
Error: rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
File: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft (raw, json)
Hash identifier: R5dn1EslYqBqv7HeFB5C5daEO49jLyRUifrSV8bFaNY=
Subject key identifier: 7D:B1:60:09:1C:2D:22:D6:E3:48:84:02:41:D8:BA:3F:84:F8:F6:05
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 076D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
Manifest number: 075D
Signing time: Tue 06 Oct 2026 02:27:29 +0000
Manifest this update: Tue 06 Oct 2026 02:27:28 +0000
Manifest next update: Thu 08 Oct 2026 02:27:28 +0000
Files and hashes: 1: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl (hash: trgSKM5DWlsIrXr7DGUIP4Mcri1SMoLFJCCWXqd2aHk=)
2: 945E7DD6C09411EEB7EE3CB6775412E6.roa (hash: tYOnT9BqjQytDTUPG0XkVhwFzA0iw870t7nSn78qeKY=)
3: FCC2B53CC09311EE973207B5775412E6.roa (hash: nXq9HLYp0GlNmQIEUdb1IZ99wB3H3x5IMG8Jb1p7VY4=)
4: 8569FFFEC09311EE82CC19B4775412E6.roa (hash: qk3Riga7xUPf3FLu17cWPMbk3RmFvo1KiRk9xRM0fy8=)
5: 53A66100C09411EEA90F91B5775412E6.roa (hash: +3UIXUyKPa3bDPDxQDj5kfU3yXkutIrwCuUhyp487Lg=)
6: D675B9C4C09311EE81BFE4B4775412E6.roa (hash: yeVSsCWEbMjwZK7TCJavELf3uC42giGMll3LnNn7b1U=)
7: 3029805EC09411EE8A964BB5775412E6.roa (hash: 1o3m2JRCddBtFM+D9ve2QUFy2WmECuUP1FMBaEt3CSw=)
8: A7408026C09311EE8AB05AB4775412E6.roa (hash: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 Oct 2026 02:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF, serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Oct 6 02:27:28 2026 GMT
Not After : Oct 8 02:27:28 2026 GMT
Subject: CN=6ac45c91-3916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:3c:9d:59:bb:b0:99:8d:49:c7:cd:4a:8d:
58:38:f8:40:ae:df:18:ee:cb:2e:fc:dd:5d:3c:ca:
32:7c:28:6f:bb:cb:82:c7:58:ba:2b:98:9d:fb:00:
69:5c:d1:41:2a:af:c0:27:28:8e:db:0f:05:95:35:
01:e3:3e:54:0a:c2:96:4a:0c:9d:8b:1e:b1:45:43:
40:a6:c8:d8:c8:52:77:3d:2d:c8:c3:cf:4e:56:53:
9a:76:1b:4a:2c:83:22:20:2a:b3:83:f2:b2:94:1a:
1f:09:d0:65:2a:c4:7f:9c:2c:6a:0c:c3:cc:c5:65:
92:5e:55:bf:4e:d9:7b:48:87:fa:b5:9a:70:f2:70:
a9:17:5f:3d:36:64:89:ed:fe:eb:e2:1f:29:46:ee:
f8:de:0e:93:e2:b4:df:f5:8c:ed:c7:8b:07:09:16:
08:05:c9:f8:67:d6:ee:1d:19:ef:83:6d:87:5e:c1:
39:09:02:2c:2e:ed:50:31:b4:ec:fa:42:a1:a5:f0:
ba:8d:00:18:4e:ba:cf:dd:86:bf:61:e7:2b:83:29:
75:4d:da:64:58:dc:20:0a:27:22:63:66:c2:79:19:
21:ed:b9:88:b9:88:ee:db:78:76:f4:98:0d:94:6d:
c1:f7:ee:7e:77:04:4c:69:28:a4:cd:05:8e:2e:d1:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:60:09:1C:2D:22:D6:E3:48:84:02:41:D8:BA:3F:84:F8:F6:05
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:dd:ae:0f:b2:47:c7:6d:8e:4e:e6:37:42:76:b3:da:30:
e4:bf:13:7c:44:b9:74:2c:7d:e2:03:70:63:10:a7:7f:50:a3:
4a:40:1f:a4:c5:25:33:c7:e7:14:3b:09:b5:bf:c9:bf:c9:64:
6b:b0:e2:14:71:0d:cc:65:d0:4b:02:8d:3d:4f:62:45:a8:20:
a4:41:78:98:f1:ae:75:ef:20:85:e9:96:69:98:c4:86:f7:8c:
3e:39:06:14:8e:e5:5c:be:b1:27:6a:33:62:d5:c2:20:f1:b7:
73:db:98:3c:27:98:d4:e2:0f:48:41:56:57:e3:20:37:24:18:
17:cb:23:8c:05:f9:9d:5f:3b:1d:f5:ff:dd:80:dd:b7:fc:af:
6a:a6:04:3a:4f:c4:78:c6:1d:a8:99:68:5d:a7:ca:f5:83:83:
3d:ab:25:94:12:c4:b9:8a:a5:1a:24:df:13:5c:75:4d:eb:ce:
d3:93:27:cf:95:7f:79:29:37:d0:84:f7:97:e6:20:9d:0e:ad:
18:1d:4e:79:52:fd:da:e8:71:99:23:23:f8:7d:30:73:62:8f:
fb:88:61:5f:12:96:0b:d8:b3:dd:e1:58:cf:f3:10:83:90:d4:
ae:d6:95:d1:ab:5f:1b:c7:44:33:b6:41:3e:ff:92:af:13:c6:
97:3c:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:02:30 2026 by rpki-client