
Error: rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
File: FJvWukypr0s2P6bjEnf8i8_TEW8.mft (raw, json)
Hash identifier: xgc629+Jttvargiz5OywhxBovyCkbmFZ1gO1jvU/95c=
Subject key identifier: 0A:98:E8:3B:44:6A:23:81:ED:1A:88:BD:B6:B3:69:82:9D:C3:5F:2E
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Certificate issuer: /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial: 0758
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
Manifest number: 0754
Signing time: Mon 21 Sep 2026 02:23:26 +0000
Manifest this update: Mon 21 Sep 2026 02:23:26 +0000
Manifest next update: Wed 23 Sep 2026 02:23:26 +0000
Files and hashes: 1: FJvWukypr0s2P6bjEnf8i8_TEW8.crl (hash: 0/2w3DEbwbQoKugkFkmj39hP6cs4ZB8LgDZanL3TrpA=)
2: 688E149A89D311F1853307DACE1D38B0.roa (hash: LKCFkhc2f3sYp0TME94TAWq27rIEBJpS5lpd1U+d6z8=)
3: 2D2BA23C89D311F1B0B823D8CE1D38B0.roa (hash: WHUX0r+IRyGxdKLqa0mlODIy/1WMY6+wx87ohyoAYsk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 02:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1880 (0x758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623C86AF, serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Validity
Not Before: Sep 21 02:23:26 2026 GMT
Not After : Sep 23 02:23:26 2026 GMT
Subject: CN=6ab0951e-5e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:7b:ca:5f:ce:0f:ec:56:61:13:35:fb:23:
56:9b:89:f2:a6:51:35:b7:2d:01:c7:83:84:4a:f5:
b8:ec:c6:85:5e:ab:bc:25:d7:a4:00:2a:ef:84:32:
89:8f:70:34:35:cb:b0:d1:a3:e2:d6:d6:e0:ab:af:
a0:d3:60:53:9e:6e:e0:4d:2e:cb:48:36:8b:82:9c:
e0:3f:d3:fd:d5:e6:1f:2f:69:fe:8c:11:15:b4:1d:
5b:0f:f7:b5:3f:2c:87:c2:58:76:81:03:8e:dc:ad:
12:ef:87:b2:d5:7e:a4:c6:e9:41:ad:2a:f5:1f:6e:
2b:97:fe:c0:5b:77:09:61:8a:b1:81:75:9a:ab:12:
d4:0e:6f:a2:39:8c:06:41:57:44:11:1f:ed:8e:38:
33:40:f9:86:e5:41:a8:82:39:53:3b:de:c5:8e:4e:
e2:5a:22:65:6b:3c:1f:34:bc:5a:ad:aa:27:85:e1:
4c:64:0b:ed:63:b0:5e:46:42:35:80:af:8a:d0:9e:
ef:19:de:41:74:b9:8c:47:e2:49:47:31:a1:6b:7b:
a7:88:cb:32:9b:2a:41:8e:20:14:7c:ce:f7:6b:ec:
14:64:fd:76:b1:2b:74:ea:5f:6b:f3:a6:2b:51:ac:
9b:c7:1d:0a:d3:c3:b5:0d:73:53:e4:f2:20:28:d7:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:98:E8:3B:44:6A:23:81:ED:1A:88:BD:B6:B3:69:82:9D:C3:5F:2E
X509v3 Authority Key Identifier:
keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a4:59:c9:7a:1c:62:24:2b:58:62:eb:0c:6e:9c:f3:27:30:
93:a7:f6:18:fb:dc:1e:20:1e:45:d0:56:82:a6:ce:8d:90:f7:
11:8d:2c:0c:68:fe:30:14:24:de:8f:95:0b:6a:07:e9:6c:d0:
95:01:1b:98:f3:ca:02:4e:e4:27:4d:60:8f:a9:cf:be:b0:a5:
1a:3f:47:bf:b4:8f:c8:fe:5d:f7:00:0c:10:d9:e1:2e:f6:ba:
70:81:49:f6:5e:2a:c8:f2:8f:6d:ff:68:41:17:2b:7b:1f:29:
81:fc:ff:91:c2:5b:80:e6:30:2b:97:ad:98:5a:5e:93:59:85:
5e:0d:17:e6:86:09:23:31:37:a3:21:d4:b6:33:a3:c7:38:63:
22:4d:49:3d:ea:0d:c6:0d:2c:b4:b6:cd:cc:60:12:01:2d:15:
e7:be:a8:d4:ab:1a:e2:3a:dc:ae:66:8f:1c:8e:5c:b0:5d:af:
5f:70:d6:3c:c8:f4:48:13:bf:05:05:32:50:b5:db:78:61:66:
62:57:93:e5:40:9f:aa:40:9c:78:71:67:c0:00:7b:17:b2:4a:
4d:96:d9:4b:54:eb:ff:f8:9b:9a:83:eb:da:e1:40:72:7d:ec:
3b:c8:83:f0:66:1f:fd:df:7c:e1:a3:05:55:fd:e0:b0:6f:c3:
c7:d8:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:07:24 2026 by rpki-client