
Error: rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File: -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier: VF9NPs3zYOYedWigW10L6AFPzVa0i0Vuckdwl3wBy+A=
Subject key identifier: 97:C9:49:CE:5E:2F:C4:EC:E2:AA:88:5E:ED:F6:D5:24:94:11:F7:29
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer: /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial: 0601
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number: 05F8
Signing time: Tue 22 Sep 2026 02:58:12 +0000
Manifest this update: Tue 22 Sep 2026 02:58:11 +0000
Manifest next update: Thu 24 Sep 2026 02:58:11 +0000
Files and hashes: 1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: vbb00HoYoUoTHiy5VliX5Lo9KMiT0z//954LRuvy94Q=)
2: 4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa (hash: 1A0L1uPFsmbrXqK3o6gBdtlVfG97lH1yGo2/hTF0JqM=)
3: 4B67D68A8A6E11F184D19A14CF1D38B0.roa (hash: mQKkOZp4IJ77KNXjngRxYZITAGUOeXF20aGNVpbflBA=)
4: 294052808A6E11F1A4749014CF1D38B0.roa (hash: YiyEUT/QFYS6/b8U7AFIlPC+Y4DtjYaVbmQ5D0jAWoc=)
5: E3C653308A6D11F1A6412914CF1D38B0.roa (hash: p9hlGzewGMaj5gPBDqvEO3e2S+ZbZso+XQB0hn7n8wY=)
6: 8ADC1A3E8A6D11F180BD560FCF1D38B0.roa (hash: rjs89YTmGWh9XUMaq59FoPkx586pjsdr+zg9OuFmDk8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Validity
Not Before: Sep 22 02:58:11 2026 GMT
Not After : Sep 24 02:58:11 2026 GMT
Subject: CN=6ab1eec4-9b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:61:30:42:1a:79:f0:32:2f:d1:51:32:83:
de:c0:bb:d8:3b:dd:5c:10:44:62:22:6f:08:37:20:
13:79:ee:68:3b:7c:22:36:c6:46:0f:2c:cb:50:60:
fe:2a:c2:f4:10:a9:7f:76:5a:89:85:d4:73:0d:d8:
b9:fb:98:89:8e:66:57:d3:2e:34:a3:0a:f1:67:0b:
54:93:cc:8f:18:1e:d0:e8:b8:e4:8f:a6:f1:af:e3:
33:81:c3:af:de:5b:37:f6:34:ec:5e:45:39:2d:64:
83:07:37:f7:aa:d7:d1:43:df:87:1d:f4:64:6c:4e:
33:ea:4c:df:ea:68:cb:da:30:0e:78:93:37:16:9d:
d0:65:40:a6:6d:08:7d:49:86:9f:f6:66:b3:08:17:
01:42:27:74:b1:13:85:a2:ef:9b:b0:cf:b2:08:41:
8f:d5:43:71:1b:22:c7:9e:a9:97:25:26:36:bf:02:
0c:2b:c2:a3:a8:e4:4f:d3:a0:55:ad:95:64:b4:a6:
5e:56:66:1b:01:b0:5c:c8:d8:3f:ab:a8:06:e2:ba:
da:7d:b5:6e:a6:35:69:9c:8b:2c:b2:b8:2b:85:d6:
b8:e3:29:d3:f8:e8:b5:78:b1:5a:8f:4d:c7:2d:f3:
ce:0e:e5:3b:b9:f3:9a:7d:df:28:2f:ae:36:52:27:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:49:CE:5E:2F:C4:EC:E2:AA:88:5E:ED:F6:D5:24:94:11:F7:29
X509v3 Authority Key Identifier:
keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:75:9a:3a:e3:90:eb:23:b7:09:8c:11:d7:40:74:25:89:
ba:e9:64:e7:54:c5:12:e1:82:5d:21:3d:c9:52:ef:3e:71:7a:
c5:9c:84:f5:ee:b7:fc:d9:dd:91:81:d9:fa:e8:f7:40:47:3c:
de:c6:8a:9f:57:c6:43:19:9e:14:f4:c7:2b:83:d4:2c:1d:a3:
a3:25:01:e4:72:90:5b:e6:ba:2b:e9:9f:52:ee:78:cf:86:d9:
05:41:75:92:10:fe:5a:dc:6a:b3:56:00:ed:aa:8d:86:8f:f1:
54:a8:25:0e:df:32:d1:64:8c:e6:be:1c:d4:e5:f4:48:14:49:
11:86:0d:35:6d:a5:4a:ea:34:77:c8:05:e2:5b:d6:cb:3e:c8:
b7:8c:9c:f8:8f:bb:3e:7f:ba:00:ff:e3:8c:7d:93:57:e1:b6:
0e:5b:a7:d9:39:03:63:28:36:ff:f1:8b:21:b1:a5:70:0c:cf:
81:c2:b5:36:b1:1d:8f:20:d3:21:53:3e:74:b9:c5:db:32:4e:
11:fb:9c:04:d3:54:bc:02:b9:ff:29:f0:ae:45:a0:22:eb:6c:
e8:99:1f:02:3e:ee:07:0b:82:90:ac:b2:c6:c9:64:10:89:4d:
eb:1a:a2:71:e1:25:c9:c4:14:9a:6a:b3:d6:bf:c1:d3:eb:d3:
bf:6f:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:29:09 2026 by rpki-client