
Error: rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File: JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier: l7cMfqP6v41AHMB6ZCCV0cOXhjGcaurMByFrmqEfZS4=
Subject key identifier: 10:98:D0:48:92:11:45:7F:E7:7D:1B:39:6A:0D:E0:E2:03:0F:B3:75
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer: /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial: 0471
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number: 046D
Signing time: Sat 26 Sep 2026 03:43:25 +0000
Manifest this update: Sat 26 Sep 2026 03:43:24 +0000
Manifest next update: Mon 28 Sep 2026 03:43:24 +0000
Files and hashes: 1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: ILQZOQ+fb+XeClzVd3+8fB3wZ80f6mV0helZ5V2L27k=)
2: 8C921044A2D311F199F6CBE6CE1D38B0.roa (hash: a1ZpcJoileo1kM0SHiSTxkNxD6opB7KJOPlKd0TFWfI=)
3: DA29D4AEA2D311F1963C40E7CE1D38B0.roa (hash: q/eQMYLAB294LmBtj1Njmt9hyLqIsl8Vf+JyfmlxZgU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Validity
Not Before: Sep 26 03:43:24 2026 GMT
Not After : Sep 28 03:43:24 2026 GMT
Subject: CN=6ab73f5d-73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:71:f0:e2:17:e0:54:8a:bd:e3:a9:02:9f:
ff:a5:32:d8:02:f7:85:4c:ee:c4:68:22:eb:37:6b:
b2:69:f2:ad:90:8c:a4:9e:26:41:d8:77:8b:39:e5:
14:75:d2:33:3d:ce:87:39:28:fa:71:61:94:b4:7a:
b2:b2:1d:14:02:52:13:f0:51:8c:53:bb:6f:71:9d:
7a:bd:6b:9b:31:49:1e:5e:39:06:38:f4:09:d0:44:
65:3c:22:fa:c3:26:a3:f3:c3:ca:dd:59:10:ec:e2:
6c:eb:74:49:5d:4f:39:41:81:a0:5b:e1:26:2c:12:
ad:60:ac:69:48:54:74:e6:64:8e:c4:fd:91:d5:34:
d7:b7:bb:40:1d:cb:d1:b6:fa:2e:57:f9:16:d6:a1:
20:26:b1:ca:51:83:f0:2c:84:56:37:12:b8:20:1f:
3d:b6:66:05:97:82:b0:54:7f:89:00:84:3a:3f:4b:
87:70:2c:51:bf:08:0e:66:5c:db:df:f0:b6:84:66:
56:74:47:1e:76:55:10:9e:9a:1b:9f:b8:80:c1:df:
7d:fb:5c:aa:04:82:2a:50:cc:98:74:3d:7a:e2:84:
49:b0:8d:e0:bf:47:06:b4:3c:b3:67:30:24:52:42:
1e:0f:9d:d1:7e:62:e3:27:a5:22:18:d7:72:43:25:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:D0:48:92:11:45:7F:E7:7D:1B:39:6A:0D:E0:E2:03:0F:B3:75
X509v3 Authority Key Identifier:
keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:04:a3:f9:45:22:fa:71:35:dc:1e:9c:fd:f1:b3:a8:e3:
2e:3f:d4:0e:91:95:36:55:02:78:44:75:47:68:06:98:f9:f4:
d7:6d:fa:cb:c1:9e:89:5a:67:3f:88:c0:af:c4:77:54:80:0e:
28:08:32:2d:af:71:72:a0:da:8c:03:11:ae:6a:96:f9:5c:7f:
6f:a5:92:d4:13:b2:17:9c:ec:c4:e8:2c:44:49:d4:1a:57:18:
e6:9b:41:f7:f8:1d:0c:8d:2c:a4:86:88:27:0f:c7:7d:0a:72:
ae:b5:5e:97:a9:5e:2a:4e:00:e4:d0:8d:c3:87:68:21:14:3c:
b0:ea:b6:13:c2:17:67:34:37:6d:73:44:36:1c:79:f7:65:15:
86:7e:13:85:46:fd:01:65:ed:59:c4:8c:87:eb:1a:fb:78:ef:
5c:0e:fa:2e:f3:00:46:14:af:65:c2:57:83:db:48:af:2d:15:
92:95:cb:72:70:0a:80:d0:54:58:69:ac:18:86:ef:c8:e6:5b:
51:71:b2:2e:b6:21:88:cc:77:26:bb:b4:c5:1c:74:bc:4d:64:
06:e5:9e:92:e4:17:1b:56:4e:9c:5d:2f:5d:f4:d5:ad:17:3f:
8f:4d:8b:d4:27:41:71:6e:9a:37:15:fe:3e:17:7d:31:a3:f2:
95:02:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:59:40 2026 by rpki-client