
Error: rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
File: 8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft (raw, json)
Hash identifier: JH7xup/MOiOtdy8hlpEvf5nO0V2OUtO59rKJ2FHPdc8=
Subject key identifier: 33:28:F5:A1:CF:85:26:84:89:D9:AE:0F:40:7A:24:E0:E4:00:30:4F
Authority key identifier: F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
Certificate issuer: /CN=F365E09BAF/serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
Certificate serial: 32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
Manifest number: 30
Signing time: Sun 15 Nov 2026 05:57:32 +0000
Manifest this update: Sun 15 Nov 2026 05:57:31 +0000
Manifest next update: Tue 17 Nov 2026 05:57:31 +0000
Files and hashes: 1: 8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl (hash: SE7vA1sdROl77DpIQLOQ54N3+oMuoT+m8aFJE8y0vSM=)
2: 2A9A50EABFB611F1A8B8DCC4CE1D38B0.roa (hash: aPUPt84HHQ0VTMN+ecWBYGOhe1QdcPmcGtI1AN7s+0o=)
3: C71EF05CBFB511F1A5E716C4CE1D38B0.roa (hash: 2Enb3h8sPL3KeOyACfoGa8aoGm1VoiS0Tv/OamL1mjM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl
rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E09BAF, serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
Validity
Not Before: Nov 15 05:57:31 2026 GMT
Not After : Nov 17 05:57:31 2026 GMT
Subject: CN=6af949cc-3d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:fb:7a:8b:51:1b:98:85:56:61:e3:54:06:
99:9c:89:14:c6:75:07:d1:11:89:54:6c:f2:c8:17:
f6:f5:87:27:e2:8c:40:5c:6e:79:2c:36:7d:e9:a6:
16:7f:3e:cf:0e:ac:fa:3f:59:1c:5f:82:b2:1f:90:
f9:a3:d4:f2:f8:95:97:af:7c:18:fa:db:95:3e:ad:
a4:20:fd:ff:90:f6:7b:d9:e2:12:a6:45:26:32:d9:
90:4b:ac:c0:c8:e9:5e:fa:be:b4:be:92:5a:b4:88:
9f:2e:89:e1:d5:d7:25:cc:9a:49:51:dc:36:ea:5c:
93:ea:16:89:53:74:90:e4:28:84:92:87:13:8c:18:
a4:90:35:7a:c0:62:75:e5:21:84:d4:32:8e:8e:b1:
15:f9:eb:4e:31:a8:80:e9:9d:c9:36:79:c2:e6:10:
f6:50:a0:3f:25:34:76:5f:a1:6d:9c:42:63:33:0d:
92:bc:d5:d2:6d:24:3a:44:eb:7d:94:df:da:d4:55:
66:27:98:ff:d9:a3:a5:da:5b:2b:2c:ef:23:51:c2:
36:56:d0:54:7c:36:9f:39:97:28:77:15:5b:8a:7a:
5c:f1:11:0c:0a:b1:0d:49:30:aa:c0:c4:f2:62:a0:
c2:e4:05:08:72:c8:56:da:70:37:89:8a:dc:96:e8:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:F5:A1:CF:85:26:84:89:D9:AE:0F:40:7A:24:E0:E4:00:30:4F
X509v3 Authority Key Identifier:
keyid:F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:49:d0:2d:2b:66:43:00:85:1d:ff:17:6c:ed:d9:9c:6c:
c3:8b:22:87:d0:84:d9:2b:00:f0:69:ee:04:b2:b1:ec:52:f8:
bf:c6:f1:81:55:2c:00:07:e5:01:a9:78:57:15:9e:34:38:1c:
b6:8a:98:52:6d:29:b1:a0:9e:a3:bd:c2:1c:cd:fd:23:d2:47:
bf:f2:43:4e:ed:7b:dd:73:69:2b:da:a9:4d:65:a2:30:4a:3e:
5e:49:38:08:68:0b:05:4c:17:9b:f3:b4:c7:34:5d:a1:18:a3:
6b:67:66:e4:56:04:8c:c0:8b:b9:a0:c7:23:45:99:38:d7:0a:
07:b1:21:b9:e6:29:a6:3f:35:37:46:58:67:45:4a:e3:ce:86:
d8:2f:c9:e0:69:d9:66:60:a9:c7:c9:6f:71:3d:81:02:03:84:
17:de:1c:d6:d2:6c:9f:90:cb:30:01:11:e2:dc:aa:86:d4:44:
20:9a:ec:50:9d:ad:ea:90:2e:a4:04:31:ae:7b:7e:17:85:6d:
fc:57:49:37:67:c5:c0:74:d3:fc:0d:15:82:94:16:d5:55:48:
3e:6a:e1:14:69:a7:c3:ff:4f:a7:09:eb:e5:3d:40:09:54:9e:
58:34:a0:17:64:0e:a3:3b:46:e7:e1:ac:32:62:99:a3:fe:51:
89:ba:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:44 2026 by rpki-client