
Error: rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File: 68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier: EjlGS/kWAPHwu2wApyry5N2u8ZWBOZEBU52SgTxSUxs=
Subject key identifier: 97:D9:C2:84:5F:2B:FD:A4:D7:15:14:C7:3F:1A:71:AE:08:04:ED:DE
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 0725
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number: 0719
Signing time: Mon 21 Sep 2026 02:30:40 +0000
Manifest this update: Mon 21 Sep 2026 02:30:39 +0000
Manifest next update: Wed 23 Sep 2026 02:30:39 +0000
Files and hashes: 1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: w6Y2mVUulnizgSKD43bbu/u+jAGtZ8ApdP1YsupR+Z4=)
2: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (hash: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=)
3: EDDA3E501C6211F1AAA4E2C7DAE4EC9C.roa (hash: lUvvBVjsEjqfAsAmA0WnRzU1lqUEU7lO27ZrISQKKFs=)
4: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (hash: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=)
5: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (hash: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 02:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829 (0x725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Sep 21 02:30:39 2026 GMT
Not After : Sep 23 02:30:39 2026 GMT
Subject: CN=6ab096d0-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:e2:c7:bc:0a:33:c6:1a:c9:8f:77:28:db:
1f:73:fa:6f:d7:3e:51:96:d1:39:00:ba:3d:45:9c:
bc:1e:61:bd:89:05:1e:e4:c5:eb:db:3f:cf:97:b5:
db:18:c9:d8:4e:15:2a:f6:51:22:8c:3a:da:64:10:
be:92:88:54:bd:ed:76:5a:dd:54:bc:57:65:4d:2a:
c5:a1:a8:b0:c3:81:4f:e9:4b:f4:88:e9:2e:21:5e:
66:a3:fa:06:b4:b0:20:c1:b8:3e:9f:79:cc:ae:3f:
c6:ce:7d:d3:f6:ce:88:c3:ac:a1:9d:12:cf:6a:8f:
9b:1d:af:0b:4a:06:b9:b3:24:0c:a2:42:e7:f5:7e:
4e:d3:67:3d:70:4b:28:6e:49:cb:7a:c4:35:09:76:
e5:12:61:a3:7b:3c:c3:34:87:64:7b:dd:1b:5d:29:
24:b2:cd:07:d0:5d:2d:82:9a:e2:85:ac:2e:27:a0:
c2:31:a1:cd:29:82:9a:06:a6:6c:67:12:63:ba:54:
86:62:a7:da:3e:26:ac:04:49:a0:e3:ee:39:51:76:
81:fe:17:1c:c3:42:dd:30:dc:94:d6:0f:1f:5a:bd:
3c:33:be:f1:b8:91:0e:7a:21:c3:c5:47:7b:6d:53:
20:3e:8d:6f:07:10:ac:db:a1:d1:d5:af:16:0f:e5:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:C2:84:5F:2B:FD:A4:D7:15:14:C7:3F:1A:71:AE:08:04:ED:DE
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:af:c4:33:80:3f:79:23:79:4b:3d:da:54:e9:1c:80:62:a5:
5a:bd:82:4a:e8:c5:9a:b3:fd:08:bb:7e:13:47:d7:99:76:de:
de:b0:49:c1:d3:c7:56:a4:ca:0d:8a:0e:b5:7b:9b:08:fe:99:
4b:d3:95:e2:bf:3e:3e:d1:c9:3c:f6:62:81:53:69:3a:6e:e9:
91:85:3e:a3:09:a0:07:ee:a2:9f:43:61:1c:2b:d7:fd:58:b5:
51:7e:2e:94:25:58:d5:d0:9a:09:5d:a8:c1:5c:95:04:bf:78:
ac:a1:bf:38:03:e2:bb:8b:10:16:81:6e:34:e4:a0:3a:ef:28:
e5:04:82:16:d7:75:ed:0f:0e:10:9c:1c:0b:4e:13:14:ab:e1:
4e:04:fd:f9:de:8f:6e:a0:07:b1:67:21:c8:bb:dd:41:c0:4d:
0a:60:e3:21:11:86:03:f0:2a:66:08:75:ee:10:b6:63:a1:d3:
56:12:12:4b:02:03:4d:29:e4:e9:51:cc:45:6c:53:42:fb:dd:
74:3f:a6:8c:38:81:ef:a6:03:bb:3e:ef:1c:64:1b:9d:32:2f:
b1:87:e6:23:bf:a7:4c:3e:1e:b8:54:e3:83:e8:6f:65:1d:05:
a9:b4:be:61:1c:6c:c7:b2:22:d6:e5:9f:ef:0a:29:ca:2f:de:
4a:79:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:12:38 2026 by rpki-client