
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File: ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier: sMESDrLLYhPY1DiBxk7f91ooHydBp1nTWzP3X6ziDyk=
Subject key identifier: 31:7C:96:1A:EC:A3:21:44:A6:30:02:46:F6:61:C0:A3:98:6B:6F:9D
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer: /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial: 04B8
Authority info access: rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number: 04B6
Signing time: Mon 28 Sep 2026 03:36:25 +0000
Manifest this update: Mon 28 Sep 2026 03:36:24 +0000
Manifest next update: Wed 30 Sep 2026 03:36:24 +0000
Files and hashes: 1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: laD/DuAamkoOMGloQxFI8M31z/vsXZCo6JuuQV8q+JQ=)
2: 705538E8F23411F0ABE2AFDCDAE4EC9C.roa (hash: +jhpv0hpOYh5YDao9lohBm7A/3HpwqG1brbR9Ufglgk=)
3: 2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa (hash: Kw9yZHPeCDbD4dtkgjG9vBqQvYKkUDgIRAQiwyBUt8w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Validity
Not Before: Sep 28 03:36:24 2026 GMT
Not After : Sep 30 03:36:24 2026 GMT
Subject: CN=6ab9e0b9-2ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:53:13:af:e0:8d:a9:a5:ad:75:d4:73:e4:
5e:0a:79:4c:f8:b9:9d:fb:a6:a3:86:16:d4:c0:a2:
b3:d8:e4:a0:fe:c8:b2:c4:03:e9:37:68:07:99:c6:
16:0e:2a:35:f7:68:27:3b:9d:8a:0f:d1:aa:68:99:
1f:6a:58:5d:e6:30:10:b3:25:f6:8f:7c:65:97:7b:
7e:64:91:79:7f:f8:d9:4c:79:e3:60:81:9a:02:2a:
66:62:64:e0:86:fa:a3:91:21:6a:a0:b1:87:56:93:
34:0c:e6:19:c0:3b:8a:6e:ea:15:f0:8b:60:f6:fd:
92:d5:7b:43:8b:77:6d:28:0d:76:7b:6b:bd:e8:d5:
7a:77:ea:8f:36:e3:c0:49:4f:9e:62:ff:da:7a:f1:
98:12:58:06:7e:4a:4f:52:32:38:39:1e:e9:63:db:
3e:c7:4b:14:ed:6b:ec:f3:55:a6:dc:76:17:de:07:
20:41:b3:e7:c6:53:e1:67:54:17:a2:e2:3e:d8:21:
e9:67:ef:ea:51:f6:14:e8:db:b1:20:27:de:27:03:
cd:92:51:06:78:63:d1:d7:a0:65:05:44:f9:21:a7:
9d:1b:f7:3a:8e:70:ca:cc:20:60:57:98:c5:60:1f:
bb:12:4d:a1:dd:23:ae:8d:4f:da:f5:d9:89:cc:2b:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:96:1A:EC:A3:21:44:A6:30:02:46:F6:61:C0:A3:98:6B:6F:9D
X509v3 Authority Key Identifier:
keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cc:48:f4:cc:29:97:71:7f:32:06:ba:03:d4:98:b8:30:26:
e6:ac:4e:d2:78:17:ee:e3:56:9a:97:dc:ae:57:c6:9c:b8:bc:
24:29:88:4a:4e:24:44:e7:bf:83:98:cd:c6:04:f9:98:40:4c:
ff:09:71:e7:89:09:8b:80:a0:df:9e:e0:bb:ba:7f:dd:bb:2f:
ad:d3:ec:94:6f:b6:f1:9b:6c:0b:8c:78:14:44:49:2d:5b:7f:
e6:4f:38:82:43:f6:54:38:20:d6:46:d1:0b:50:72:6c:13:48:
08:34:23:97:56:7f:df:58:c3:5c:ff:9c:fa:d5:1d:42:68:67:
3e:7c:ba:03:30:07:95:75:fa:e1:57:ea:24:b6:d3:9c:6c:5e:
5a:4e:5a:cd:28:f1:0d:5b:56:a7:14:d8:31:83:28:d2:a0:1d:
8e:62:e7:35:c2:1f:5b:76:f1:44:ab:53:fc:e9:8f:ee:56:ec:
63:4f:e2:08:44:c6:37:8c:d4:8f:8f:3d:6b:4b:a7:71:a1:50:
e3:8a:3f:57:c5:ef:f2:06:2b:5e:67:71:0f:57:9f:75:5f:ce:
f9:16:88:da:e6:88:b8:bb:71:9f:63:6a:db:b5:a1:30:85:45:
ae:d1:5e:f9:ea:a7:8c:b4:5b:d7:ed:2d:81:c9:b3:7d:bd:11:
04:e2:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:36:49 2026 by rpki-client