
Error: rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File: 7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier: kF7ltrgLpgN/m1DfnRv8O5EcNOGTcqj/uhPQNFqqN7k=
Subject key identifier: DF:08:4C:E8:82:40:37:92:21:A4:A1:01:BA:35:9C:61:53:96:51:E4
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer: /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial: 04E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number: 04DC
Signing time: Mon 28 Sep 2026 03:29:46 +0000
Manifest this update: Mon 28 Sep 2026 03:29:45 +0000
Manifest next update: Wed 30 Sep 2026 03:29:45 +0000
Files and hashes: 1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: V0JXlub/lEWq88rfP18NnQ0XYyJ2VCbYRu2TlVyQPTQ=)
2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
3: 1C76C5A02A1211F1AA077E8EDAE4EC9C.roa (hash: /VACYuxoqTTaL5gmeBG07ODh6HS3FM68Nf+7j7dfxrk=)
4: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
5: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 03:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Validity
Not Before: Sep 28 03:29:45 2026 GMT
Not After : Sep 30 03:29:45 2026 GMT
Subject: CN=6ab9df2a-f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:a4:73:07:ab:f8:be:42:32:b1:4d:59:57:
df:33:49:1b:da:b0:5b:a6:6d:fd:82:eb:96:9d:e5:
81:cf:99:ce:16:d9:e7:62:90:4e:27:e9:6b:6f:87:
4a:5b:03:51:35:a4:ae:99:e3:61:d5:b8:62:88:e9:
52:5d:99:a4:4c:78:d7:1f:69:67:50:8c:a1:27:cc:
9a:dc:fe:06:60:d8:85:e0:c9:74:f7:c0:6b:c0:1f:
0d:1b:6a:d4:5c:3d:11:c5:6b:c6:7d:b8:01:1d:64:
6b:49:82:76:f7:13:61:a2:fc:bb:cd:31:e8:f2:1c:
1d:61:c8:3f:5b:30:9c:52:50:15:79:fe:d5:89:9f:
d4:37:1f:fd:b7:e7:bf:94:2f:3e:84:c6:7e:3a:a9:
96:b6:1e:18:3f:ba:22:f8:a5:53:e2:eb:d0:7f:d9:
8a:5c:60:a7:67:6b:62:f3:24:1a:8a:02:40:65:62:
1a:58:fa:ab:b2:67:99:07:7a:37:89:d4:f1:c2:5e:
7b:79:a0:89:84:23:66:43:34:6f:a0:e3:f0:08:23:
49:9a:ce:11:d0:e4:66:7e:4f:b6:24:ab:4f:a8:a7:
97:8d:8a:0c:87:87:21:3f:2a:7e:78:5e:53:c1:cf:
87:a4:4e:f1:6a:5a:da:63:da:d8:88:ae:30:fc:f8:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:4C:E8:82:40:37:92:21:A4:A1:01:BA:35:9C:61:53:96:51:E4
X509v3 Authority Key Identifier:
keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:82:61:f2:98:1e:2f:d3:70:4f:c2:c4:c5:79:94:26:e4:
05:de:45:ae:ea:0b:8a:00:ad:e0:7f:c2:71:c3:0e:de:56:07:
74:6f:d5:30:06:f0:2e:c4:f4:cb:48:71:5e:62:3a:44:2f:26:
f5:ac:27:77:8a:dd:24:c2:47:38:38:77:e0:b0:e5:00:cd:48:
d7:5e:e6:3c:d7:6e:f6:12:1b:53:e4:58:4e:d7:52:78:71:09:
15:41:b2:0a:8b:16:ea:d5:e0:06:39:b6:a0:11:10:d9:98:db:
ee:3c:7b:46:39:2f:c1:81:cd:e1:5a:10:83:7f:f4:6d:d8:d3:
96:7e:4b:83:27:45:96:df:94:b0:14:ed:f5:ee:5d:9a:68:e0:
d0:45:a1:43:e8:c9:56:45:0d:92:2d:e5:02:50:45:ae:3c:87:
84:d0:08:bd:0d:36:14:e8:a0:40:b9:d0:ae:5d:78:e1:d5:bc:
a3:a8:14:9c:5e:30:e8:23:94:4e:de:9c:87:fc:27:f4:30:15:
84:be:c6:da:58:bc:2d:c1:4b:79:97:2e:16:c8:c1:6d:b3:09:
ad:3b:21:77:aa:38:58:56:e5:81:b9:3b:4e:e0:14:a4:54:c7:
04:5c:66:52:95:b8:e5:82:ee:7e:eb:88:2f:e1:b3:3d:95:0d:
a5:db:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:43:51 2026 by rpki-client