
Error: rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: AIEzs+9/EKAXTsKkh0sXMjgYGojjdChLJfiUGNx/+kY=
Subject key identifier: 78:B6:99:80:34:A4:BF:53:59:21:53:B2:53:EC:CF:FB:21:42:72:6C
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 04D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 04D1
Signing time: Thu 05 Nov 2026 03:35:18 +0000
Manifest this update: Thu 05 Nov 2026 03:35:17 +0000
Manifest next update: Sat 07 Nov 2026 03:35:17 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: 4vJfSNVYLnRUds+M0na1WVt50pp9oAoSOGQah+3rk8s=)
2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Nov 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Nov 5 03:35:17 2026 GMT
Not After : Nov 7 03:35:17 2026 GMT
Subject: CN=6aebf976-2da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:1b:15:0b:c3:a4:07:3f:a6:cd:b1:0a:2a:
04:3a:de:1d:a9:8b:f4:7e:f0:b2:9c:0f:d1:6a:0e:
a8:2b:a3:8f:1c:36:4c:15:ca:fd:2f:16:9b:4e:64:
1c:9a:55:15:1d:90:9e:80:0f:5c:32:03:be:6c:6c:
47:93:ee:9c:cf:ec:a9:c0:8d:e0:83:e0:67:9e:12:
c7:23:bd:fe:d9:f8:9a:3c:5b:b1:d6:c3:f0:74:2f:
03:73:ae:45:37:62:c1:97:38:91:3c:16:10:11:88:
e4:16:95:33:5c:d7:38:0b:12:7e:fc:c4:e7:1b:a6:
8f:d3:27:25:66:61:37:cc:0a:a7:35:d5:40:36:45:
3e:81:72:91:c1:cd:39:e8:e4:7f:06:6c:3a:11:2a:
d3:ef:46:ad:81:2a:ca:30:8c:a3:e1:13:b5:4f:ff:
2f:49:57:e2:ac:0f:85:d7:36:70:57:90:c0:a6:03:
6c:dc:65:29:c1:71:8e:99:3f:91:aa:0e:25:48:c5:
ef:c6:d8:fd:3e:53:6b:b8:81:54:f8:a3:7a:03:f3:
f9:2d:5f:19:50:80:0a:b3:da:81:3a:8a:b7:26:1c:
9c:16:de:17:03:b8:9a:fb:12:f3:6f:4b:7a:0d:4c:
fa:cc:2b:a7:64:f5:d3:2d:cd:7a:d6:e0:f8:3c:83:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:99:80:34:A4:BF:53:59:21:53:B2:53:EC:CF:FB:21:42:72:6C
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:be:85:97:61:65:6f:21:63:bf:9a:2b:e6:4a:47:0e:3d:23:
fb:d8:56:b0:4d:d8:7c:56:74:c6:a3:65:82:31:e6:66:d3:42:
1d:73:2e:90:99:73:d1:a5:60:15:65:68:9d:de:05:ee:ad:55:
3c:ec:1c:62:fe:dd:f4:c2:1d:51:80:8a:af:88:c2:cd:2a:7f:
73:72:74:e0:f9:74:4a:ac:01:69:2e:96:4e:8f:39:18:95:49:
50:7d:2b:ff:66:80:cb:01:c1:19:a0:46:ef:85:f5:0c:67:51:
36:75:33:6f:2b:fc:bd:8a:e9:8b:41:91:44:ea:74:e4:cc:87:
73:fa:98:12:c8:66:e1:ad:83:c6:3f:5e:b4:f7:2f:17:7a:ca:
23:7b:69:08:17:fa:a0:69:77:4e:0c:da:5e:fb:7b:5b:9d:a0:
3a:c4:3f:fa:79:22:80:bb:1d:06:e3:46:81:7d:53:89:4b:d0:
ba:03:f0:e4:e3:57:ef:9f:a5:ff:1b:bc:7e:9a:da:b9:27:af:
83:dd:f2:6c:36:13:42:b7:25:13:88:4f:48:cd:ad:75:2f:0c:
4f:09:87:8c:3b:af:c7:8f:1e:2a:31:34:22:ad:ff:5c:1f:49:
93:6c:2a:81:de:dc:c0:f3:9c:b0:cd:c1:c8:a7:1b:d2:0a:1b:
97:ba:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:48:47 2026 by rpki-client