
Error: rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
File: 5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft (raw, json)
Hash identifier: BD1INSkpXk39pVMB5EfgxEeG/0CtoSeEAWAnzWtmLd4=
Subject key identifier: 48:9C:5E:6C:11:9A:EF:6C:BA:4B:66:37:8A:7F:08:A7:F3:38:AF:85
Authority key identifier: E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
Certificate issuer: /CN=F363D052AF/serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
Certificate serial: 010F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
Manifest number: 010A
Signing time: Sat 26 Sep 2026 05:21:46 +0000
Manifest this update: Sat 26 Sep 2026 05:21:45 +0000
Manifest next update: Mon 28 Sep 2026 05:21:45 +0000
Files and hashes: 1: 5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl (hash: OVKel3WIBkcmN6mFO3jgjR517sFkaWFXD+5cfQmm4f4=)
2: D20BE91AEF8711F08AAED0F6DAE4EC9C.roa (hash: yZfvb8UOSgRJZB74a1hDNJSjGzrfQDLIyxiVRfuPTBg=)
3: 855F8EA6EF8611F0A6C6A3EEDAE4EC9C.roa (hash: 3IabCadHoA/OYmvIDKysB/g2LtVBAZU3gAXWMv5jfHM=)
4: 29B3171AEF8811F0BB16757ADAE4EC9C.roa (hash: UeMfwysq4fMk8KdXIaNOZ7RRQtyobub2EXlkTuucJo4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl
rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363D052AF, serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
Validity
Not Before: Sep 26 05:21:45 2026 GMT
Not After : Sep 28 05:21:45 2026 GMT
Subject: CN=6ab7566a-aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:19:50:ea:23:9e:9d:41:19:f2:2f:4c:77:
05:79:14:00:83:60:d1:e6:85:5c:cb:cc:78:3f:1d:
d9:4b:f0:00:0a:18:29:b8:5a:de:26:3f:2e:86:75:
3a:a0:44:fc:2a:31:ba:4c:44:42:2b:12:05:47:70:
2e:f5:82:de:10:09:a4:4e:1e:8b:25:b7:d9:dc:f7:
f6:90:26:b3:bb:58:48:83:4d:ab:7c:60:60:dc:14:
a5:e8:23:00:62:6a:2f:d9:af:0f:e0:36:0b:19:44:
f6:3f:17:da:31:a8:2a:69:ae:cb:eb:f6:8d:75:c6:
cc:ab:fb:1e:47:91:58:ee:79:f5:5b:68:9a:e5:ae:
0a:38:69:25:dc:0b:48:8c:c7:91:92:e8:fa:07:30:
b6:1b:69:1c:37:f4:d5:9e:83:c8:59:37:de:3d:d9:
1f:4b:a8:b3:53:32:f1:79:7b:0d:6e:6b:a8:c6:fa:
e8:5b:7e:d1:33:38:26:aa:ad:9e:26:78:80:72:b4:
eb:8e:b7:86:82:2d:a5:08:22:bd:35:13:b0:a5:d2:
1b:91:fc:02:85:ce:c0:a2:84:09:bd:a5:a8:ec:85:
06:5c:9a:b3:b2:3a:37:cb:0a:9a:9d:7c:7f:d4:f7:
88:ba:d9:4b:9c:a6:b6:4c:73:8b:8e:5c:86:5f:ba:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:5E:6C:11:9A:EF:6C:BA:4B:66:37:8A:7F:08:A7:F3:38:AF:85
X509v3 Authority Key Identifier:
keyid:E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ac:fd:ba:d6:ef:0e:1a:41:21:60:b5:b1:d9:38:39:e7:0a:
97:d0:29:56:96:83:f9:0c:87:88:a7:b4:27:bc:f7:3b:23:2a:
bb:9a:38:5e:5d:e7:50:d3:9a:56:52:e6:ee:a4:bb:05:1d:cb:
49:bd:20:42:05:a9:14:2d:cd:3c:e0:01:4c:1a:d0:b8:70:bd:
56:74:b0:d0:e1:2d:a4:ae:3a:09:a7:ae:66:12:68:a1:96:39:
8f:b2:4e:ca:cd:b9:ad:7d:b8:c3:83:54:2d:cc:87:8d:40:0a:
00:d7:c4:df:c7:86:37:49:cb:d6:ae:f1:91:6e:ff:98:47:af:
1e:e7:74:f9:a6:ae:0f:2d:9b:86:3f:da:18:30:a9:90:9d:cb:
6a:8f:fb:33:39:d8:43:87:a1:6a:44:f3:54:ed:15:51:d9:ea:
f7:92:59:97:fb:e7:35:9d:67:0c:54:92:2f:47:68:a9:c3:08:
e1:e3:dc:07:5b:a3:42:ad:1a:05:b4:21:27:e9:75:c6:5e:bd:
b8:c1:e9:0c:8c:5f:c0:56:b9:14:7a:2c:13:44:f2:79:45:00:
58:aa:26:ca:90:06:bc:b8:8f:54:50:ce:a8:36:83:8d:45:e4:
ed:9e:78:aa:d7:17:4c:29:7d:ae:bb:f8:f6:a6:29:05:80:f5:
d8:fc:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:57 2026 by rpki-client