:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:D7:AB:CC:44:3B:38:66:B4:BF:CD:07:5F:09:BA:A5:E9:0D:AF
X509v3 Authority Key Identifier:
keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:b2:29:a2:7a:a0:40:79:c3:3f:26:61:6e:3e:22:c9:59:
03:65:13:bf:4b:26:5b:83:32:8d:f7:1a:47:e6:30:24:eb:18:
71:ae:3b:4f:be:1a:a4:6b:06:b6:40:10:40:83:99:31:91:5b:
09:5e:b6:b6:f2:58:e7:db:a6:dd:48:55:94:15:c4:27:3d:73:
d6:7d:09:a1:5e:25:35:1b:4c:3b:e5:1a:80:c9:cd:88:50:37:
09:d7:8c:dc:a3:97:95:d8:37:60:05:7e:c2:0c:7d:f8:e5:8c:
55:95:dd:57:c2:f7:12:c3:aa:4b:4b:26:5c:6b:22:b9:4b:b5:
42:10:11:d2:50:bc:a1:e1:70:04:54:eb:5a:e6:31:03:b6:06:
6b:89:56:f7:e9:18:a6:dc:01:b9:37:d1:3f:d0:ed:f3:5c:4e:
93:35:89:64:ae:99:4a:6f:31:79:0b:35:00:7b:73:34:0e:fe:
10:e9:80:8f:04:7d:dc:31:92:3a:3f:48:3e:b7:01:f1:a7:d3:
b0:56:a6:7b:ad:18:16:fe:4a:4e:1a:59:17:53:ba:e4:ab:57:
27:3c:0a:e7:17:75:11:9f:bd:b5:2e:c5:fa:e6:12:71:35:98:
f9:e6:0e:db:27:17:47:bd:78:27:c1:83:f3:af:2c:03:55:e2:
52:a8:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:48:38 2026 by rpki-client