
Error: rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File: -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier: enHhoS1zADQUEis+UYl3q6PSZvdkGMkecZTCATjuzm4=
Subject key identifier: CF:A0:6D:AF:06:E0:C7:14:C2:67:CC:40:FE:ED:D4:2A:DD:BF:4D:74
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer: /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial: 0536
Authority info access: rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number: 0532
Signing time: Tue 22 Sep 2026 03:18:02 +0000
Manifest this update: Tue 22 Sep 2026 03:18:01 +0000
Manifest next update: Thu 24 Sep 2026 03:18:01 +0000
Files and hashes: 1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: n7mPoF4Wo6GUpV+Aec/K5NpTpujBxqOaq5vIN9XeYS8=)
2: C838A4D646CD11F0B8C628B5DAE4EC9C.roa (hash: RTdZvWYUXJmf/Li5OHmQzr8WCYMhMf0ZpwZGPZXQQ+o=)
3: A696AAEC46CA11F0B0F691A0DAE4EC9C.roa (hash: xB7HU00jvjBw/6JgiS40uDAO/7+ErDQc10oiyq65hjE=)
4: 3561E70246C911F0B48FB997DAE4EC9C.roa (hash: hvGUR7BeqJ6MTLBaAk0vWcFdQF+l1z7VmRPb0Tpc0aQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Validity
Not Before: Sep 22 03:18:01 2026 GMT
Not After : Sep 24 03:18:01 2026 GMT
Subject: CN=6ab1f369-afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:63:51:7e:df:8f:19:b9:a8:e5:93:d6:8d:
fa:4e:7b:98:c9:df:f9:b1:0b:fc:8c:5e:fd:63:19:
1a:e3:63:fb:37:e1:9b:93:65:72:45:9e:85:bf:ad:
c4:00:15:17:eb:a7:8f:00:af:49:be:27:82:29:ed:
8e:03:de:d7:b4:49:37:0c:12:3e:c1:6d:c2:ad:31:
46:6d:eb:a7:09:14:da:ad:92:de:13:7e:37:39:1a:
40:8a:07:72:b6:cb:a5:3c:54:dc:9b:42:cd:e2:9e:
78:10:05:bd:ca:c9:12:3c:63:61:e6:7f:be:93:19:
02:9b:3e:c3:3f:9d:70:3d:8e:7e:d0:75:27:f2:dd:
d6:42:06:2e:27:61:7a:bb:a4:08:15:7b:89:f2:3a:
15:26:60:db:3a:70:42:bd:f5:ef:d1:f5:fa:b2:e0:
e0:01:3b:54:59:47:ed:a3:32:4d:32:c5:a9:75:b7:
d9:48:77:3f:4d:96:9b:01:6f:3f:a5:34:66:9a:89:
6f:10:5f:f5:1e:ee:8e:63:f8:84:5c:77:5e:26:a4:
58:33:38:1e:96:ac:4c:e4:0c:6d:18:41:45:f6:27:
7c:43:1d:28:3c:3c:65:d0:db:14:82:ab:e7:03:53:
48:15:be:8f:dd:b4:2b:ad:a5:7f:34:38:d9:62:ce:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:6D:AF:06:E0:C7:14:C2:67:CC:40:FE:ED:D4:2A:DD:BF:4D:74
X509v3 Authority Key Identifier:
keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:f5:9a:13:96:e1:c2:5d:96:1b:e5:cf:ad:97:bb:f7:75:
5d:be:d2:df:20:07:e5:49:02:d8:b7:77:7f:f0:14:84:7e:eb:
ba:fb:1f:b2:64:35:dc:41:37:ce:66:28:e4:8c:0f:69:55:37:
8e:40:d2:cb:b0:60:40:2e:cd:e8:b2:3c:3b:25:ea:bf:0c:52:
3c:50:a1:17:8f:ef:a1:71:44:ae:59:a4:cf:19:5a:0c:7a:6f:
7b:b1:af:78:3c:4e:34:51:03:10:3a:72:7e:50:da:25:f8:ce:
74:f8:0d:cf:13:46:94:08:0a:c5:9d:c3:3f:06:94:1c:23:10:
8f:6a:d0:e3:a5:90:a2:46:58:57:b2:c6:c4:5c:13:c6:7d:ae:
53:54:e3:f1:01:af:65:ec:25:b2:14:b0:51:84:d2:37:87:cb:
10:ff:ce:5c:00:92:a1:89:03:29:a0:0c:82:ec:9c:ff:39:c6:
f1:89:90:98:69:1b:0a:ed:b2:45:11:45:f0:b4:05:d0:fd:d6:
54:c1:02:f4:05:df:83:f6:c9:32:ac:71:1e:e6:8a:d1:9c:99:
72:24:b4:21:52:5f:43:f2:b9:3a:b4:50:de:69:c5:ae:33:f8:
60:78:a8:b1:a6:ef:6f:22:ae:6d:6a:d6:8f:22:0f:d5:ac:8f:
2e:78:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:28:36 2026 by rpki-client