
Error: rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File: BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier: snlF+BtfL1VUeCvhz+wB0scSlPESp85dlF5NRUYkCT0=
Subject key identifier: 0C:DD:2E:D9:BD:78:40:0F:6A:A4:84:32:D8:70:86:DB:CD:A1:53:91
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer: /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial: 04D2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number: 04CC
Signing time: Sat 10 Oct 2026 03:34:17 +0000
Manifest this update: Sat 10 Oct 2026 03:34:16 +0000
Manifest next update: Mon 12 Oct 2026 03:34:16 +0000
Files and hashes: 1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: WVg6U+wFR10Yc6YXiaXitoxvBLRbK05LTwXVH3kWoQY=)
2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367676CAF, serialNumber=0601535601327F433F8D8427204C50942084AD56
Validity
Not Before: Oct 10 03:34:16 2026 GMT
Not After : Oct 12 03:34:16 2026 GMT
Subject: CN=6ac9b239-7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:7e:98:86:63:a9:35:b4:0d:50:bb:71:0b:
24:21:27:13:83:f1:d4:3d:aa:8f:aa:ca:b9:f9:f6:
e2:01:af:76:69:fc:fc:12:5a:09:21:04:b5:6c:4b:
2c:42:51:8d:30:5b:b6:3f:a0:bb:07:de:e4:94:25:
e0:f6:a6:ef:55:7a:c3:3e:c4:89:84:bf:10:15:ba:
63:34:63:79:25:74:a7:bf:1e:a4:6c:d6:09:00:59:
b7:49:9d:fe:fc:7c:d0:6b:b0:99:0b:c2:25:a7:d3:
7b:af:44:0d:dd:f9:04:02:ad:02:1d:dd:61:36:65:
52:bf:8f:2a:3b:b3:b0:e5:5a:ad:f1:f8:44:6c:94:
c4:eb:6b:bf:09:61:03:23:59:eb:76:ab:67:76:e7:
5a:44:f5:8b:93:b0:28:88:f0:67:f6:5e:89:20:e8:
2b:79:02:24:22:06:5d:09:14:2d:03:cf:f9:0b:cf:
39:74:55:6e:1d:0b:13:bb:33:60:e0:53:0b:6d:b6:
27:58:f5:2f:80:1e:f4:e0:ae:33:9f:b0:3c:37:47:
30:32:44:88:54:14:2a:97:ae:82:84:10:a0:46:52:
4a:f6:1e:2e:fb:78:cd:8d:3a:50:70:f0:f7:50:52:
c9:2c:ec:21:eb:32:7a:17:55:7d:fa:3f:e6:c7:c2:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:2E:D9:BD:78:40:0F:6A:A4:84:32:D8:70:86:DB:CD:A1:53:91
X509v3 Authority Key Identifier:
keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:56:00:9f:65:5f:d2:5b:7b:e5:24:ba:40:bb:55:bc:12:
01:fe:bf:03:83:92:3a:3c:09:14:a4:ab:d6:48:c6:2d:2f:fb:
ed:c0:5d:b6:41:70:32:25:d4:0d:32:e8:fc:7c:7f:7f:51:ee:
29:25:15:a4:42:3d:8a:3b:6a:12:d4:43:5b:c8:87:e1:9f:57:
f5:3f:ee:c4:7c:bf:a6:19:e4:ed:8a:64:82:3c:f7:28:a4:10:
b1:a8:7d:aa:4e:12:cb:93:11:85:23:3d:9f:8e:3f:ef:d9:d7:
6f:82:df:0d:e7:23:d4:be:ca:42:10:04:ae:8e:78:3e:35:d8:
56:5a:c6:7c:59:d7:83:15:3e:d1:19:c0:19:83:f2:1b:36:ed:
c1:62:f4:e1:e0:09:32:16:ef:f8:7c:6a:1d:18:56:37:f0:55:
15:80:a3:f1:17:17:e3:7a:4f:a9:e6:d1:46:4e:18:b4:0e:5a:
5a:c8:c0:cf:c8:d5:df:5e:7a:74:44:3e:a7:34:d6:4c:c2:23:
76:c6:f2:d5:e2:dd:c3:72:f5:ba:1a:5b:9d:29:b5:7e:ee:1c:
66:34:2a:45:f4:fa:cb:a2:28:34:cb:47:78:5d:30:90:6b:6f:
a2:03:78:da:0d:b2:1b:ed:9f:26:5b:7a:ed:a2:cd:6d:f3:b9:
91:bd:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:14:55 2026 by rpki-client