
Error: rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File: tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier: CEqtcVAZRPfIEDR7BC7bCLg2W90THVRjw+SzGLwhuLc=
Subject key identifier: 24:F5:B4:F4:BF:F4:45:77:BD:09:7B:5E:1B:99:E6:4B:82:16:8D:30
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer: /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial: 0321
Authority info access: rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number: 031E
Signing time: Mon 19 Oct 2026 04:26:55 +0000
Manifest this update: Mon 19 Oct 2026 04:26:55 +0000
Manifest next update: Wed 21 Oct 2026 04:26:55 +0000
Files and hashes: 1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: 7qE001RUyA+N3Yd5BJz3o85v3mAvlctNm5yRcNALjss=)
2: D4BB84D2FB4D11F0813767BCDAE4EC9C.roa (hash: 6orY5HDTrqcJDGgLrnlopPbVVmnOGIchGbKlp8nWwkA=)
3: E4F48340FB5611F0A42CE5F2DAE4EC9C.roa (hash: c43xolzw0tHDkUtxlVN9yifXJdNfipBBPwirCFEY2fE=)
4: A9F8F834FB5611F0A8B511EFDAE4EC9C.roa (hash: clMvWxZhI/yPXjk9yvhw+m8VCG7iFUmKLeS0+j0MYWg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Validity
Not Before: Oct 19 04:26:55 2026 GMT
Not After : Oct 21 04:26:55 2026 GMT
Subject: CN=6ad59c0f-c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:8b:0b:8a:37:16:f7:72:e0:73:36:bd:c2:
e4:42:be:9c:fa:28:ed:e4:e0:0f:33:58:65:64:4e:
55:5c:9c:05:a3:67:63:c7:07:b6:29:c0:48:db:b6:
22:8d:e0:7d:53:1c:09:bb:99:20:38:b0:80:1e:58:
35:81:dc:5d:ae:59:9c:35:c4:d3:00:49:d5:e2:8b:
9b:64:12:57:71:ba:a0:27:02:c5:79:ec:1d:8a:8b:
c0:a5:be:bb:00:62:5e:af:ae:b6:d6:62:6b:63:16:
c9:0c:77:79:df:b8:76:0e:fd:05:97:e4:6c:a9:da:
49:94:d5:c2:7a:74:61:b9:5d:b0:cd:70:90:63:55:
df:8c:54:f4:b9:ab:0c:10:dd:3b:c8:84:7e:8f:5b:
9d:8b:e4:2b:64:af:20:3b:58:e2:51:62:6c:95:58:
46:7b:4e:7b:33:f6:45:53:60:a7:c2:96:5a:f7:72:
d8:81:94:6c:98:cd:9c:3a:7a:2d:e1:f3:de:99:a2:
20:22:cd:31:85:d3:a6:9f:22:47:0a:34:82:bd:8e:
28:67:a4:37:b0:8e:3e:5e:ef:dd:cd:34:b6:a3:f3:
ca:b9:af:eb:d1:c6:ee:01:52:b8:26:81:ca:51:da:
f5:a8:73:b7:29:19:dd:21:b6:1c:1e:82:0d:a6:02:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:B4:F4:BF:F4:45:77:BD:09:7B:5E:1B:99:E6:4B:82:16:8D:30
X509v3 Authority Key Identifier:
keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:38:59:73:28:ec:d1:da:ba:cd:9c:1a:6b:9a:52:39:2a:44:
10:64:e0:d8:9a:49:97:45:86:1c:7c:b4:f0:75:2e:25:10:d9:
6b:aa:2b:d6:1c:79:5f:0a:82:5b:98:c7:99:90:3b:c3:d7:96:
bc:ab:6c:a1:92:0d:5b:c6:f8:d0:54:75:28:c8:8c:ad:41:8c:
aa:9e:c0:9a:3e:9a:68:e7:4b:32:ad:e3:d5:01:55:6e:82:6b:
bb:4e:68:54:df:9f:dd:26:98:d7:60:fd:08:f2:d8:7d:81:de:
45:2b:8e:a5:da:46:ba:a4:55:72:09:2a:49:3f:59:e5:c5:ee:
b3:1f:2d:0c:61:bb:f7:bf:f9:b4:de:1f:ad:bd:e1:97:9a:ee:
2b:3e:d5:c6:61:21:87:b1:84:5d:b7:75:31:53:12:0a:32:49:
4d:8c:e4:18:fd:f3:07:e0:a6:b1:ee:73:2b:95:5f:82:62:22:
b5:cd:7b:6b:47:a9:00:c3:74:b9:b3:25:86:db:4b:ab:91:20:
88:24:ae:6f:8b:03:35:b8:33:16:28:01:71:75:b8:e2:9e:12:
24:b9:4c:f9:90:43:52:cc:33:7f:68:cb:de:52:42:7e:30:c6:
91:59:d8:f6:ce:af:24:af:a3:38:14:0a:1c:2f:3c:83:1a:e0:
12:12:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:10:40 2026 by rpki-client