
Error: rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier: uA8bevRisa1F53ihEyiYnxijOqlHnBisLlR39iqw9aI=
Subject key identifier: 20:70:42:41:32:D9:23:19:AC:D1:46:DA:3B:09:4D:4F:DC:11:1E:01
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 05CC
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number: 05CA
Signing time: Tue 22 Sep 2026 03:02:34 +0000
Manifest this update: Tue 22 Sep 2026 03:02:33 +0000
Manifest next update: Thu 24 Sep 2026 03:02:33 +0000
Files and hashes: 1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: 6+GViF9QQisj9cAlA7V8lj0eRnz+0XM78GqGAppIkVM=)
2: 14676520195C11F1882310E6DAE4EC9C.roa (hash: MEXom9qqtVBHi9cTLvqwaxyNpMlwORLkLiKzmbGhhwI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Sep 22 03:02:33 2026 GMT
Not After : Sep 24 03:02:33 2026 GMT
Subject: CN=6ab1efca-b025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:9e:87:ab:21:46:ec:73:27:0c:35:6d:d3:
b6:18:6c:ce:54:f7:e5:13:ad:59:02:93:6f:19:dc:
62:61:94:4b:cf:93:42:0b:12:ba:dc:4f:8f:06:30:
be:a7:d4:8e:71:b5:95:28:d3:ad:93:4b:d9:d6:33:
07:29:5d:f2:65:99:52:04:7c:b3:ba:8a:b2:ba:57:
6e:ff:06:00:d6:8d:1a:ac:80:aa:f0:ea:25:ef:fd:
4c:b6:bd:6f:4a:70:68:11:4a:00:77:09:5b:99:df:
26:12:aa:e1:4f:62:46:56:c4:b6:fd:0c:3e:72:7c:
42:ff:75:be:d7:bd:ed:ca:c2:63:c0:25:7c:3c:d2:
6b:42:0e:c6:75:2e:e1:f6:63:bd:e6:66:4d:36:25:
f1:6f:0d:f5:ec:17:6b:4a:1a:2d:14:15:0a:aa:79:
f6:13:36:9f:ba:5d:39:20:f1:f2:e6:ef:5d:fb:09:
a4:af:3b:5a:a4:21:98:b1:1a:cd:42:9d:51:7a:3e:
ec:9f:b1:f4:ce:d1:98:49:2e:bf:97:f5:87:a9:95:
74:2c:2d:ee:63:58:1a:41:c9:3b:df:1b:e0:b8:ed:
49:04:03:0e:f8:a6:00:dc:1c:40:5e:d8:e5:ae:4e:
0e:fe:95:c2:81:1a:3c:3e:65:76:ae:dc:04:01:84:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:42:41:32:D9:23:19:AC:D1:46:DA:3B:09:4D:4F:DC:11:1E:01
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:4a:29:c5:98:c9:6a:a3:0a:c4:40:8f:42:a5:1c:5e:86:
df:16:da:9b:64:cd:a0:66:eb:15:b1:5e:d2:64:42:6b:85:2f:
87:da:c4:09:6f:25:3f:c6:00:35:57:41:cc:7c:50:ca:ba:d9:
d8:a9:bc:cf:4e:4a:07:4e:14:b8:b4:7d:b4:b9:45:f2:e0:71:
e3:d3:3e:99:e4:57:61:04:fe:aa:49:2f:18:85:6b:bf:05:75:
5f:07:5e:ea:a6:4c:28:4e:15:34:c5:d1:8a:4a:7a:d4:2b:5a:
bd:a2:6a:f1:9d:11:60:2c:72:a0:9f:74:20:80:8f:07:9b:16:
a9:3d:05:9a:14:06:35:7b:4e:67:c8:48:16:f8:55:fb:20:66:
24:16:8e:39:9c:60:c8:bb:05:44:0a:76:63:16:e2:e6:36:84:
34:17:cd:e5:80:32:ba:4b:b9:4c:81:20:08:c8:4a:dc:f1:92:
6a:3a:23:86:3d:96:fd:a1:8d:54:11:3d:73:58:83:c0:c9:d7:
d5:39:0e:1d:28:30:52:54:07:48:bf:0a:eb:8e:b0:15:0f:b9:
59:16:f7:e9:75:43:b0:7c:5a:ce:b0:74:73:54:5d:72:05:09:
92:81:92:1a:6f:9c:1f:36:7b:23:d4:a9:fd:bf:7a:f7:db:f0:
0f:5b:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:00:54 2026 by rpki-client