
Error: rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File: SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier: TTVW/2CO2uJWkfT8wTkiQObccmZIgEGLeacr15pRd10=
Subject key identifier: 97:A3:0E:3A:15:FA:52:49:E4:2A:D2:3A:8D:A2:18:15:B2:F5:13:83
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer: /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial: 022B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number: 0216
Signing time: Tue 22 Sep 2026 04:52:06 +0000
Manifest this update: Tue 22 Sep 2026 04:52:05 +0000
Manifest next update: Thu 24 Sep 2026 04:52:05 +0000
Files and hashes: 1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: wpgk40s5SddX1I/HrrVfJMPuIphqJckrIe5sOnCXkhw=)
2: 124218F4A87611F1BB343DF9CE1D38B0.roa (hash: 7EHzv9d4g2QUNpd55xIerKjIlh5gCJKWhi6MbdoooPg=)
3: 5F8889E2A87411F1AF5A0CF1CE1D38B0.roa (hash: ZI6rP4Gp3/DtbvaoWVZn0dTNJpCo1BXgWFPt5nON3jk=)
4: BBF1B41CA87211F1B8805AE5CE1D38B0.roa (hash: CUx3ktlqa3NJN1ypmfmN/V4lM1vS5fVnZweA/hAkGzU=)
5: 75018CA4A87611F1A1C132FDCE1D38B0.roa (hash: kaPlPZrYi9anHzP7oZ2VSGM+oAUmE8JgvU3k9ef0eAA=)
6: C97F4500A87611F18F9F4EFDCE1D38B0.roa (hash: kB0NGtDaNZn1ivrrDJOXtm8BpSuvK9KY0qQiiT++3mA=)
7: 9A811C4CA87611F18EBA3FFDCE1D38B0.roa (hash: Q1yCsbO/4tb2uOcA3OtCZWlXERe+h8BChe2+rgdheZk=)
8: 80DB21D6A87411F18EA41AF1CE1D38B0.roa (hash: OMxvbvxEMBZmoLJq4ipJyp1dZ6IwZtE6z+/zMaJZI6A=)
9: 86CCC9CCA87511F19EE685F5CE1D38B0.roa (hash: Ql444xzWdlYVBALETQlPegLVI3mdHZia7b7bn3tP4Zc=)
10: C5395942A87411F192243AF1CE1D38B0.roa (hash: rDD/CTI4I/2womxS5cG6nLACmEjIg25PIUXYZNK4Xgw=)
11: 9CDE6EE2A87411F1878E28F1CE1D38B0.roa (hash: Qd5ae98nyr7jSMmNSv52P+8u1CCj37qDdnvkFn1rYpQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Validity
Not Before: Sep 22 04:52:05 2026 GMT
Not After : Sep 24 04:52:05 2026 GMT
Subject: CN=6ab20975-607b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:dc:28:47:11:8e:69:cd:f5:71:80:0c:40:
2b:d3:81:a1:f1:90:15:7b:05:1a:0a:a8:5a:fc:e3:
3b:b2:14:a4:c2:c3:64:b5:36:7d:71:11:41:a2:d1:
c5:e2:4a:41:8a:27:17:25:3f:fa:12:b2:eb:6d:de:
c5:fe:bf:fa:fb:c6:9e:a1:ea:50:02:59:15:b8:6b:
bb:88:c4:8e:49:5f:f5:64:90:c3:e7:64:4a:dd:b0:
a8:10:9c:b9:c6:1a:6e:67:cf:b8:e5:4f:5c:48:c5:
9d:c6:9c:36:00:f5:0e:ce:ad:fa:6c:c6:02:d7:20:
ad:26:0d:1d:aa:6f:63:ba:e5:fe:0e:cb:cf:b5:f8:
0a:66:8a:f6:4b:13:7d:60:0c:d5:07:c1:c5:d3:a7:
00:2f:23:0c:30:b3:46:9e:a3:54:64:12:8d:10:5e:
54:bb:4f:2e:58:8d:f2:19:bd:c0:4b:de:5e:28:ae:
f7:38:86:b8:39:ff:fa:e9:5d:35:b5:0d:77:00:12:
2f:5f:e8:c4:51:cb:46:4e:65:a6:57:fa:2c:9f:62:
01:7b:77:b5:40:ff:33:84:1d:58:e0:77:37:94:70:
29:18:db:b1:cc:51:0c:53:85:40:dc:8e:e0:ac:c3:
2d:d0:a5:fa:2b:b8:e9:12:89:6a:43:b4:f9:07:90:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:0E:3A:15:FA:52:49:E4:2A:D2:3A:8D:A2:18:15:B2:F5:13:83
X509v3 Authority Key Identifier:
keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2c:4b:7f:9a:70:22:54:0e:75:6e:77:75:3d:0f:c9:0c:7b:
5d:8a:09:fb:27:21:cb:32:44:96:e0:c1:b6:48:c2:0f:be:40:
76:7d:0c:4f:fc:50:41:a8:1c:7d:49:2b:90:4a:fd:1f:3b:2b:
0a:01:f6:d0:85:8f:d2:d8:25:58:07:83:e9:d8:b9:6d:93:21:
d0:2d:bc:29:dc:5c:ca:c8:1b:d3:8f:2c:c4:1d:f8:c0:3d:65:
5b:2e:b4:a1:55:31:08:0f:a2:0b:12:62:04:37:6b:a0:70:40:
29:d9:53:89:10:b0:5b:c8:dc:87:f1:d9:47:02:6e:80:a1:df:
02:f1:32:22:2f:6c:98:ec:b6:0b:41:50:31:96:6a:19:4e:93:
12:51:36:fa:46:22:1f:90:5c:da:88:1b:27:ae:af:7f:44:13:
f3:9b:2e:89:d5:af:8b:83:99:d6:aa:35:08:a2:51:43:79:8d:
7e:fb:bc:00:cc:8a:49:28:a2:90:ef:88:3c:55:3d:da:05:2a:
0b:ae:06:e9:09:a6:66:a9:4f:9a:eb:80:ff:c8:d4:29:aa:fe:
dd:7e:54:36:77:31:16:ee:d1:c7:a9:10:5b:79:73:f9:0e:48:
29:85:42:43:62:cf:5f:12:b1:04:95:9d:8e:1d:c2:40:af:24:
22:19:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:49 2026 by rpki-client