
Error: rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
File: BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft (raw, json)
Hash identifier: w4Fx61/YHeOpg3XcKEflJmzByaebxFsM6MaK9KZ9WYY=
Subject key identifier: 00:F4:89:92:D3:9C:19:A7:BD:33:9D:38:1F:0C:8E:DD:19:75:B3:DC
Authority key identifier: 04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
Certificate issuer: /CN=F362B2F5AF/serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Certificate serial: 01EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
Manifest number: 01E9
Signing time: Sun 20 Sep 2026 04:53:58 +0000
Manifest this update: Sun 20 Sep 2026 04:53:57 +0000
Manifest next update: Tue 22 Sep 2026 04:53:57 +0000
Files and hashes: 1: BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl (hash: PcDIMarzGaK24WN7D5p+qM9iJEv5hjgh/vMvaqF6/YA=)
2: 39B8368C3BAA11F09A3A42CEDAE4EC9C.roa (hash: NGOVvxGcMctTOcLjdKtNGDdIQDHinApagvdcC37+4wQ=)
3: F3CD790A3B9211F0B6A215B9DAE4EC9C.roa (hash: uy0pfZG46ZecPcXleZMS+n60uaQG5DsddR4RCRLej+Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B2F5AF, serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Validity
Not Before: Sep 20 04:53:57 2026 GMT
Not After : Sep 22 04:53:57 2026 GMT
Subject: CN=6aaf66e6-ebd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:74:91:63:64:b7:16:55:43:8d:cc:3d:52:
f1:0f:f2:a0:52:7f:be:ef:c7:f7:e2:ae:34:82:0d:
a4:b5:51:c5:bc:a7:18:bf:21:5b:5c:df:e6:12:5c:
46:a7:ca:c1:73:30:7c:ef:16:4d:83:4a:84:38:ad:
b0:55:f3:06:b0:47:fc:35:4b:ab:11:fa:16:ca:ee:
5f:85:83:ad:24:a0:2d:c4:80:bf:d6:7f:f0:c3:6d:
ab:db:d2:38:f8:c2:0e:23:a8:b3:2c:c7:d8:7a:d5:
87:42:3b:80:42:0a:55:55:d4:45:da:f5:db:2f:be:
cb:b7:95:3b:c1:8c:ec:4d:70:5f:47:39:79:2b:3c:
b3:af:68:76:22:63:71:7c:44:d7:90:95:1f:0a:67:
9d:7f:48:3c:2f:aa:10:7e:97:59:f1:23:40:9a:b5:
0b:c7:67:08:81:41:40:4f:c8:43:f3:de:38:34:19:
96:cf:33:d1:78:3f:80:e6:0c:39:13:83:90:cc:91:
6c:10:9c:1c:1c:ce:e6:4b:36:53:4b:d8:34:57:77:
2b:a8:98:e6:3d:e7:9e:34:eb:3c:4e:81:bd:b4:87:
ae:43:22:0a:45:9d:27:0d:ac:8f:1c:77:29:6c:56:
f6:60:9b:46:16:48:f0:86:2c:13:78:ed:64:a4:cd:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:89:92:D3:9C:19:A7:BD:33:9D:38:1F:0C:8E:DD:19:75:B3:DC
X509v3 Authority Key Identifier:
keyid:04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:74:4e:cc:df:55:11:d2:36:64:3a:4c:c9:01:ff:ea:a2:45:
61:48:6d:fe:25:52:d9:05:08:ea:11:84:c0:2b:54:a0:72:25:
d5:7c:e8:07:5e:75:bd:55:3b:d4:34:b6:44:62:68:e0:e0:13:
3b:e1:7d:24:a4:49:4d:85:f8:26:2f:a9:7a:fa:57:9f:c9:21:
75:85:7c:bb:44:93:25:9b:08:6a:b1:a3:e9:04:a2:e9:30:88:
22:c6:41:67:ca:46:f9:e9:5f:d0:1f:54:8c:2b:07:9f:85:bd:
36:cf:fb:82:d3:96:72:21:8b:b8:74:c3:d3:c4:8d:90:dc:e7:
46:01:19:d5:31:72:f8:49:26:7a:07:10:4d:6e:9e:63:20:dc:
aa:f6:8d:b8:1b:79:d5:bc:49:67:99:02:42:5b:ad:17:a4:96:
b7:df:2f:30:ee:a3:14:66:50:ad:3e:b6:1e:40:18:5e:85:83:
6c:8f:bf:3a:1f:67:ab:d4:a8:3e:01:74:19:89:bd:12:ea:61:
19:24:f4:62:d2:50:37:be:28:0b:29:0e:0a:f8:98:67:1f:9d:
07:9d:57:84:69:3c:40:64:e3:a8:27:3d:2b:c3:74:00:b5:15:
15:ae:4c:ff:4f:dd:10:af:30:ac:e9:04:19:0b:ca:90:b8:7b:
8d:c2:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:12 2026 by rpki-client