
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: yqpkqLvHvqcWHthMm2an0tdpGMuArRrpvgR+U2M+NUU=
Subject key identifier: 43:02:7D:BD:7A:4D:17:E6:EE:51:52:A8:E7:8E:82:77:4F:71:43:AF
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 04C8
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 04C5
Signing time: Sun 11 Oct 2026 03:35:11 +0000
Manifest this update: Sun 11 Oct 2026 03:35:10 +0000
Manifest next update: Tue 13 Oct 2026 03:35:10 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: RWwQLBu75xlOWsnN3yq0TKNOHPltldjemViQHHe47Xc=)
2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Oct 11 03:35:10 2026 GMT
Not After : Oct 13 03:35:10 2026 GMT
Subject: CN=6acb03ef-01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:d3:3a:00:2d:9d:40:f3:ad:10:ae:dc:1f:
d9:1c:21:a2:4e:d8:3f:c4:0c:cf:e6:4a:e2:0a:12:
12:8d:b1:05:cd:3e:cd:8f:9a:b7:e4:7f:62:3e:7e:
a7:f4:0b:2a:3f:92:18:f5:eb:e8:03:ef:40:02:ae:
a9:6d:76:b8:5e:5f:6e:be:c5:df:df:a1:51:59:9b:
84:77:26:e1:3a:b4:ab:92:40:8a:dc:ac:b0:02:c6:
1c:f0:50:9e:e2:02:eb:6c:3f:df:65:d0:fd:08:00:
bc:a5:7f:39:c2:63:71:77:0b:7a:8e:82:44:4b:9e:
8c:a3:8b:92:cf:97:99:b8:b8:b1:c6:d1:01:9f:09:
2a:1e:67:fc:c2:54:54:84:17:c9:2a:89:7a:86:23:
c1:8a:d8:37:c3:0f:e8:ea:a1:36:53:83:00:96:81:
71:68:5b:6c:a2:6f:85:ad:68:8b:ad:62:f4:d3:00:
42:72:eb:cf:f4:c9:3e:7f:fe:40:15:c8:70:3c:17:
0f:37:dd:06:ad:d4:81:45:62:97:ab:b0:8a:ce:31:
6a:69:98:09:44:11:24:8a:6e:55:27:15:13:d9:d9:
15:65:e1:7f:be:3c:68:78:58:c5:02:42:c5:c4:6f:
3f:1b:d3:a1:1c:40:e3:46:63:c5:11:cb:be:ca:6d:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:7D:BD:7A:4D:17:E6:EE:51:52:A8:E7:8E:82:77:4F:71:43:AF
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8a:fd:7c:53:f8:fb:a4:00:fe:7a:3c:e1:a6:04:87:75:76:
c7:8c:ec:85:a9:0f:1f:33:ba:58:1e:51:78:1d:d8:47:a0:29:
ce:b6:1a:89:27:18:ca:fb:6c:1a:bb:2e:92:1f:21:ab:1f:fe:
7f:d2:a3:ef:5c:ef:27:3b:25:16:f4:61:61:1c:30:6f:cf:4f:
45:14:7e:9e:b9:0f:f1:f2:f9:34:84:bf:83:34:4b:8d:0e:7b:
bd:e3:cb:f3:c1:2b:96:c6:f4:a9:52:cc:02:85:7f:d8:cb:cf:
6f:08:10:59:b8:a5:2d:0a:fd:cc:ef:07:c6:ac:45:59:70:41:
01:be:f5:ff:fe:ba:35:9f:0d:96:69:31:05:ca:94:b5:b8:61:
c2:d8:0e:a4:40:ea:01:2b:5b:f4:99:08:b7:73:19:dd:c0:93:
e1:c8:a3:3e:73:52:81:c9:cd:4e:d1:e5:3d:b2:ce:ec:ca:60:
10:36:2c:bf:2c:cb:60:52:ec:68:85:1e:3b:18:a9:ae:0c:b9:
8e:7c:5b:95:45:54:0e:65:90:52:69:30:05:a8:69:1f:cf:85:
d2:84:02:a6:e8:08:ad:39:a5:80:13:17:63:6c:cd:77:22:7d:
e7:11:1d:ab:4e:b8:b9:3c:40:60:40:f7:ef:44:b2:9c:56:9a:
cd:3c:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:24:42 2026 by rpki-client