
Error: rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File: PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier: XZRo6lVKwRFEhDYpoFGVbRbLGWZ+wNtkypq9fqSkwa0=
Subject key identifier: D8:34:F5:E8:36:CB:6E:7C:E1:ED:48:B3:12:75:1B:7C:FA:7F:DB:A2
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer: /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial: 0367
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number: 0365
Signing time: Sat 10 Oct 2026 04:14:57 +0000
Manifest this update: Sat 10 Oct 2026 04:14:56 +0000
Manifest next update: Mon 12 Oct 2026 04:14:56 +0000
Files and hashes: 1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: 9gV8niUNvf/AYdbRMsMZme5USuDQvFozpG7AH86Quu0=)
2: CC282C02DCA911F0B66908E9DAE4EC9C.roa (hash: aHMu4MSEjVffihBbMLwP18F/HBK4HKpDI2L3Hm8bfrQ=)
3: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871 (0x367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Validity
Not Before: Oct 10 04:14:56 2026 GMT
Not After : Oct 12 04:14:56 2026 GMT
Subject: CN=6ac9bbc0-4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:6a:26:27:1b:f1:e3:ae:06:c2:31:c7:a7:
4f:d1:90:ff:33:7e:b1:ca:c6:81:d7:66:16:7d:90:
28:17:0c:e0:57:7f:b9:18:fd:07:8c:23:c2:87:0c:
99:a9:2c:55:b9:34:62:14:e4:63:c9:2e:ca:61:42:
01:48:2a:8e:5a:d1:9a:be:32:fe:fd:da:ec:e5:0f:
78:4a:14:08:48:84:d9:96:90:11:d9:ec:5a:0d:89:
73:38:76:32:f3:9f:05:62:b8:3f:83:17:69:74:9e:
d8:9f:48:39:7c:4a:e7:2c:fb:83:bf:5f:96:3f:62:
3e:96:b6:ad:c7:3c:83:5d:56:24:58:c9:84:8f:d7:
67:7d:9d:75:9e:33:c5:cd:98:1a:b9:a3:2b:8d:c3:
7a:9c:33:64:28:75:d7:46:0d:c3:61:43:09:f8:44:
7e:9e:13:f4:75:50:fc:60:b2:40:07:56:4f:f3:ab:
14:1c:47:40:96:53:79:a6:9f:0f:a5:3d:d0:e7:0d:
cd:05:4e:fd:e4:28:d0:2e:6c:0b:37:d7:57:c5:b7:
04:d6:b8:e3:05:5b:07:57:55:69:76:cc:9c:b3:e7:
9b:1a:15:30:c7:66:71:5a:28:6d:38:cb:91:3f:a4:
8e:c7:f8:e8:af:8d:4b:6a:b5:72:60:1e:73:b6:da:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:F5:E8:36:CB:6E:7C:E1:ED:48:B3:12:75:1B:7C:FA:7F:DB:A2
X509v3 Authority Key Identifier:
keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:ea:c6:d1:1a:42:1c:32:27:eb:50:1c:23:f6:4d:18:1b:
9d:02:9c:c5:c0:51:e4:88:45:e9:6b:1e:fe:2d:7f:34:bf:ef:
8a:9b:22:8d:e7:8a:0f:48:9f:95:ca:ba:4b:f9:f9:21:2f:c2:
61:20:76:fb:34:f4:bc:55:de:3e:98:d2:1d:59:b5:7a:12:74:
8b:4c:a2:d8:9f:b0:f1:75:f0:7d:8d:51:57:67:32:bb:cb:ea:
bc:49:77:70:9c:aa:2a:06:09:b6:8d:0e:de:ea:77:da:d9:53:
e9:ca:9b:0e:2c:91:28:d5:3f:c5:9e:fb:fb:50:f6:e7:c8:a4:
dc:00:5f:45:63:66:a2:e9:3f:44:d2:22:d6:d7:3d:c0:92:7f:
b4:a3:20:78:e7:49:ae:cd:13:41:d2:52:8e:88:b0:12:47:87:
fe:ca:80:9e:50:4e:de:a6:0d:2a:03:cc:3c:27:c2:17:92:78:
93:e2:09:5b:7a:95:fd:74:7e:dd:de:82:23:fd:ae:dd:70:28:
d9:27:dc:8a:5a:c4:b3:9d:c7:6f:ea:98:13:b3:ef:0e:7d:0e:
bb:56:cd:af:1b:fa:33:5b:7e:cf:b4:2c:dc:36:ee:41:a8:20:
0c:03:ba:46:00:80:40:a7:46:a7:06:4a:58:16:da:28:e6:91:
f4:e7:df:e5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBRjExMC8GA1UEBRMoM0RENTc0MTg2NzZCNTZBQjlERTU2RkFBODBDMjc4
ODc5QkQ5NDVDRTAeFw0yNjEwMTAwNDE0NTZaFw0yNjEwMTIwNDE0NTZaMBgxFjAU
BgNVBAMTDTZhYzliYmMwLTRiNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKZmomJxvx464GwjHHp0/RkP8zfrHKxoHXZhZ9kCgXDOBXf7kY/QeMI8KH
DJmpLFW5NGIU5GPJLsphQgFIKo5a0Zq+Mv792uzlD3hKFAhIhNmWkBHZ7FoNiXM4
djLznwViuD+DF2l0ntifSDl8Sucs+4O/X5Y/Yj6Wtq3HPINdViRYyYSP12d9nXWe
M8XNmBq5oyuNw3qcM2QodddGDcNhQwn4RH6eE/R1UPxgskAHVk/zqxQcR0CWU3mm
nw+lPdDnDc0FTv3kKNAubAs311fFtwTWuOMFWwdXVWl2zJyz55saFTDHZnFaKG04
y5E/pI7H+OivjUtqtXJgHnO22sm/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2DT1
6DbLbnzh7UizEnUbfPp/26IwHwYDVR0jBBgwFoAUPdV0GGdrVqud5W+qgMJ4h5vZ
Rc4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzk1QzFBMzhBMjdGODExRUZBNDgxMjYxNjdEREMyNEMyL1BkVjBH
R2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BkVjBHR2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1OTAvOTVDMUEzOEEyN0Y4MTFFRkE0ODEyNjE2N0RE
QzI0QzIvUGRWMEdHZHJWcXVkNVctcWdNSjRoNXZaUmM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZKOrG0RpCHDIn61AcI/ZNGBudApzF
wFHkiEXpax7+LX80v++KmyKN54oPSJ+VyrpL+fkhL8JhIHb7NPS8Vd4+mNIdWbV6
EnSLTKLYn7DxdfB9jVFXZzK7y+q8SXdwnKoqBgm2jQ7e6nfa2VPpypsOLJEo1T/F
nvv7UPbnyKTcAF9FY2ai6T9E0iLW1z3Akn+0oyB450muzRNB0lKOiLASR4f+yoCe
UE7epg0qA8w8J8IXkniT4glbepX9dH7d3oIj/a7dcCjZJ9yKWsSzncdv6pgTs+8O
fQ67Vs2vG/ozW37PtCzcNu5BqCAMA7pGAIBAp0anBkpYFtoo5pH059/l
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:03:21 2026 by rpki-client