
Error: rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: Pjoi/bD93VXh3hxAa32na4r/aaA7hojAWgCeQLgOHEY=
Subject key identifier: 14:3F:9E:C5:41:CF:99:78:73:79:FF:79:7C:AD:70:EB:D8:64:AB:AF
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 1049
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 1037
Signing time: Fri 09 Oct 2026 00:57:10 +0000
Manifest this update: Fri 09 Oct 2026 00:57:09 +0000
Manifest next update: Sun 11 Oct 2026 00:57:09 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: CNY7/hHCgApMUSqKaXXMyY7in78hnHp/MLpMHAvWonE=)
2: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
3: 362D26308F0A11F1B4045FB8CE1D38B0.roa (hash: kD5E6bSsUZ2DDG8n9orOIkkFFuM3fBWfcQRJBlF8WJg=)
4: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
5: 3469E5FA7B7211F1B243C300CF1D38B0.roa (hash: hX8O0ZYKk9oF6OhSZ3d33KQkrAldnrJfSsy0yCg08EU=)
6: FC67BBDA7B6E11F1A29088ECCE1D38B0.roa (hash: VuyY8Cp5a1XrJqlaUJnSJWCJHjs6SKQq/6s6QpmiIL8=)
7: 4288E4568F0911F1AC9254B1CE1D38B0.roa (hash: GE12R4RqUVM3naTuWSQa6p1HS7+tCOZPLqrhgpTvbNM=)
8: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
9: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
10: 5CB73F807B6D11F1B9662CE4CE1D38B0.roa (hash: N/jRmpdjfA3JkvkzJNhjw9Td49wSKepzVaBgfp3FjXg=)
11: 5781D1FE7B6F11F1A27D61F0CE1D38B0.roa (hash: qY9gTFyxLeKKP3wsEKrrnFvi3gpHzdRPEYsotda9ylk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Oct 2026 00:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Oct 9 00:57:09 2026 GMT
Not After : Oct 11 00:57:09 2026 GMT
Subject: CN=6ac83be6-1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:8b:0c:d8:7a:09:ba:66:fc:3e:55:1f:4c:
31:81:c8:ec:ab:83:17:f5:2b:83:d1:99:13:ec:b5:
04:11:00:62:16:2a:8f:06:7c:a5:e1:60:6b:23:5b:
16:17:64:9c:aa:35:d2:ef:d0:8a:63:4c:e3:79:fe:
cb:ee:fb:81:75:54:d9:16:4b:f6:a7:22:c1:cd:51:
ac:3c:d9:54:da:be:e8:21:82:9a:5a:32:a0:da:64:
49:dd:c2:9f:0d:e7:ef:fa:58:ab:8a:16:51:b9:51:
09:b6:db:2d:b1:82:08:3b:33:bd:2b:4a:3c:5e:16:
16:a8:7a:eb:65:aa:69:b7:5c:9d:85:8d:b1:70:41:
b4:f8:b4:92:5c:6f:be:88:88:a5:11:bd:ea:fd:93:
9d:fe:fd:5b:b5:03:47:03:eb:4a:43:a2:f7:fa:9f:
6e:9a:f6:ad:78:5b:b4:6e:40:b3:1b:26:4c:a8:de:
45:24:27:40:5f:d5:25:4e:ed:52:20:00:b4:7d:31:
6c:a1:ff:47:eb:1c:ef:cc:51:32:32:46:21:98:61:
ca:1a:43:66:55:4f:cc:cc:a3:43:e0:16:89:69:04:
81:8e:a0:ed:d4:73:ee:37:17:51:67:e3:1f:61:81:
34:6b:d6:5f:7b:d0:29:21:04:b3:42:f2:b0:db:55:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:9E:C5:41:CF:99:78:73:79:FF:79:7C:AD:70:EB:D8:64:AB:AF
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d1:c0:bb:d0:dc:c0:cf:f0:81:ce:3a:cb:07:9b:f5:dc:05:
8f:39:0e:40:df:52:d1:cc:6f:a5:9b:e8:fc:62:cb:28:ee:8f:
5a:aa:f7:73:2a:d4:b8:28:c6:2e:6e:8b:3e:9e:f9:94:c7:6c:
8c:ef:95:b1:76:48:db:4d:2e:f3:34:75:4c:c6:37:7a:8b:15:
fe:e3:32:18:e5:d7:bc:35:f8:45:57:b9:a6:0c:4b:12:d8:32:
f2:e9:28:f9:22:0c:85:50:0f:ea:5f:62:b9:40:fd:24:52:06:
a1:49:74:64:52:14:f0:6a:2c:39:8d:4f:2a:3d:f1:8c:f7:a5:
d5:05:a6:68:56:ab:a7:f7:63:8d:1b:b3:dc:6f:8b:c8:b6:d9:
e8:12:bd:ac:82:95:d8:be:3d:8d:af:ca:9c:48:b1:2e:32:ac:
10:11:32:25:41:ef:17:a2:f0:66:16:e2:a3:88:c8:cf:40:93:
17:e9:c4:f4:69:28:e9:d6:fb:47:c4:b2:2a:fc:88:e7:8f:42:
56:6f:3f:ff:67:1b:42:7c:83:2d:b8:9f:8d:fa:86:ff:8f:07:
e9:75:37:8c:6c:94:bc:c7:fc:7a:55:65:22:dd:ac:5b:ee:9c:
04:a8:59:66:99:4d:16:8c:58:a5:6f:07:12:f9:03:f4:82:39:
18:cc:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:17 2026 by rpki-client