
Error: rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File: y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier: PI4XmxgGnUT6F1r7y4rd0D/I3S0cLWKhdjDFcc7J6wc=
Subject key identifier: 2F:AE:0C:EC:66:5C:F5:E1:9B:43:44:56:A2:75:FD:CE:52:C6:34:5B
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer: /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial: 0986
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number: 097F
Signing time: Mon 12 Oct 2026 01:46:08 +0000
Manifest this update: Mon 12 Oct 2026 01:46:07 +0000
Manifest next update: Wed 14 Oct 2026 01:46:07 +0000
Files and hashes: 1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: uG1phfLSenskViB0kegrZjls90DGXsAz+2fSy076CpY=)
2: 7780EF6C630A11F180A1E4B2CE1D38B0.roa (hash: fkIhbGcLK27MDR00HJfXuZdrNmz7WeoBwxqN+OBnQWA=)
3: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
4: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 00:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Validity
Not Before: Oct 12 01:46:07 2026 GMT
Not After : Oct 14 01:46:07 2026 GMT
Subject: CN=6acc3be0-c264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:b3:1c:21:8c:f4:76:2c:61:27:2c:61:04:
41:a4:67:bd:66:3d:d5:df:b9:6a:2f:fc:73:c8:1b:
01:be:0f:e7:a0:81:eb:f0:87:88:76:37:dd:32:e3:
4b:cf:f9:f3:c3:97:9b:fa:c7:91:9f:a4:88:70:3b:
87:aa:48:42:38:e6:54:57:2b:f0:68:dc:81:60:42:
96:bd:57:55:3d:8a:6b:cc:1b:27:7e:1d:6e:51:17:
b4:7c:f4:cc:35:49:7a:39:0c:fc:11:f6:a9:89:8a:
0b:2c:31:8c:2e:7c:aa:2e:67:55:e2:c4:b7:20:4e:
29:81:98:88:78:47:31:a1:e0:46:2c:09:5e:df:55:
70:d0:ea:9a:52:54:dc:e3:96:29:55:82:3f:dd:83:
48:d8:25:5b:3c:b3:0e:1a:6a:aa:64:3b:4a:4f:e6:
8c:4b:91:48:5a:53:ae:55:aa:d6:01:18:d5:30:19:
4b:8a:54:3d:a7:fe:b1:68:e3:c2:e3:90:d8:0e:d2:
1f:b1:00:23:f9:6f:7b:06:d6:02:21:94:66:87:fd:
4b:39:7b:33:2f:fb:bc:f6:4f:fa:bc:cd:64:e4:bc:
10:0c:60:20:54:a3:a1:3e:32:5a:9b:68:02:83:b5:
0d:81:c7:95:2a:18:b7:fd:a7:88:ad:99:dc:05:5d:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:0C:EC:66:5C:F5:E1:9B:43:44:56:A2:75:FD:CE:52:C6:34:5B
X509v3 Authority Key Identifier:
keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:88:40:90:90:20:d9:1d:4c:97:94:66:76:ec:41:d3:44:
7e:e6:8c:18:e6:9e:9a:76:9e:49:d8:7b:66:aa:b2:f9:c2:d0:
89:3f:f3:b9:cc:e2:fc:62:82:8c:af:c9:18:35:d5:ba:c0:f4:
56:05:96:e4:d5:9c:de:e2:94:f3:48:97:27:d3:84:f6:e9:07:
c7:dd:ff:15:8f:44:8a:49:ae:55:26:12:1a:dc:61:a7:bf:93:
f0:9a:03:9f:d4:d6:87:97:62:a5:b2:77:38:78:24:55:fc:51:
3a:ca:0c:74:72:c1:5e:d6:1c:b0:54:78:4c:9f:ee:1e:b7:6a:
12:0f:ee:d2:67:eb:5b:79:c9:1d:fe:1b:27:84:98:e6:2e:57:
df:50:ed:3e:fe:a5:2a:43:f1:6b:ee:4e:7e:81:4c:e7:2e:74:
ee:92:f5:e2:08:dd:cd:c9:99:a1:60:c9:3e:cd:5b:4d:19:33:
23:9f:52:7a:47:29:d3:e6:02:f8:19:e3:78:ef:10:b0:ec:89:
d3:5f:ca:9d:c5:1e:ca:11:61:24:95:af:a7:a3:6d:a0:fa:ca:
c5:23:4f:90:b7:7a:18:85:70:23:4e:0d:fd:5b:a5:23:7a:82:
91:c3:aa:40:6b:dd:ef:c2:25:ab:a6:1f:e1:d5:c8:0f:02:67:
f0:de:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:09:16 2026 by rpki-client