
Error: rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
File: Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft (raw, json)
Hash identifier: Tkt3wmY23yJIs4CRiBhLk5B114kb9dxSFgvuC2grAq4=
Subject key identifier: 3F:EA:68:17:29:46:17:FB:F7:1D:6A:BA:83:5A:07:E7:FC:9B:1A:07
Authority key identifier: 5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
Certificate issuer: /CN=F3664F7BAF/serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Certificate serial: 41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
Manifest number: 3E
Signing time: Thu 24 Sep 2026 05:47:11 +0000
Manifest this update: Thu 24 Sep 2026 05:47:10 +0000
Manifest next update: Sat 26 Sep 2026 05:47:10 +0000
Files and hashes: 1: Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl (hash: 3l18MMWbmXtMJspcc7uErQ/TI7rWVnbs5RH7I0UutGY=)
2: F26EC26A8A4E11F1B7AEDED7CE1D38B0.roa (hash: aCcxDmtX/tnLhZ6JcUFSofoUniwx3floStRDNlGRoHU=)
3: B9E595E08A4E11F18F6CB1D7CE1D38B0.roa (hash: B4ThLzrbIVO16jLTzmKePpz4F2ddN768weBvs+JXx/U=)
4: D71B62A28A4E11F1B606C7D7CE1D38B0.roa (hash: KR4X6gtcRk+5VuKUYUA4G1pQskL0suzWflfpye7zrSA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 05:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664F7BAF, serialNumber=5E3C3F19D34150AB3D3BF4C27F6B11658ADD51BC
Validity
Not Before: Sep 24 05:47:10 2026 GMT
Not After : Sep 26 05:47:10 2026 GMT
Subject: CN=6ab4b95f-c84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:a0:4c:95:9e:04:6a:86:e2:e8:1c:50:5b:
c4:26:8f:c9:f6:cc:43:b3:f7:11:2f:87:cc:04:4e:
2a:3c:60:2e:48:46:b5:dc:bf:1c:29:aa:3e:bd:c1:
8d:fc:d2:eb:77:91:1a:db:4d:25:59:d9:b8:23:84:
38:7e:01:5c:e2:61:59:78:e9:d7:b6:04:dc:6a:32:
a4:ee:ec:a9:75:50:1d:e4:f7:9d:54:09:c1:21:c6:
24:99:5e:e8:e2:3a:bf:82:74:fe:d4:cd:9b:69:67:
81:f3:61:de:15:80:d3:6e:f2:07:86:e5:e0:a6:fd:
77:7b:ad:42:13:8d:b5:90:bb:cc:a0:96:bc:26:5e:
86:f3:29:bd:df:ba:40:e2:06:b3:57:9f:27:4b:11:
97:9f:80:b6:56:11:44:da:74:ab:23:e9:84:5d:6d:
32:57:07:5f:bc:6e:36:24:54:2f:d5:33:83:6c:dc:
c6:19:d0:1f:01:a0:c6:99:c1:51:cf:c0:83:a5:23:
b8:25:bf:65:68:18:b0:11:5b:ba:c2:cc:9d:e6:fd:
b3:c3:15:86:bd:40:96:7a:ee:3a:43:82:4b:20:88:
bb:b7:9a:b5:7a:77:01:57:c2:a4:a3:45:31:2a:41:
39:0d:61:ef:39:bc:cb:69:bc:1a:c3:be:23:2e:61:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:68:17:29:46:17:FB:F7:1D:6A:BA:83:5A:07:E7:FC:9B:1A:07
X509v3 Authority Key Identifier:
keyid:5E:3C:3F:19:D3:41:50:AB:3D:3B:F4:C2:7F:6B:11:65:8A:DD:51:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664F7B/52128B188A4D11F1AE1B3ECFCE1D38B0/Xjw_GdNBUKs9O_TCf2sRZYrdUbw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ea:a5:f8:bc:39:65:71:59:7a:11:06:5d:ac:d4:75:f6:f6:
c6:bd:ef:31:18:cf:37:06:1c:20:16:e5:92:8b:f3:32:54:ab:
7d:f2:9d:ee:1e:52:b6:df:33:34:08:bf:02:3e:a5:ce:3b:c8:
fd:63:6f:71:93:be:70:e1:c1:14:d7:ad:9d:bd:7b:15:71:09:
ac:6e:45:4c:cb:9e:02:ca:d5:32:de:a5:d7:61:37:d0:70:66:
81:95:1a:24:06:cb:b8:d0:31:e7:6e:f1:9d:d7:d2:0c:a0:06:
ed:ae:19:aa:4a:79:2d:d7:e4:98:2a:77:1b:67:78:81:ed:f5:
a6:a7:86:92:21:db:8d:63:64:46:38:bd:0b:c9:f9:c2:4b:c4:
cd:bb:c5:2f:31:f2:02:50:bc:47:a1:b9:78:26:85:55:e0:57:
35:f8:7e:bd:df:86:cd:12:b5:8a:b3:e5:d0:1f:06:c5:b7:aa:
d8:c5:56:f6:35:e9:5c:91:15:e7:b9:80:6e:9b:dc:9f:e3:c2:
f2:8b:4f:9f:4e:0b:a8:c1:3b:45:06:57:2e:27:c0:f1:b7:62:
1d:78:04:44:91:d0:e8:57:bd:c9:54:24:e2:e0:d2:63:7d:28:
78:54:b7:84:07:84:2b:0e:91:9d:34:9f:90:10:5e:3c:cb:b6:
94:de:95:5d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
NEY3QkFGMTEwLwYDVQQFEyg1RTNDM0YxOUQzNDE1MEFCM0QzQkY0QzI3RjZCMTE2
NThBREQ1MUJDMB4XDTI2MDkyNDA1NDcxMFoXDTI2MDkyNjA1NDcxMFowGDEWMBQG
A1UEAxMNNmFiNGI5NWYtYzg0ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN4HoEyVngRqhuLoHFBbxCaPyfbMQ7P3ES+HzAROKjxgLkhGtdy/HCmqPr3B
jfzS63eRGttNJVnZuCOEOH4BXOJhWXjp17YE3GoypO7sqXVQHeT3nVQJwSHGJJle
6OI6v4J0/tTNm2lngfNh3hWA027yB4bl4Kb9d3utQhONtZC7zKCWvCZehvMpvd+6
QOIGs1efJ0sRl5+AtlYRRNp0qyPphF1tMlcHX7xuNiRUL9Uzg2zcxhnQHwGgxpnB
Uc/Ag6UjuCW/ZWgYsBFbusLMneb9s8MVhr1AlnruOkOCSyCIu7eatXp3AVfCpKNF
MSpBOQ1h7zm8y2m8GsO+Iy5haqMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ/6mgX
KUYX+/cdarqDWgfn/JsaBzAfBgNVHSMEGDAWgBRePD8Z00FQqz079MJ/axFlit1R
vDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjRGN0IvNTIxMjhCMTg4QTREMTFGMUFFMUIzRUNGQ0UxRDM4QjAvWGp3X0dk
TkJVS3M5T19UQ2Yyc1JaWXJkVWJ3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWGp3X0dkTkJVS3M5T19UQ2Yyc1JaWXJkVWJ3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY2NEY3Qi81MjEyOEIxODhBNEQxMUYxQUUxQjNFQ0ZDRTFE
MzhCMC9YandfR2ROQlVLczlPX1RDZjJzUlpZcmRVYncubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEzqpfi8OWVxWXoRBl2s1HX29sa97zEY
zzcGHCAW5ZKL8zJUq33yne4eUrbfMzQIvwI+pc47yP1jb3GTvnDhwRTXrZ29exVx
CaxuRUzLngLK1TLepddhN9BwZoGVGiQGy7jQMedu8Z3X0gygBu2uGapKeS3X5Jgq
dxtneIHt9aanhpIh241jZEY4vQvJ+cJLxM27xS8x8gJQvEehuXgmhVXgVzX4fr3f
hs0StYqz5dAfBsW3qtjFVvY16VyRFee5gG6b3J/jwvKLT59OC6jBO0UGVy4nwPG3
Yh14BESR0OhXvclUJOLg0mN9KHhUt4QHhCsOkZ00n5AQXjzLtpTelV0=
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:05:42 2026 by rpki-client