
Error: rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
File: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft (raw, json)
Hash identifier: hTXCpxBv/iPxjt3M+s7yy2iwz+23+xbUcXLe4p4TqVQ=
Subject key identifier: FD:92:62:13:B4:D6:F2:2B:55:EA:2A:85:9B:A3:7B:AA:1A:8C:6E:B4
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Certificate issuer: /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial: 0750
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
Manifest number: 074D
Signing time: Sat 26 Sep 2026 02:26:25 +0000
Manifest this update: Sat 26 Sep 2026 02:26:24 +0000
Manifest next update: Mon 28 Sep 2026 02:26:24 +0000
Files and hashes: 1: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl (hash: 2b7qETkBaeIOM/Bvt8/NUjRNx/BqNL5mkMdd1ot+txI=)
2: BD0C7DBC380D11F18A57DDC6CE1D38B0.roa (hash: rNqr6ePtKQX1J3H/I2YyE9KJzZOp2y7GxGrWjPkr6Co=)
3: 035CAA908B7311F195CEEFC9CE1D38B0.roa (hash: qcBetUd8xC2jeGG+Hn5C4gKtPrfGhAKKzRv2pUT1GwI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669277AF, serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Validity
Not Before: Sep 26 02:26:24 2026 GMT
Not After : Sep 28 02:26:24 2026 GMT
Subject: CN=6ab72d51-eb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:cb:78:06:13:06:77:4f:65:e4:fb:36:35:
89:d2:6d:f0:2b:04:4a:d2:60:56:0c:9f:c4:df:eb:
cb:b3:33:ab:c6:80:d5:08:11:5e:79:0e:78:c4:21:
04:92:7a:a6:7f:98:f4:3e:4f:a7:c5:14:d3:40:2c:
12:2e:c0:f2:e3:45:8c:8a:e9:8e:2a:99:b2:de:37:
83:5c:e2:88:03:91:4c:df:5e:77:cc:c6:ad:b0:dd:
b0:9a:da:58:5b:04:6f:78:93:9f:7c:fc:82:e0:bf:
d1:9f:e0:b0:a4:f9:03:43:a1:82:92:85:a5:2d:eb:
02:30:86:24:9c:b8:15:9e:f9:4f:d7:b0:3e:0c:ed:
54:b5:2f:e1:30:cb:f2:58:9b:fc:2c:eb:e4:ba:15:
9a:d2:b0:c4:0c:c0:7b:8f:9b:29:b4:d4:9a:b7:98:
b7:e0:58:51:c0:17:aa:a7:41:22:8e:c5:bb:b3:63:
56:c1:2e:97:1f:88:7f:41:36:9a:23:37:14:db:bf:
2b:7b:f0:0d:26:5c:a4:b9:31:6a:00:98:05:8c:e5:
b9:ee:b0:72:f7:aa:b0:af:1b:00:c8:24:7e:35:ae:
db:89:e0:11:a3:a6:55:6b:21:ae:e4:2f:0a:41:27:
af:40:a9:1e:c9:18:f4:50:99:93:e4:57:93:08:27:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:92:62:13:B4:D6:F2:2B:55:EA:2A:85:9B:A3:7B:AA:1A:8C:6E:B4
X509v3 Authority Key Identifier:
keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:7a:e5:c8:bf:5c:bf:75:62:d9:40:dc:9a:be:b3:21:d7:
ae:09:7f:89:b7:59:52:f5:f9:ec:1e:20:2b:5f:89:90:cf:8d:
d4:fb:03:97:b1:ec:2b:33:01:95:3e:b5:09:eb:f6:17:3b:f4:
17:b6:71:30:92:5c:23:a1:ce:66:e2:10:83:8e:a3:1b:ef:3d:
b4:73:63:af:64:5b:90:91:6f:0b:f5:2b:12:04:7d:d1:69:85:
e4:0b:59:76:34:58:f1:54:df:97:1e:3c:c0:5f:c8:b2:02:3f:
0d:13:9e:8d:5c:28:5c:ff:dd:90:5a:9f:db:fa:65:7c:7a:70:
86:15:3d:42:a6:f6:e2:f8:57:ed:eb:cb:f2:76:2a:21:8d:da:
bf:aa:a8:fa:67:04:07:3c:da:7f:59:22:4f:74:7f:cb:4c:0a:
df:c4:6a:95:9d:aa:5f:d0:58:71:e7:65:e9:1d:b6:cf:5f:b9:
ff:59:1b:65:59:75:b1:8b:e2:d3:c9:c7:08:bb:5a:4e:8e:8f:
c5:28:f1:ac:b8:60:89:70:66:e5:b2:90:a0:4d:83:6b:c4:84:
00:3f:b1:cf:87:0f:a5:ca:fe:5c:50:34:63:fe:44:4d:9c:cb:
99:89:85:88:16:4d:c7:d9:ea:7e:53:0c:32:c0:25:87:ba:2a:
ca:a1:9c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:28:00 2026 by rpki-client