
Error: rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
File: NwiffHLw58V4LX8rO9aPXYzsU5Y.mft (raw, json)
Hash identifier: PK/ZskYb82wGUNezyRQhKHts/G8+Vc1cxi/Z8WpMxf4=
Subject key identifier: 62:45:3F:24:BB:CE:FF:AD:46:77:91:BB:AB:39:A6:73:15:A6:54:C8
Authority key identifier: 37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
Certificate issuer: /CN=F364E67CAF/serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Certificate serial: 0B46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
Manifest number: 0B40
Signing time: Tue 13 Oct 2026 01:16:46 +0000
Manifest this update: Tue 13 Oct 2026 01:16:45 +0000
Manifest next update: Thu 15 Oct 2026 01:16:45 +0000
Files and hashes: 1: NwiffHLw58V4LX8rO9aPXYzsU5Y.crl (hash: Z6v4XVgQqWN9bjMqyh8rPhhvBSM5TPeFuVCiZjhwk2U=)
2: 2452626C789C11EA9D48381FF8AEA228.roa (hash: /wUzpd2kuZQOUTL91oaudRKtKLX8YfadU+XPL/wLyTw=)
3: A6CF9D8AAA1C11EEB9ABF954775412E6.roa (hash: 84w5dXq+cic3Xi8F7+1KmbYwvKGSm/iIJ1eYJxxPsPc=)
4: C5B11B58483E11F1B8CB3DB0CE1D38B0.roa (hash: Y0ZCKfJAfWw5PWvP1AXpo5C8au43GtXQpd0r+podfi0=)
5: B82EFE34291811E9AC8B8967F8AEA228.roa (hash: 89svLPpHyqTVOFkRRCgSCkC0+wCh7pGNmY8TlC/Ke6c=)
6: 2DBFF77A291911E99585E167F8AEA228.roa (hash: 95TWNnQxaCwaMS0/NMpFWBMaUEPrE1AodSEzF5Hy8Yk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2886 (0xb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAF, serialNumber=37089F7C72F0E7C5782D7F2B3BD68F5D8CEC5396
Validity
Not Before: Oct 13 01:16:45 2026 GMT
Not After : Oct 15 01:16:45 2026 GMT
Subject: CN=6acd867e-3f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:cf:c9:2a:f8:f5:1f:ed:c4:e1:f2:e1:7d:
e9:a1:71:d9:26:8d:b5:f3:b9:14:07:ef:46:da:9e:
47:42:14:27:e0:6b:33:3d:49:51:2b:c0:5b:eb:70:
31:25:9c:69:ab:14:c4:38:27:80:73:b4:60:64:95:
8b:44:4f:78:7f:f4:3c:3f:7f:05:a6:56:d2:a0:6b:
d4:0f:3b:c1:a2:36:d4:9d:b1:89:f2:38:f5:60:99:
84:d2:a8:7b:07:ed:fc:00:b3:8a:c1:82:15:34:d9:
7c:d3:d6:ec:d4:61:a4:d6:29:30:fc:f9:01:ac:3c:
e2:9d:22:08:96:b0:e7:43:ec:24:1d:e6:76:bd:6f:
60:b5:36:c5:36:f1:f1:4c:4e:93:db:ee:7f:fc:b2:
c5:d9:63:f8:aa:ac:dd:e4:76:5a:1c:be:89:2f:6b:
73:4b:a3:3e:08:42:2d:8c:0e:41:db:33:ea:53:b8:
c6:76:0f:e6:8b:24:b0:2e:21:b3:79:17:8a:e0:45:
3a:f7:a9:bf:39:57:ea:15:61:14:e6:db:0d:4a:df:
5d:f8:89:2a:c6:c0:37:91:46:3d:65:79:37:92:f2:
20:98:a2:cf:ac:c8:e6:36:18:2b:f1:d0:ff:12:0f:
fb:a6:14:5a:b4:9d:e3:9f:c4:7e:c5:9a:22:2b:fe:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:45:3F:24:BB:CE:FF:AD:46:77:91:BB:AB:39:A6:73:15:A6:54:C8
X509v3 Authority Key Identifier:
keyid:37:08:9F:7C:72:F0:E7:C5:78:2D:7F:2B:3B:D6:8F:5D:8C:EC:53:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NwiffHLw58V4LX8rO9aPXYzsU5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/71DA5480291611E9A079C765F8AEA228/NwiffHLw58V4LX8rO9aPXYzsU5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:70:1f:44:93:57:51:96:4a:f2:53:fc:7d:d7:ca:f5:04:
58:cb:84:dc:ba:b0:59:7c:53:cd:4e:21:60:8b:25:e1:15:f5:
90:67:4b:3a:c2:ba:83:d5:13:db:7f:36:51:f2:9f:4c:11:f3:
a0:f5:53:16:b4:e6:00:3b:09:a9:bf:e3:9f:31:42:7a:97:78:
9f:fa:8d:d9:e5:29:4a:9c:25:c0:9c:53:49:e4:c9:c3:2c:08:
97:0b:1b:cf:da:93:85:46:d0:97:81:92:2e:51:0a:64:df:0b:
bf:aa:ae:df:81:ae:a1:68:ee:3e:87:c6:df:67:92:97:56:53:
65:1c:e4:a0:62:e4:1f:00:b1:02:fd:49:b5:d4:0a:30:6c:b2:
6d:62:cf:69:7d:ad:a6:9d:39:80:1c:34:af:bd:87:77:8c:1b:
00:be:f3:7a:46:2b:37:fd:85:d4:bd:14:a4:dc:bd:f9:ca:0d:
74:87:e0:bb:4c:66:45:38:31:f6:45:cf:7b:2f:ae:3b:52:e4:
1f:12:5f:d2:2c:ab:e6:bb:a8:e8:ac:41:7d:2c:2c:f5:90:f1:
ff:a7:0b:36:f8:ef:f3:23:f0:ef:e9:ae:f4:26:aa:5c:fc:ea:
b6:c5:63:19:06:51:b9:6a:fd:c6:46:b4:ef:78:8e:63:01:e5:
7c:18:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:50:06 2026 by rpki-client