
Error: rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
File: bP0IdUOMviDDICpMU82sI8ThNz8.mft (raw, json)
Hash identifier: qJUvuNGSz5ta9P1vtBozQYC5aabPmJsebr3urUT0SKY=
Subject key identifier: 70:3F:7B:E9:1D:9E:80:EC:9E:2A:EF:F9:A4:B5:49:71:94:55:66:41
Authority key identifier: 6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
Certificate issuer: /CN=F362CE41AF/serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Certificate serial: 0524
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
Manifest number: 051B
Signing time: Sun 27 Sep 2026 03:23:26 +0000
Manifest this update: Sun 27 Sep 2026 03:23:25 +0000
Manifest next update: Tue 29 Sep 2026 03:23:25 +0000
Files and hashes: 1: bP0IdUOMviDDICpMU82sI8ThNz8.crl (hash: 980myhAzg9kP6aJKkND1b1Zqwtt2JzlYVx94LGIsLl0=)
2: D17B863A5F2C11F1ADEB7CACCE1D38B0.roa (hash: H03Q5gLBOydxD/GMJ7B0EsmI5WY5LjbtS8TWQfAYuWA=)
3: 9743DFA85F2C11F1B08A20ACCE1D38B0.roa (hash: 6+I4Ss6xdQzMUvMZ4EpZ+iZcvqYNBP3da5JJTuOSMIE=)
4: 3EB5EBD85F2C11F1937F70A8CE1D38B0.roa (hash: DnXDQ8RvUP35TDhIZyMT4JxBRezG9MBgT7uMLwmeuuk=)
5: 8CD9ED3E5F2A11F1B06F131ECF1D38B0.roa (hash: 2Y0TOuGuUxq1MVzlA1RieYuFzvqEZTMK5R5VwT07uTs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362CE41AF, serialNumber=6CFD0875438CBE20C3202A4C53CDAC23C4E1373F
Validity
Not Before: Sep 27 03:23:25 2026 GMT
Not After : Sep 29 03:23:25 2026 GMT
Subject: CN=6ab88c2e-9ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:8d:19:dd:38:1b:bc:47:fe:f6:69:09:4c:
66:8f:0f:5c:6b:68:94:1a:62:6f:ba:38:74:fe:97:
73:ce:01:cb:77:be:77:92:3d:2e:9b:f6:7a:80:9a:
83:8b:7a:96:ce:8c:15:5f:0c:95:9e:ff:98:44:07:
48:8e:d0:1f:69:05:ea:b5:34:24:fd:2f:06:0a:07:
3f:ee:bc:54:7a:0f:2d:19:15:3b:5e:2c:57:c1:e2:
0b:b1:cd:2d:f6:2a:32:a4:6c:80:51:76:00:cf:ed:
ee:7e:4e:13:19:27:2e:6b:00:43:f7:73:cb:c4:bc:
d8:e9:48:e2:a8:77:95:b0:c8:c5:02:de:a6:c7:26:
f2:67:76:ed:f5:25:96:30:e5:5c:99:7f:0d:93:a9:
99:26:42:ab:86:ae:c2:f2:ac:25:b7:0e:9e:2a:14:
b1:75:be:41:ea:4d:b0:5c:9c:af:36:c7:04:0e:e0:
19:e3:d8:c3:13:18:22:24:0a:af:25:50:61:10:48:
40:fd:62:57:4c:30:8f:80:b0:65:ce:61:ef:69:ed:
49:54:fa:22:fd:b3:b5:d1:ea:e7:99:ca:de:49:fb:
6d:ee:0e:95:d6:af:f5:75:17:c0:c6:18:20:db:6a:
52:63:99:07:2f:a8:5e:34:b8:c9:ee:fa:8b:10:b9:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:7B:E9:1D:9E:80:EC:9E:2A:EF:F9:A4:B5:49:71:94:55:66:41
X509v3 Authority Key Identifier:
keyid:6C:FD:08:75:43:8C:BE:20:C3:20:2A:4C:53:CD:AC:23:C4:E1:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bP0IdUOMviDDICpMU82sI8ThNz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362CE41/A31F43E6D79711ED9219CAD9F1222468/bP0IdUOMviDDICpMU82sI8ThNz8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:46:ad:91:6e:7c:09:bd:3a:0f:dc:12:3f:fd:6d:84:b6:
cf:d2:f5:36:82:18:49:ee:fb:37:3c:32:44:9e:11:9a:63:45:
fb:94:74:81:9d:5e:29:b8:6c:5a:13:6c:df:fd:f1:a4:68:f4:
93:5e:2b:6d:63:71:88:db:0b:82:95:14:fa:45:a3:0a:74:22:
fa:ab:1c:51:08:1e:57:5c:98:ff:3e:52:24:92:04:11:ec:0a:
e6:b7:bf:fd:61:6c:c2:d4:df:0c:ca:41:ee:4d:fd:e9:fd:c5:
41:36:41:aa:f7:a1:74:f6:db:84:9a:da:ad:65:88:55:54:46:
20:e2:15:d7:d1:5b:b7:7e:6a:a8:96:1a:cf:87:3e:3b:ca:0c:
0d:d7:18:dd:71:47:60:82:1e:20:57:c1:04:7f:39:b4:89:14:
a9:37:ba:30:44:f3:da:93:f3:55:e0:4c:7d:e8:f4:c8:02:8e:
80:92:f4:13:4e:e0:93:b9:ef:fe:13:95:4d:aa:4b:0a:df:a4:
4d:6a:d8:b5:fb:03:f9:c9:b1:c4:77:d5:aa:0d:99:d0:84:7b:
f0:26:b7:9f:bf:bd:ee:f3:c0:63:ff:c4:5e:de:8e:aa:18:b2:
4a:49:ba:d4:3c:25:e5:d5:fc:f4:c5:c0:49:b1:4b:69:4e:80:
f0:87:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:51 2026 by rpki-client