
Error: rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
File: wOYNgogYoMFe_zoSBJ5ldVl-2as.mft (raw, json)
Hash identifier: VyLqrG9l7z4xhBWzhFi1GPY1Vc9qHueaKVTfrW+jqIQ=
Subject key identifier: 64:52:2E:2A:D0:8D:7A:83:7C:5B:CE:BE:08:A5:B1:DB:10:C3:34:7B
Authority key identifier: C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
Certificate issuer: /CN=F3668B03AF/serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Certificate serial: 025A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
Manifest number: 0250
Signing time: Sat 10 Oct 2026 04:51:12 +0000
Manifest this update: Sat 10 Oct 2026 04:51:12 +0000
Manifest next update: Mon 12 Oct 2026 04:51:12 +0000
Files and hashes: 1: wOYNgogYoMFe_zoSBJ5ldVl-2as.crl (hash: ZkJZGdJ2nsAHikoWrRh7PAB46aL6gzPC3B1NFeXTYSc=)
2: AFB09FE85DE411F1B0AD89D6CE1D38B0.roa (hash: lK9+gcJD82OD1cd0EMb+E1EuCpe3/JebmMS7KJQRTDY=)
3: 0F3FA91E5DE411F18A9EF1D2CE1D38B0.roa (hash: 7LqF0h4HZlgH4xiK7+BEC8hYEvQZpFaEw4sMQ+xElKs=)
4: 459839D618D411F1AC5BCD9ADAE4EC9C.roa (hash: BfFfHk0YqSC5jIwTInr9vZ02QnCCqNGC6jKPrxhqZps=)
5: 02C3A866011511F0B85D595C762E951A.roa (hash: jjWJv8b3JwAacmiRwWHsf5c1g04d/JXZDr1YDZRSVgg=)
6: 6A3CAA065DE411F199794AD6CE1D38B0.roa (hash: 917FqsA/LK7EQ13YXGZzA5d97W1Nzk/ziVaJ/T9Mseo=)
7: 6B04BB22011511F0AF554960762E951A.roa (hash: 3WxUCfRbXJ1KMY5g7/PNsdsO7X5TUzWeRweVMnOzn2Q=)
8: 8A1C38AA011511F09CFA5260762E951A.roa (hash: 76MSxtrGiXL8x2iTNDj99rJpOIwY8C0w+GKIRo/LlHY=)
9: 5528519ED06111F0B42A39DBDAE4EC9C.roa (hash: dc3fqMjgMKVnImUXAIw9Qm0yHwzcLKrwq1GaH8jBDQc=)
10: 358C3F1A5DE411F1BB2F0DD6CE1D38B0.roa (hash: HiXxXfq8y3MSa+ebFIcxUHo9G0Yk8MPlrY+KbF+ox9w=)
11: 3900BD24011511F0AB987C5E762E951A.roa (hash: KfnKWuYweFK309tVQ3urF8PcdLsH1nWr94hlvdL2KXs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668B03AF, serialNumber=C0E60D828818A0C15EFF3A12049E6575597ED9AB
Validity
Not Before: Oct 10 04:51:12 2026 GMT
Not After : Oct 12 04:51:12 2026 GMT
Subject: CN=6ac9c440-9eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:2e:be:7e:2a:9f:12:86:f1:87:64:bb:6c:
83:a2:b4:97:89:7d:5e:6e:76:d2:20:f2:07:52:de:
5c:d7:a2:5e:54:8f:5b:53:eb:14:60:f3:c5:f5:ed:
94:cf:0c:20:b8:90:08:df:be:ba:a4:d9:4f:cc:47:
b0:b3:31:77:74:fb:30:f5:b5:01:59:86:fe:5b:56:
1f:5f:39:f7:42:64:73:cc:8d:9a:78:95:1a:6d:fd:
e7:97:3d:65:9f:b6:4d:77:ef:73:ae:4b:2c:93:48:
73:26:cd:9c:fe:54:f2:65:6e:65:f7:38:e8:81:95:
7e:d4:30:5e:6e:2f:1b:05:6c:5c:03:64:08:20:f8:
b6:2a:8d:06:c6:c5:18:f6:06:28:67:c2:da:ac:11:
e6:99:4b:7e:ed:8c:c4:7d:e3:97:76:6f:f8:5e:b7:
6d:b9:5a:75:84:13:01:29:70:38:01:50:81:ce:bf:
ed:ab:7a:3b:75:f4:fd:cc:d9:4c:ab:41:6c:e0:31:
23:ab:31:39:2c:1a:bd:af:d9:0a:ba:77:a3:0d:5b:
5b:72:8b:e5:9e:44:fc:40:ed:79:e3:f8:e8:66:1c:
22:49:24:70:2b:5b:35:d0:e7:68:1e:d5:45:e6:85:
6b:1c:54:f0:80:09:bb:c9:5f:04:dd:bb:59:08:c3:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:2E:2A:D0:8D:7A:83:7C:5B:CE:BE:08:A5:B1:DB:10:C3:34:7B
X509v3 Authority Key Identifier:
keyid:C0:E6:0D:82:88:18:A0:C1:5E:FF:3A:12:04:9E:65:75:59:7E:D9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wOYNgogYoMFe_zoSBJ5ldVl-2as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668B03/6F9343B2011411F0BB17FC57762E951A/wOYNgogYoMFe_zoSBJ5ldVl-2as.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4a:46:56:66:39:44:4d:21:39:33:d5:d6:51:c5:ba:ca:35:
9d:b2:47:38:df:cd:e4:fc:50:8e:77:a7:2f:26:3f:23:b2:55:
87:57:a7:13:74:22:22:39:27:58:8f:d3:4f:76:7a:ed:a8:6f:
9c:5e:73:de:be:f0:bb:23:42:d8:44:3e:05:52:99:2c:df:e1:
aa:30:e0:84:ea:7c:91:fb:4f:f9:52:21:a3:a0:05:de:59:46:
33:cf:44:7c:e4:19:e5:62:12:f8:f9:a9:c3:ea:b1:56:41:63:
af:1e:06:65:9e:2d:f5:51:de:61:d5:3e:03:7b:f6:ca:7a:c3:
d6:c2:cf:d3:e5:a1:16:77:7a:bc:28:90:32:67:a4:d1:b0:da:
dc:f7:e5:22:82:bf:c0:03:f4:df:07:8c:0d:6c:4d:d0:5d:f2:
43:c9:f4:64:f6:4c:42:29:c1:db:96:b8:cf:a8:58:5d:00:6c:
7d:1e:73:26:b1:40:17:5d:b3:42:a9:7e:a8:60:9d:25:87:df:
88:6d:7c:15:6c:6b:e7:5c:fb:4e:c2:d0:d7:37:53:be:87:a0:
1a:60:e4:62:54:4d:fd:55:ed:c3:94:b1:1d:7e:81:b2:ef:0b:
74:b0:16:66:b4:1c:33:99:9c:76:f3:8c:2e:e5:ec:0e:c7:bb:
cb:c7:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:27:56 2026 by rpki-client