
Error: rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
File: a80vareT2tF2SQgQRK-wMtX7SVc.mft (raw, json)
Hash identifier: hgj1VlUFoZqlA7wPfBp+iDYBlgIhGdsOvGfYSLAJguQ=
Subject key identifier: A4:63:58:8A:4E:9A:76:66:2D:FF:EE:9D:C7:B4:56:DB:A8:D7:64:CF
Authority key identifier: 6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
Certificate issuer: /CN=F36429BBAF/serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Certificate serial: 0FFB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
Manifest number: 0FF8
Signing time: Sun 11 Oct 2026 00:59:02 +0000
Manifest this update: Sun 11 Oct 2026 00:59:01 +0000
Manifest next update: Tue 13 Oct 2026 00:59:01 +0000
Files and hashes: 1: a80vareT2tF2SQgQRK-wMtX7SVc.crl (hash: 3BZ61eKFPf2l/CFui/TY3k7PoUO1n8pBWEYDsoparts=)
2: 187EDD9C7AED11E984C8C332F8AEA228.roa (hash: nhY0hDClfKko61UqhvpEoCzSPfAm4A5VUTRq1mCbE5Q=)
3: 50D9415490BC11F1BB1D0FFBCE1D38B0.roa (hash: nrdvWy8odcTXpZqrFuH9SU7t8/+TedfUj1Tv/Or32Ss=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4091 (0xffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36429BBAF, serialNumber=6BCD2F6AB793DAD17649081044AFB032D5FB4957
Validity
Not Before: Oct 11 00:59:01 2026 GMT
Not After : Oct 13 00:59:01 2026 GMT
Subject: CN=6acadf56-e6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:e8:04:f7:20:88:cd:8c:07:84:5e:31:23:
7f:be:01:e6:cb:b3:11:85:ce:1a:28:ec:f3:28:1a:
93:d1:c0:c0:55:3a:26:93:05:88:27:f6:79:8c:76:
4e:51:4c:dc:75:e3:1d:2f:b9:bb:a3:2a:3f:45:24:
f6:9a:6b:04:0f:2f:dc:ae:31:f6:d6:c1:bd:99:a1:
8e:8f:9a:1e:aa:21:f8:c8:98:7a:30:50:7e:e2:2e:
d3:90:0f:96:02:83:38:18:0c:b1:2e:93:ea:fa:64:
51:80:2c:0b:06:b3:09:e4:53:77:43:53:72:53:7a:
75:c3:be:b7:65:77:0d:41:99:1c:e5:17:8c:46:3b:
75:f5:39:bc:7e:13:65:21:4b:42:f6:14:f2:f0:ed:
6a:86:99:b8:a7:b5:30:84:e5:76:e1:a6:34:ce:f4:
2c:87:66:5f:26:70:d4:76:9d:94:b6:f8:b1:ac:5e:
91:25:59:00:f0:8f:5a:1a:32:16:c8:6e:7e:bb:4c:
6c:65:0f:cd:90:fa:db:12:b2:60:e5:45:aa:8e:67:
c1:d6:ed:c7:a7:dc:aa:2c:21:4f:80:93:e4:aa:b3:
29:c2:c2:33:1e:36:37:f6:c2:59:5a:da:d5:28:ad:
e7:29:ef:06:5e:8d:2d:96:39:98:11:6a:7e:a3:b8:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:58:8A:4E:9A:76:66:2D:FF:EE:9D:C7:B4:56:DB:A8:D7:64:CF
X509v3 Authority Key Identifier:
keyid:6B:CD:2F:6A:B7:93:DA:D1:76:49:08:10:44:AF:B0:32:D5:FB:49:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a80vareT2tF2SQgQRK-wMtX7SVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36429BB/5F4E1BC878AA11E5AB4EDE28F8AEA228/a80vareT2tF2SQgQRK-wMtX7SVc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:06:22:8f:77:a0:0d:c1:7f:59:87:1f:b0:58:24:fa:33:bd:
7b:77:40:16:99:bb:f7:ca:64:48:52:e8:19:29:4d:44:7f:f9:
15:21:50:b1:5c:b9:2a:71:9f:24:f9:5f:ed:d3:e3:1c:eb:aa:
89:a4:ab:88:92:19:82:9a:32:c7:aa:a6:f2:b2:a7:7c:29:44:
19:99:ca:f7:a3:d8:f4:9d:18:4e:1f:9e:2e:cf:07:4a:58:f5:
0f:a9:7b:68:6f:ab:58:50:f0:a5:d2:83:8e:24:37:e5:80:f1:
4c:d0:6a:3e:d3:6c:68:af:8b:51:61:2c:b4:41:52:ff:85:f4:
5f:cc:eb:da:6a:45:ef:31:b3:e3:8b:be:ca:9a:63:6c:c9:a6:
8d:13:27:fc:03:62:12:14:84:67:5e:46:10:df:63:18:ce:72:
eb:09:78:92:d3:c1:98:a7:03:cf:56:4b:85:2a:b9:9a:70:39:
51:7d:2f:aa:51:e4:c5:de:4a:b6:bf:e1:d5:83:2c:ff:a5:8a:
a6:82:94:9b:15:95:a0:f8:0f:a0:7c:c5:0c:bd:e5:1b:e2:e0:
29:ba:4d:d3:5c:c1:d2:fd:62:35:f6:6a:09:b9:bc:ab:cd:de:
a4:7d:25:0f:59:8b:ab:d6:77:4f:5f:81:90:b2:2d:28:dc:1f:
d7:04:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:44:58 2026 by rpki-client