
Error: rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
File: i2Qxm9V6EKYdSYU_G6miZt5alxM.mft (raw, json)
Hash identifier: AVAJYQ4b9qau/E2bBGM5x5aRfWr0dDphGsNI4GnOOEQ=
Subject key identifier: C3:7B:3B:9E:E3:7B:9E:1F:1F:28:31:C5:D2:8F:20:FB:8F:3B:4C:88
Authority key identifier: 8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
Certificate issuer: /CN=F3631F16AF/serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Certificate serial: AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
Manifest number: A8
Signing time: Sun 20 Sep 2026 05:33:13 +0000
Manifest this update: Sun 20 Sep 2026 05:33:12 +0000
Manifest next update: Tue 22 Sep 2026 05:33:12 +0000
Files and hashes: 1: i2Qxm9V6EKYdSYU_G6miZt5alxM.crl (hash: FezeaEABkfY1KXmtNtJuq3UjdDfse8C1N4UYmvsmeUQ=)
2: 579189BA496911F1939025C0CE1D38B0.roa (hash: 9nu+V4jDpXzggMIj8Gg2sQVf+Ps0AHWXClLk8CxZNuA=)
3: C508B1FE48CD11F1B044A702CF1D38B0.roa (hash: s3yIGbVsantz+OaFdDfVniwJT32Pslq46usbKBVTHVM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3631F16AF, serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Validity
Not Before: Sep 20 05:33:12 2026 GMT
Not After : Sep 22 05:33:12 2026 GMT
Subject: CN=6aaf7019-c104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:ce:ee:5a:55:69:11:95:22:38:78:1f:75:
55:1e:36:d2:c7:b4:b7:12:7f:6a:c8:fa:47:a6:6e:
d8:95:4c:b7:3b:15:9c:1b:ce:67:4c:f7:0a:a8:0a:
b3:3a:47:36:1a:6e:cb:49:a8:18:7a:f0:c2:91:e6:
8d:dc:f3:d4:09:5c:4b:16:90:27:77:82:9b:f1:fa:
8c:3f:e1:b0:5c:b4:0a:16:85:85:bc:3f:a1:47:44:
e8:d7:d1:e7:44:b5:63:0b:a1:16:e8:28:84:1f:84:
14:a7:3e:d8:1e:b0:f9:9c:5a:87:26:02:bd:6a:92:
90:a2:c7:3f:1f:00:3b:93:08:df:ea:bc:98:aa:28:
da:9d:cc:85:99:a2:d8:6e:11:8e:32:13:cf:de:2b:
02:6a:42:04:7d:08:2a:e3:62:7b:43:ba:0c:98:c3:
62:a1:63:0d:e5:91:85:8c:e3:64:0e:f3:9e:af:12:
ff:a2:20:9c:1c:1b:13:0b:e7:5e:41:50:6b:dc:74:
a8:4f:4c:cc:0c:90:83:f8:d9:ea:71:d1:be:3c:1f:
08:a0:92:f9:58:4d:11:69:d8:8a:47:c5:54:9a:eb:
70:ab:31:d5:b5:52:1b:da:c4:43:ef:1d:f2:ff:71:
fc:3e:d5:27:dc:4d:48:c3:61:52:e8:4f:be:49:ce:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7B:3B:9E:E3:7B:9E:1F:1F:28:31:C5:D2:8F:20:FB:8F:3B:4C:88
X509v3 Authority Key Identifier:
keyid:8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:1a:62:8e:12:ef:cc:43:d5:11:0d:4f:a9:30:4f:8c:d5:bb:
8d:de:2d:be:49:cb:24:1f:37:37:61:b3:a3:4b:47:9e:1d:c9:
19:a3:60:88:9c:ba:d3:d5:48:85:48:a7:ed:cb:d6:26:34:1f:
c6:35:7a:d5:4f:f3:89:e4:81:85:55:dd:09:0f:27:dc:a8:c2:
80:3e:1c:ae:48:c8:0a:fd:bb:d0:e5:dc:80:5e:7e:24:de:c8:
d6:1a:3d:5c:31:7f:06:0e:60:e9:68:c0:f9:ca:da:38:11:f6:
0f:b1:b0:68:b8:c2:40:0c:cf:49:e1:05:87:1e:85:e9:85:21:
fc:57:bf:54:1a:b9:95:3e:5b:fb:98:64:15:2b:51:aa:48:cb:
ad:b1:64:0f:81:be:b7:40:61:6d:93:c7:4c:af:c1:97:17:96:
2b:79:0b:99:05:56:a3:0b:6c:c6:fd:91:e6:1f:71:d0:c6:7b:
96:c8:e1:c5:73:7f:73:0a:93:f9:23:15:9f:38:c4:e8:9d:61:
05:34:67:99:31:16:e3:b4:6a:e0:b1:69:12:ae:d2:cc:88:83:
87:ed:03:92:ab:91:e2:9b:e7:7f:fd:3a:0d:9a:e3:4f:b0:60:
11:a6:ca:86:ea:06:d9:f0:81:90:c0:76:ec:8e:fc:de:c4:93:
36:21:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:12:53 2026 by rpki-client