
Error: rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
File: JEaS2sYhhOTIg1elJqucZvlKTH4.mft (raw, json)
Hash identifier: fPWE1vzVmUf8cu8hXTktAbKIxxczcDImFEOuOn38rWI=
Subject key identifier: C4:20:2E:97:AB:51:21:90:15:45:CD:1A:06:19:4B:10:47:4A:01:B7
Authority key identifier: 24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
Certificate issuer: /CN=F363DCF2AF/serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Certificate serial: 027D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
Manifest number: 0279
Signing time: Sat 10 Oct 2026 04:46:48 +0000
Manifest this update: Sat 10 Oct 2026 04:46:47 +0000
Manifest next update: Mon 12 Oct 2026 04:46:47 +0000
Files and hashes: 1: JEaS2sYhhOTIg1elJqucZvlKTH4.crl (hash: staewNzFDGD0VSQoZiiLYVdGIUgiHCQx2oXaMd5TVdI=)
2: 7E8AB1F2210D11F0BF867894DAE4EC9C.roa (hash: DjV7nCg+4hB07UZMYzd0xmACSMYBPBQfqRJs7j2MoEM=)
3: 201348D2210D11F0ABE7E991DAE4EC9C.roa (hash: LUo+fZ8ICythu7NN9JfJV1LkDsZAEGtwMfGmobKx8es=)
4: D6E208F6210C11F0A4C7E78FDAE4EC9C.roa (hash: UTbJHvdCycZUQvLa3nWOWV1moJ9jZms3ZBFk0hjIuSc=)
5: E21E90EE210D11F0934A7996DAE4EC9C.roa (hash: iUS+8IiwQWTC3KosgvVLrgeHR5LzZ/YYi+HkfN+5rAw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 04:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AF, serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Validity
Not Before: Oct 10 04:46:47 2026 GMT
Not After : Oct 12 04:46:47 2026 GMT
Subject: CN=6ac9c338-4be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:5f:46:56:1c:4b:b7:c7:c4:03:ea:3a:85:
2a:51:69:89:1b:e9:98:ec:62:f5:48:40:17:5d:ce:
c0:a1:af:cf:44:39:38:e2:75:ca:9b:7c:96:2a:da:
e3:6e:02:e5:ba:b5:61:b8:c6:55:81:fe:fe:32:5a:
40:bb:4a:0a:9d:bd:3e:dd:13:b5:60:72:e8:8b:73:
67:09:70:e3:ee:d6:d4:11:f3:df:56:10:3e:d9:ee:
56:2c:04:ab:69:4b:57:9e:d7:be:95:22:3f:fd:b7:
9f:9e:ff:02:88:6b:21:05:dc:3f:91:71:43:3d:0c:
7a:2e:e1:72:b9:72:b0:62:fe:fd:f3:9b:7f:63:98:
a8:7d:00:53:b2:f5:17:06:dd:f2:e5:fb:9d:bd:a8:
79:74:08:5c:97:85:52:a2:e7:5b:d8:60:a3:09:07:
f6:0a:75:a9:62:12:be:07:4a:4a:f5:f5:75:2b:45:
b1:0a:0a:1d:8c:bf:63:17:12:b2:3e:22:75:45:7e:
8b:3d:f3:9e:ac:9f:1a:99:b5:d1:f8:c8:ff:72:ea:
e8:78:3d:64:f2:92:af:a8:80:a5:c6:24:27:10:a1:
7d:71:4b:de:ff:87:99:f5:b2:0e:1d:6f:b1:8f:ad:
e9:46:33:71:97:65:ea:3e:a5:5a:b7:9c:f7:ab:11:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:20:2E:97:AB:51:21:90:15:45:CD:1A:06:19:4B:10:47:4A:01:B7
X509v3 Authority Key Identifier:
keyid:24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:db:f4:5b:7e:0e:9e:d7:f7:6e:55:a3:73:60:04:9d:a5:1d:
d9:67:6a:6b:c2:54:fc:ba:68:e2:0d:34:fd:fa:e6:78:31:0e:
51:af:90:8a:b3:46:72:b3:84:8b:78:46:d2:55:d1:a2:91:75:
30:c9:78:c8:3d:03:41:d8:03:b1:95:d2:18:ae:a2:bc:b6:52:
48:49:4c:c6:02:99:32:22:06:9b:ce:75:62:cd:f3:74:59:f8:
31:5d:47:e5:c6:f8:2d:a4:6f:48:4e:6f:65:cb:2f:79:53:d0:
4b:31:d5:8a:b6:3b:62:c3:8e:e2:f8:ae:28:e2:0a:dd:e0:d1:
99:cf:cb:56:4d:7d:be:b8:47:e2:41:f1:e0:e7:3f:14:51:81:
48:b9:c9:69:a4:ff:e0:8c:01:2e:9f:0e:00:6e:e8:dd:db:06:
07:ab:70:1d:e5:78:ea:62:55:df:28:a7:bb:70:99:f2:31:03:
b8:ec:05:c3:03:a0:1e:c4:a0:cb:42:35:12:db:3e:8a:1f:d0:
d3:77:4c:3f:2e:05:39:a3:0e:c1:cc:22:e3:1d:02:29:ee:41:
80:f6:23:dc:fc:8e:54:80:6c:1d:db:2f:97:97:78:7b:d6:b0:
89:8a:64:de:a4:14:51:38:29:38:d8:c4:4c:19:a8:df:96:d9:
57:72:79:fc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0RDRjJBRjExMC8GA1UEBRMoMjQ0NjkyREFDNjIxODRFNEM4ODM1N0E1MjZBQjlD
NjZGOTRBNEM3RTAeFw0yNjEwMTAwNDQ2NDdaFw0yNjEwMTIwNDQ2NDdaMBgxFjAU
BgNVBAMTDTZhYzljMzM4LTRiZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAGF9GVhxLt8fEA+o6hSpRaYkb6ZjsYvVIQBddzsChr89EOTjidcqbfJYq
2uNuAuW6tWG4xlWB/v4yWkC7SgqdvT7dE7VgcuiLc2cJcOPu1tQR899WED7Z7lYs
BKtpS1ee176VIj/9t5+e/wKIayEF3D+RcUM9DHou4XK5crBi/v3zm39jmKh9AFOy
9RcG3fLl+529qHl0CFyXhVKi51vYYKMJB/YKdaliEr4HSkr19XUrRbEKCh2Mv2MX
ErI+InVFfos9856snxqZtdH4yP9y6uh4PWTykq+ogKXGJCcQoX1xS97/h5n1sg4d
b7GPrelGM3GXZeo+pVq3nPerEZHHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxCAu
l6tRIZAVRc0aBhlLEEdKAbcwHwYDVR0jBBgwFoAUJEaS2sYhhOTIg1elJqucZvlK
TH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNEQ0YyLzg4MjdGNURDRENCRTExRUZCMTU4NDBCQjc2MkU5NTFBL0pFYVMy
c1loaE9USWcxZWxKcXVjWnZsS1RINC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pFYVMyc1loaE9USWcxZWxKcXVjWnZsS1RINC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0RDRjIvODgyN0Y1RENEQ0JFMTFFRkIxNTg0MEJCNzYy
RTk1MUEvSkVhUzJzWWhoT1RJZzFlbEpxdWNadmxLVEg0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW2/Rbfg6e1/duVaNzYASdpR3ZZ2pr
wlT8umjiDTT9+uZ4MQ5Rr5CKs0Zys4SLeEbSVdGikXUwyXjIPQNB2AOxldIYrqK8
tlJISUzGApkyIgabznVizfN0WfgxXUflxvgtpG9ITm9lyy95U9BLMdWKtjtiw47i
+K4o4grd4NGZz8tWTX2+uEfiQfHg5z8UUYFIuclppP/gjAEunw4Abujd2wYHq3Ad
5XjqYlXfKKe7cJnyMQO47AXDA6AexKDLQjUS2z6KH9DTd0w/LgU5ow7BzCLjHQIp
7kGA9iPc/I5UgGwd2y+Xl3h71rCJimTepBRROCk42MRMGajfltlXcnn8
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:27:03 2026 by rpki-client