
Error: rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File: 0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier: 1IlazbETn2Du/NhkCtXkD84x4u1jLH6pFkWQvk/AF/c=
Subject key identifier: 3F:94:65:5B:CC:15:99:42:D2:0F:4B:38:F4:B5:5A:03:86:62:6D:37
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer: /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial: 06C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number: 06C6
Signing time: Sat 03 Oct 2026 02:36:43 +0000
Manifest this update: Sat 03 Oct 2026 02:36:42 +0000
Manifest next update: Mon 05 Oct 2026 02:36:42 +0000
Files and hashes: 1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: vhrNMBb3naTC4CdNpcuZOHALmZHUkGHzLBllfREH3nU=)
2: EA307FBE63EB11F18E3DA008CF1D38B0.roa (hash: v4tLM2S2DA7XUjp27QjHacJ0S+xJTwAqqoIJCWavsrs=)
3: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 05 Oct 2026 00:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Validity
Not Before: Oct 3 02:36:42 2026 GMT
Not After : Oct 5 02:36:42 2026 GMT
Subject: CN=6ac06a3b-892e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:af:f4:07:14:c2:53:fe:8f:3b:f5:e0:15:
a8:22:77:96:c1:f0:76:bd:e2:6f:e4:b2:ff:3e:01:
c8:ce:16:0a:a2:23:91:d0:e1:68:1e:46:f8:4f:7e:
43:cf:70:37:9e:5a:43:78:8d:d3:7c:23:d9:dd:1c:
cf:be:b9:db:f4:ca:fc:19:00:23:d6:00:ef:1e:56:
e2:88:fd:6b:d5:e7:5a:05:b7:5f:10:0b:4a:b4:2e:
2a:e5:d9:87:06:f0:06:9d:1a:28:f2:23:51:dc:b3:
de:bd:00:31:e4:93:60:09:13:e8:22:38:72:d7:24:
8a:74:c1:25:a3:30:cb:52:70:46:3f:ab:5a:31:0c:
e4:e4:33:65:7a:0c:af:a8:97:66:c9:9b:15:8e:9b:
40:9e:4c:50:80:e0:e0:54:b2:c8:ba:e5:44:45:a6:
7e:f7:79:ad:0a:df:38:25:81:52:61:1d:26:a0:d4:
65:9c:f3:14:98:75:25:0e:65:13:b9:4d:b6:c4:5f:
6a:26:00:89:9a:ef:26:d2:66:5c:19:1f:ea:c4:9b:
eb:23:d1:cc:4c:c1:fd:d2:bc:66:25:95:7c:c1:cb:
bd:23:2b:7a:0d:3f:d8:44:12:85:6b:28:ed:72:08:
b1:37:69:5b:ea:b3:ae:42:b6:22:1a:ac:21:5f:8c:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:65:5B:CC:15:99:42:D2:0F:4B:38:F4:B5:5A:03:86:62:6D:37
X509v3 Authority Key Identifier:
keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:15:38:68:a7:97:7e:42:e8:48:8f:55:b0:d2:73:63:66:8b:
8d:76:8a:df:60:a3:41:f7:a1:aa:ce:82:a2:9a:e8:85:72:93:
12:34:32:54:1c:75:ff:15:24:00:c6:92:b6:fb:73:27:e1:1a:
11:a7:10:0b:b3:cb:65:58:e1:86:39:e4:40:cc:4e:41:d0:e8:
b8:37:8e:f0:8b:3c:7b:3e:43:cf:7a:da:3f:c3:f2:ad:96:c3:
a2:1b:5b:8d:25:c6:26:70:68:8c:02:69:d8:20:a7:80:71:6c:
2c:fe:25:a4:ae:86:9b:95:4e:f9:94:5c:3a:a1:c2:c1:15:9f:
bd:74:4d:b2:e4:86:ce:14:51:9d:bc:ba:09:c1:b8:e6:e9:48:
68:6b:8d:92:d7:61:33:85:4d:41:23:f8:a8:b2:c9:e9:d7:21:
78:cc:91:7b:21:37:b9:1b:5c:a0:32:22:12:5d:b0:63:29:d3:
24:cf:24:d8:47:22:89:23:50:29:8a:52:c9:f9:a9:f2:cf:e6:
08:38:6a:37:6d:e8:a6:32:30:6d:a7:42:21:d1:86:fe:01:ca:
5a:95:42:a4:b4:6b:38:9b:be:99:55:94:ad:4f:54:1e:e1:37:
49:6e:0f:b7:d1:ba:b2:d2:af:bb:12:04:6a:15:47:62:04:47:
c3:43:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:55:54 2026 by rpki-client