
Error: rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File: f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier: dk/4dt9OQp+3b2/7UjFnl1Cw3BC9YHkS17KBbtTTWdI=
Subject key identifier: 56:E5:FA:D7:4D:19:2B:BA:15:7F:82:77:8E:73:90:36:78:75:3F:D5
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer: /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial: 0958
Authority info access: rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number: 094F
Signing time: Mon 21 Sep 2026 01:48:32 +0000
Manifest this update: Mon 21 Sep 2026 01:48:31 +0000
Manifest next update: Wed 23 Sep 2026 01:48:31 +0000
Files and hashes: 1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: pfJjKhROiKkPLGT0iiFegbY5iPlVS8AqCCx9U7c0Dw8=)
2: 99A8625A96FE11F19C5185EDCE1D38B0.roa (hash: ECeVYVnqSVePtrNnv7WRQg4E/vshrUHBa3IjZ0zix/s=)
3: 5F3603A4962A11F1933886E0CE1D38B0.roa (hash: KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=)
4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
6: F3C4F07896FE11F1AAB3ACEDCE1D38B0.roa (hash: 2/iMpDmTcl0zOebckPQ0ks803UQyEcERHUqi3OJVhhg=)
7: 51F67174962F11F188DB07FDCE1D38B0.roa (hash: C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=)
8: 5EFC7BDC8A6511F19E0DA0DFCE1D38B0.roa (hash: c6XaX+zU98bORccST4vkvWDGnTdu9fL1YRi4X5XYzmE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 01:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Validity
Not Before: Sep 21 01:48:31 2026 GMT
Not After : Sep 23 01:48:31 2026 GMT
Subject: CN=6ab08cf0-0ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:f2:6c:51:dc:ed:7b:dc:2e:78:c8:db:41:
5a:1e:ab:f1:f3:68:37:ca:76:36:7e:69:dd:ec:cc:
85:1d:37:33:18:17:42:6a:8a:c3:b6:e0:aa:0d:e4:
73:b6:26:f9:4b:7f:0b:94:49:ce:13:bd:95:cf:12:
ed:92:e2:48:fc:c2:05:f5:89:36:8b:ed:b7:73:72:
a7:d6:ab:a7:97:86:04:e8:0a:f7:11:c1:60:bd:93:
88:5e:f1:1d:f1:db:8a:f5:5e:5d:37:dc:e4:02:90:
a5:2c:71:95:84:2a:c3:d3:ab:24:f6:36:ec:60:3b:
4f:b8:af:23:05:25:ad:a9:5d:7f:91:56:f4:58:43:
56:2d:73:58:ce:a3:2a:2b:a0:a1:59:93:71:22:4d:
17:7e:73:04:86:8f:7b:12:8b:4b:05:e3:77:51:13:
cb:a6:e4:74:6d:a1:dc:97:13:bd:fc:4c:a7:7f:87:
a4:ad:d9:1d:9f:c1:f3:d5:41:90:77:f8:b9:33:93:
39:bb:49:48:23:6e:b8:8a:e1:de:a1:a9:67:11:cb:
01:b2:e3:2a:4b:45:fa:bc:bf:58:85:62:6b:2b:32:
33:61:5b:12:9c:63:e2:78:aa:64:e2:d0:00:61:4b:
09:60:5c:7a:16:72:38:f6:0b:a5:db:fd:d6:53:fe:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:FA:D7:4D:19:2B:BA:15:7F:82:77:8E:73:90:36:78:75:3F:D5
X509v3 Authority Key Identifier:
keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:99:5d:e0:84:85:a9:04:e4:90:0e:d0:0a:61:9a:b2:bf:b7:
d4:f7:fe:ee:23:ae:20:82:c1:53:0d:c1:96:e3:20:31:ce:2e:
e4:52:a5:58:05:5a:f9:6f:d3:69:36:fd:9b:cb:c0:39:ca:77:
0a:1a:47:81:98:1e:be:a0:b5:66:c2:9b:c0:cc:f9:26:cf:cf:
38:5b:20:5a:2a:f2:cf:27:ae:86:6f:76:b8:b1:7a:8a:6e:c2:
a5:d4:df:33:8c:3a:61:e7:ea:ad:a7:7f:a8:9e:fb:d5:d5:1a:
dc:75:8f:84:60:6d:fb:4a:b8:c8:27:27:12:5c:16:5e:e3:95:
ec:6c:75:82:f1:2b:8d:7a:88:ea:53:4b:46:89:0b:34:ea:6d:
b1:ad:43:0b:1c:2f:8a:07:38:19:ea:f6:cd:f8:26:4e:00:a6:
40:e1:00:d0:9a:75:a7:e0:94:57:36:63:25:e4:b0:c7:be:b1:
5f:b6:a7:cb:f1:54:85:45:c7:9c:55:a2:0d:ad:cc:d0:fe:71:
75:2f:0c:ff:91:91:be:18:4c:f3:4e:8a:ca:40:6a:7d:46:d1:
09:a2:90:2f:f3:4f:dd:7b:99:49:b9:7c:dc:54:51:0e:0c:8d:
69:eb:18:2e:19:b7:ca:ad:11:ce:55:50:f6:84:29:38:aa:a3:
30:28:38:cf
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRDMTFBUjExMC8GA1UEBRMoN0Y5RUY0MzZCMzFFNTkyMDg5MDYzQzFFNkM0MzdD
RDJDM0ZFQTA0QjAeFw0yNjA5MjEwMTQ4MzFaFw0yNjA5MjMwMTQ4MzFaMBgxFjAU
BgNVBAMTDTZhYjA4Y2YwLTBkZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyg/JsUdzte9wueMjbQVoeq/HzaDfKdjZ+ad3szIUdNzMYF0JqisO24KoN
5HO2JvlLfwuUSc4TvZXPEu2S4kj8wgX1iTaL7bdzcqfWq6eXhgToCvcRwWC9k4he
8R3x24r1Xl033OQCkKUscZWEKsPTqyT2NuxgO0+4ryMFJa2pXX+RVvRYQ1Ytc1jO
oyoroKFZk3EiTRd+cwSGj3sSi0sF43dRE8um5HRtodyXE738TKd/h6St2R2fwfPV
QZB3+Lkzkzm7SUgjbriK4d6hqWcRywGy4ypLRfq8v1iFYmsrMjNhWxKcY+J4qmTi
0ABhSwlgXHoWcjj2C6Xb/dZT/ntnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUVuX6
100ZK7oVf4J3jnOQNnh1P9UwHwYDVR0jBBgwFoAUf570NrMeWSCJBjwebEN80sP+
oEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQzExLzk5NTk0NkJDOTY3ODExRUE4Nzk5OTU1QUY4QUVBMjI4L2Y1NzBO
ck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2Y1NzBOck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkRDMTEvOTk1OTQ2QkM5Njc4MTFFQTg3OTk5NTVBRjhBRUEy
MjgvZjU3ME5yTWVXU0NKQmp3ZWJFTjgwc1Atb0VzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXmV3ghIWpBOSQDtAKYZqyv7fU9/7uI64g
gsFTDcGW4yAxzi7kUqVYBVr5b9NpNv2by8A5yncKGkeBmB6+oLVmwpvAzPkmz884
WyBaKvLPJ66Gb3a4sXqKbsKl1N8zjDph5+qtp3+onvvV1RrcdY+EYG37SrjIJycS
XBZe45XsbHWC8SuNeojqU0tGiQs06m2xrUMLHC+KBzgZ6vbN+CZOAKZA4QDQmnWn
4JRXNmMl5LDHvrFftqfL8VSFRcecVaINrczQ/nF1Lwz/kZG+GEzzTorKQGp9RtEJ
opAv80/de5lJuXzcVFEODI1p6xguGbfKrRHOVVD2hCk4qqMwKDjP
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:11:19 2026 by rpki-client