
Error: rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File: pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier: yJF2wT7ACGWPumzqQ4LI4+Kn5ljXN9RTDMZGOUXwr8k=
Subject key identifier: 20:CD:26:F7:9A:BD:A7:11:59:85:4B:78:44:E0:E1:7E:9B:8D:39:AA
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer: /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial: 02CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number: 02CB
Signing time: Tue 22 Sep 2026 04:35:55 +0000
Manifest this update: Tue 22 Sep 2026 04:35:54 +0000
Manifest next update: Thu 24 Sep 2026 04:35:54 +0000
Files and hashes: 1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: w4TgjW5i44jvSln3Ph3wQmQ/Vm8HZDb1GrpptKOtYdE=)
2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3672189AF, serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Validity
Not Before: Sep 22 04:35:54 2026 GMT
Not After : Sep 24 04:35:54 2026 GMT
Subject: CN=6ab205ab-adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:ef:e2:b3:e7:dc:fd:83:67:67:58:10:1d:
97:64:c7:2d:41:68:8d:49:16:00:0e:6a:91:97:bf:
9a:57:c0:c9:26:cc:13:9f:da:42:2f:8d:fb:65:0a:
1f:93:b4:ff:17:ef:60:62:18:77:c0:ae:00:54:08:
83:14:96:7f:db:a1:d1:66:55:71:40:c4:56:12:e1:
dc:51:52:2a:7d:07:45:93:2b:36:0b:df:08:34:f6:
74:c3:93:f2:1f:b9:01:b2:46:1f:7e:bc:08:3f:1a:
f5:13:67:c3:45:16:2b:14:26:1a:c8:09:cb:a4:b9:
3d:ad:cb:7e:d9:dc:c6:6a:1e:14:9b:d6:0b:e3:a0:
82:f3:5e:db:87:d1:b3:14:bc:dd:21:ce:65:de:71:
98:47:2a:06:d0:37:81:21:75:a5:66:37:dc:b5:aa:
ac:42:ce:5a:98:90:33:75:d2:a0:de:fd:c3:3e:09:
b4:f5:cb:86:3c:14:9c:a5:5e:16:9f:03:b3:ff:9f:
06:69:25:82:a9:74:51:13:fb:20:7e:60:c6:df:bb:
c3:4f:21:03:01:d1:f0:1a:3d:4f:89:a1:a7:77:b3:
74:df:02:a1:3e:32:96:27:04:6a:75:7e:a2:81:12:
cc:f2:ee:d6:23:7b:6d:f1:54:c8:7e:c8:51:bd:49:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:26:F7:9A:BD:A7:11:59:85:4B:78:44:E0:E1:7E:9B:8D:39:AA
X509v3 Authority Key Identifier:
keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:6c:e8:9d:05:c4:1e:b8:e9:3c:d6:1b:a6:6f:03:a5:d2:38:
6d:04:85:9c:82:a5:fa:11:7f:74:78:6c:d3:6f:d4:26:52:5a:
10:ab:4e:c4:c1:ba:81:a3:93:08:23:08:d3:b9:37:1a:1a:7c:
98:fd:db:5f:72:10:a5:0d:fe:cd:3c:7b:38:a8:b7:cf:be:c3:
f6:03:9a:d5:7f:84:10:3c:7a:f7:0e:36:ff:a0:ab:b6:7d:8f:
8b:55:89:fc:63:f1:63:1b:47:95:0d:0c:57:79:fb:f5:4b:1e:
ff:1c:19:6a:71:1e:20:15:4c:f6:9b:0b:b1:59:60:eb:cb:8b:
db:2e:4b:98:b3:3e:a6:48:3f:98:22:84:19:a9:1d:4b:44:be:
84:29:52:96:6b:8f:fd:14:a3:3b:f9:d1:f5:b2:6f:74:0e:24:
e9:62:0d:30:fb:4f:35:d9:ce:dc:01:7b:c3:1a:51:aa:88:bc:
a6:bb:99:15:c7:02:40:d1:97:0b:50:54:8f:72:bd:0b:a4:df:
d2:21:6a:c0:e9:8e:9e:ed:fa:c2:b6:8c:eb:22:01:e3:e7:b9:
05:ad:60:f1:bc:f9:f3:39:16:b0:92:79:dd:28:96:d9:2d:9b:
51:72:81:dd:b1:f2:59:95:55:3d:ef:96:4e:c7:ac:62:35:dc:
89:8b:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:08:42 2026 by rpki-client