
Error: rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File: ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier: Jg8MoFtgXZomdG3kJvtj3qKbPC/aKWPDiWBTIhBZuPo=
Subject key identifier: 01:C1:04:D9:02:87:AB:20:45:F9:03:70:77:5E:07:03:36:37:5E:5E
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer: /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial: 0E90
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number: 0E8E
Signing time: Sun 20 Sep 2026 01:05:25 +0000
Manifest this update: Sun 20 Sep 2026 01:05:25 +0000
Manifest next update: Tue 22 Sep 2026 01:05:25 +0000
Files and hashes: 1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: HKTH8dNvjROmLu0K6UXtxjM8Zx/cayGaBD5gQCFC3q8=)
2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3728 (0xe90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Validity
Not Before: Sep 20 01:05:25 2026 GMT
Not After : Sep 22 01:05:25 2026 GMT
Subject: CN=6aaf3155-de5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:08:af:8e:1e:9d:93:cb:0f:dd:b8:af:8e:
91:87:91:2a:17:5b:19:af:a0:50:87:45:7c:1f:b5:
a0:fd:e7:eb:1b:e6:57:d9:5e:cd:2b:8a:9c:d7:0a:
c0:35:99:ea:c2:19:77:c3:62:c9:f7:d6:b9:5d:4c:
2f:7b:ca:8d:6b:c8:06:fa:23:5b:8a:a9:fd:1f:f8:
bc:e7:bc:79:78:72:65:25:b6:cf:72:5d:76:1c:b5:
1a:53:59:25:e1:f2:df:9f:95:d0:04:4f:09:63:a5:
08:a2:1c:1e:46:05:69:0c:ce:cb:9f:0e:cc:7c:ae:
b1:9a:25:f9:7f:ff:ee:33:d5:61:86:ed:bf:27:8f:
f1:8a:c9:31:b4:7d:e5:02:ea:2d:36:3a:bf:df:8e:
a1:e7:c8:4f:4b:97:59:71:92:0f:a4:a8:ed:fa:94:
be:43:72:0e:ed:bd:88:e8:97:32:e7:6e:a0:99:09:
3c:4a:a3:75:14:1f:6c:19:46:14:28:2a:f8:65:b1:
22:7f:a3:2a:d5:97:41:01:33:1a:16:65:38:25:44:
61:76:f2:37:94:d1:36:c5:0a:dd:7a:5c:bb:f5:d4:
c6:4b:17:02:7f:9f:f7:3c:8f:41:c8:60:e8:d3:fd:
56:56:39:b1:58:77:11:b8:d3:d7:90:0b:77:f1:2d:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:04:D9:02:87:AB:20:45:F9:03:70:77:5E:07:03:36:37:5E:5E
X509v3 Authority Key Identifier:
keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:bd:46:0a:97:e1:9a:e5:c7:29:89:f5:6a:1b:3f:e7:d5:
46:cc:81:a0:34:61:ad:72:e8:7a:a3:ff:80:89:bd:c3:f6:e0:
90:0c:a0:8a:7e:c7:88:29:95:7c:6c:a7:0b:2c:08:40:e3:31:
c7:c7:ad:ab:cc:9e:bf:ba:15:ec:d3:5e:47:17:21:99:50:85:
c3:2b:f1:3b:f3:fd:79:5f:15:96:97:e9:cd:48:85:86:cf:87:
31:3b:89:1c:6d:23:4c:5a:e6:0d:fa:01:a4:bb:63:22:93:f5:
cc:98:ff:7d:2c:0b:76:80:6a:a4:dd:a8:f7:f9:38:3f:2e:f5:
eb:d4:9a:c1:78:5f:82:85:f5:8c:9f:f5:cf:33:28:81:f4:a9:
fe:1d:d5:38:66:e4:fd:67:1b:de:98:af:eb:22:24:1a:31:fc:
92:9f:4f:c2:aa:1f:20:78:91:75:4b:e0:e0:5e:a2:0a:00:aa:
42:a4:10:70:8b:a9:2f:06:09:b7:dd:d1:3c:89:f9:00:8e:b9:
54:31:27:8f:0e:a9:b1:ad:70:8c:29:17:ab:9f:57:9d:81:4a:
03:9f:c5:d2:f9:68:03:06:5c:77:79:e4:c0:78:e9:a7:e8:7e:
0a:4a:69:42:00:0d:9e:a0:48:33:12:99:55:37:75:96:34:28:
5d:09:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:10:29 2026 by rpki-client