
Error: rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier: f3fXN3DTCKVIwOKFfv81MrqYnQfFB5YcFWwboCCoo/s=
Subject key identifier: F7:55:E7:EB:A1:45:06:28:60:62:0C:06:91:E8:E9:B5:C5:69:9C:49
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer: /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial: 04A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number: 04A3
Signing time: Sun 20 Sep 2026 03:34:55 +0000
Manifest this update: Sun 20 Sep 2026 03:34:55 +0000
Manifest next update: Tue 22 Sep 2026 03:34:55 +0000
Files and hashes: 1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: jXqW47W8PZiogFYhYfyQ1YDCbFg2J+urvDLf+PxBw1U=)
2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Validity
Not Before: Sep 20 03:34:55 2026 GMT
Not After : Sep 22 03:34:55 2026 GMT
Subject: CN=6aaf545f-7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:f6:20:9e:9b:59:28:5a:42:39:db:f0:c0:
14:f4:51:f1:46:d0:46:7e:62:11:13:1a:c9:9d:ff:
c2:5d:4c:8a:b3:dd:13:35:c0:f5:9c:2d:48:c9:84:
87:57:e9:a1:7d:ff:19:7f:d0:a2:ae:b4:35:a9:8d:
1f:39:f1:32:ce:5d:ba:f6:cc:a2:ad:e8:6a:61:3c:
66:d1:c6:dd:57:16:ee:ad:3b:93:90:d9:1e:b3:3d:
4e:aa:6d:35:ed:ef:74:63:f4:68:7b:5c:5c:da:04:
66:fb:c8:50:0d:77:38:e1:e0:68:f9:ab:aa:1a:da:
b6:4f:40:d7:09:d6:0b:73:6b:78:1f:0a:4c:17:70:
11:82:9a:7b:15:c7:c5:97:76:ab:76:53:55:77:da:
db:87:d6:55:62:96:06:6a:8d:1f:d9:91:3c:28:08:
4a:c8:b0:d6:12:b8:a6:a9:78:c6:f3:4b:d5:47:cb:
b3:7b:91:e4:1b:e1:6b:47:7e:2a:ce:23:53:ff:fd:
f3:6f:c3:9a:3d:30:59:e8:65:24:b4:2c:b3:48:a1:
58:c1:dd:a3:8e:81:d8:55:dd:8f:b1:85:a3:7e:ee:
e0:7f:88:65:53:e5:2c:cc:1a:bd:8c:76:8b:83:79:
20:56:5a:df:af:ca:b1:a0:74:28:eb:a9:d3:ca:19:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:E7:EB:A1:45:06:28:60:62:0C:06:91:E8:E9:B5:C5:69:9C:49
X509v3 Authority Key Identifier:
keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:78:a3:63:58:05:c6:60:83:c1:82:e0:59:ce:2d:f7:af:
75:05:4c:c4:cf:73:82:e4:7e:91:7e:6b:a7:96:68:d5:f1:34:
78:f9:df:2f:b3:01:62:bf:06:5f:36:c7:8b:36:9c:94:b9:80:
ce:a4:26:a9:c7:e9:a9:f0:bb:88:4f:64:0b:5a:a0:89:24:d7:
09:75:2b:62:4c:48:7e:58:d2:bc:08:f4:1a:ba:a1:a2:40:ca:
52:87:e1:80:f0:06:03:de:ed:ac:ed:82:ce:21:12:f8:ef:5d:
06:da:34:85:89:4c:42:55:df:61:4c:3f:af:21:18:e7:f1:de:
b6:4a:fa:24:f3:fc:92:c0:ac:b2:96:09:be:bc:e7:58:bd:72:
c1:8a:c8:8a:b9:57:a9:c1:f9:dc:1a:56:ab:f6:43:ab:40:89:
7d:88:bc:f5:ee:11:aa:88:13:d5:34:de:73:6e:77:75:38:20:
f8:46:52:ac:e9:03:44:27:07:fe:4a:89:22:d6:fe:bb:81:df:
f3:89:14:45:0e:89:92:96:e0:b2:ff:4e:81:42:e8:64:51:b4:
7a:45:4e:46:7b:8a:f4:46:95:28:23:61:37:17:b3:38:07:79:
4a:0e:7e:f9:f6:c4:cf:7c:ce:f3:15:6d:26:54:06:de:96:bc:
e2:d9:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:17:29 2026 by rpki-client