
Error: rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
File: tKCUA2WAIUx9QccbjIZXpO4vQHI.mft (raw, json)
Hash identifier: 72KY45l3uhn5pvcIDI+Q3bMvc3ytAbSSlq9pBNbYhLw=
Subject key identifier: 36:5B:C4:4C:2E:D8:EF:7B:2A:BF:6E:F8:CA:03:DA:D6:BC:5D:DA:CB
Authority key identifier: B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
Certificate issuer: /CN=F367678FAR/serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Certificate serial: 031D
Authority info access: rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
Manifest number: 031A
Signing time: Thu 15 Oct 2026 04:26:04 +0000
Manifest this update: Thu 15 Oct 2026 04:26:04 +0000
Manifest next update: Sat 17 Oct 2026 04:26:04 +0000
Files and hashes: 1: tKCUA2WAIUx9QccbjIZXpO4vQHI.crl (hash: 4QXoHasNM0wEDcmqOquiXY2lyM6O3lQSGkWa0UYt8ho=)
2: D4BB84D2FB4D11F0813767BCDAE4EC9C.roa (hash: 6orY5HDTrqcJDGgLrnlopPbVVmnOGIchGbKlp8nWwkA=)
3: E4F48340FB5611F0A42CE5F2DAE4EC9C.roa (hash: c43xolzw0tHDkUtxlVN9yifXJdNfipBBPwirCFEY2fE=)
4: A9F8F834FB5611F0A8B511EFDAE4EC9C.roa (hash: clMvWxZhI/yPXjk9yvhw+m8VCG7iFUmKLeS0+j0MYWg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 Oct 2026 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 797 (0x31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367678FAR, serialNumber=B4A094036580214C7D41C71B8C8657A4EE2F4072
Validity
Not Before: Oct 15 04:26:04 2026 GMT
Not After : Oct 17 04:26:04 2026 GMT
Subject: CN=6ad055dc-92b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:31:e9:66:d0:8f:03:54:43:08:3b:12:69:
ac:3a:4f:0b:1c:29:11:59:c8:a0:cb:9a:82:4b:e4:
59:74:16:e1:26:48:ab:61:90:a8:42:91:26:92:31:
cb:f4:9a:bc:7c:ac:c0:de:04:d7:2e:8a:ac:c6:dd:
6a:48:1b:13:df:94:47:c7:56:92:5c:d8:4e:36:b6:
27:b1:44:52:e0:d6:c3:b9:83:59:e4:0c:0b:eb:eb:
18:bd:c5:5f:fc:78:3d:b7:47:cc:f1:3e:15:32:c6:
b3:e1:2d:03:9c:be:bf:41:94:ab:cc:01:46:fb:5f:
13:90:8f:bd:2a:c7:5f:e8:21:af:76:c7:09:ea:1b:
7b:ea:cd:0e:92:0e:e3:da:4c:86:be:30:9d:6d:06:
7d:e3:5d:81:b9:e5:dd:7b:5d:89:dc:5b:7e:20:84:
88:9b:50:30:7c:98:de:5e:c5:18:0a:3b:dd:b2:48:
7d:69:a8:71:c0:98:22:eb:ef:2d:44:4f:91:29:90:
48:ae:c4:59:73:eb:0f:cf:77:7a:97:12:0e:34:0d:
16:3b:45:42:56:14:65:36:bf:82:8e:9b:10:77:ca:
16:7c:ee:25:e8:b4:2a:63:e6:c6:54:e5:b2:e0:f3:
ae:46:72:c1:0f:3b:14:82:5b:f4:55:e7:82:b5:a4:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:C4:4C:2E:D8:EF:7B:2A:BF:6E:F8:CA:03:DA:D6:BC:5D:DA:CB
X509v3 Authority Key Identifier:
keyid:B4:A0:94:03:65:80:21:4C:7D:41:C7:1B:8C:86:57:A4:EE:2F:40:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tKCUA2WAIUx9QccbjIZXpO4vQHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/AB1C15EE650B11EF91C9D957762E951A/tKCUA2WAIUx9QccbjIZXpO4vQHI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:1a:7a:25:d7:68:9d:ad:29:34:6f:d5:ce:f1:fa:d4:d7:
6d:0e:ca:3a:7c:1b:55:f2:41:04:24:6a:f5:80:54:d6:3f:b3:
ae:55:b9:b2:1c:6b:32:a6:86:0e:ac:a0:5f:b0:18:f9:d6:43:
c1:5e:2e:ee:c3:94:be:05:1c:b3:87:2f:48:61:4f:3a:9f:2d:
0d:da:43:0d:76:79:88:c8:35:c0:dc:8f:f8:57:8b:2e:bd:ff:
99:51:3b:8b:f4:72:7d:e4:95:0b:1e:21:f9:28:c4:2a:db:5d:
5a:42:ef:7e:a6:2b:01:54:aa:5a:f8:28:9a:d9:54:1d:71:e0:
a1:79:16:3c:77:cf:09:1f:52:3b:5d:99:73:82:9b:2a:9c:03:
f3:7b:4f:48:3d:49:71:87:38:7f:7d:ee:22:76:d6:24:ff:4b:
47:7b:7f:8c:78:c4:9c:43:da:1f:3f:a4:8b:e3:6a:ad:88:e8:
d9:f3:82:d4:b8:8a:3c:79:0f:14:c1:e1:e0:1b:35:da:86:c7:
7a:4c:b2:e9:af:b1:d1:0f:3a:0b:99:22:d8:1e:ea:74:cd:f3:
97:4c:bd:8d:92:3a:83:ea:67:f0:8b:4a:5e:30:a6:26:11:bc:
b2:d3:dc:63:6a:97:7f:7b:bb:2b:9c:91:84:c8:87:9b:0a:7c:
8d:d9:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:53:36 2026 by rpki-client