
Error: rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
File: M_ZYGpislU83OkcJgFDY_iv0fj0.mft (raw, json)
Hash identifier: 9tAJRhSS723C6gtu+B+0W8DgJ3sR1tAeSdaRUMhoaH0=
Subject key identifier: A8:D5:EE:6D:FB:F4:18:81:42:67:74:27:D0:B0:39:AE:B9:80:98:4A
Authority key identifier: 33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
Certificate issuer: /CN=F367C8F5AF/serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Certificate serial: 039D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
Manifest number: 0392
Signing time: Sun 20 Sep 2026 04:09:51 +0000
Manifest this update: Sun 20 Sep 2026 04:09:50 +0000
Manifest next update: Tue 22 Sep 2026 04:09:50 +0000
Files and hashes: 1: M_ZYGpislU83OkcJgFDY_iv0fj0.crl (hash: pWe44rkVpgoiiGKTdfvIBW3roNUp3sQxR8YFaUsI9Ig=)
2: 763C312AE28B11F08B55DDCCDAE4EC9C.roa (hash: IhbSf0QlAqWiB59urLAgdvVQqwYl2Yiv1XeeQukaRc0=)
3: 720BC390EA2911F0BF861AE8DAE4EC9C.roa (hash: pXZ38HtWD7LOYDy6kf0nMRb0FuTrUGgp37ABysPnV9o=)
4: 051C1C9A3ECF11F0AB24B6BEDAE4EC9C.roa (hash: Pz/lyw5RNwEZFyUHiUisAUenkR86p2uc3aTqE70RhOU=)
5: DFB612B0E28B11F0B89F45CEDAE4EC9C.roa (hash: YNk/MPCjPRYt5uaF8ZskEeR34Tk1JeToJtADiQuvsDs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367C8F5AF, serialNumber=33F6581A98AC954F373A47098050D8FE2BF47E3D
Validity
Not Before: Sep 20 04:09:50 2026 GMT
Not After : Sep 22 04:09:50 2026 GMT
Subject: CN=6aaf5c8f-ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:03:38:ae:c5:3e:51:88:04:6d:7a:ee:8e:
b5:89:5e:cc:21:6f:02:44:dd:6f:92:af:4b:5d:44:
78:aa:38:80:d9:ea:04:62:1b:4a:f0:1b:fc:27:9a:
c6:9a:a1:5b:ac:72:16:9e:98:94:e0:cb:f3:1a:ef:
9a:e1:ab:dd:92:44:df:19:b0:b2:cb:6d:0a:f0:38:
e2:ec:0c:3d:7d:63:a8:7b:b0:5f:66:65:ae:e1:92:
76:43:19:67:02:c3:36:1f:e0:a3:de:b1:d9:f4:a8:
9b:2b:fc:ff:93:e1:43:1c:10:17:1d:56:8c:a9:62:
24:33:b8:e5:b2:51:61:c8:b8:78:5c:99:b8:60:4e:
a5:04:67:12:97:60:fe:c0:d8:00:b2:cc:81:3d:53:
90:92:14:8a:e6:10:6a:65:de:8e:07:ac:c3:8c:64:
fc:e2:61:eb:b5:2d:b0:06:17:50:8e:0f:d6:41:9b:
f7:6f:2e:1e:5a:e8:da:93:21:03:4e:ef:9e:d9:75:
77:c9:99:36:95:84:43:d2:89:35:2a:cb:9e:a6:e3:
29:f2:e2:06:a7:27:a2:41:7c:ec:17:82:17:21:f6:
af:19:82:2f:58:ec:13:86:26:a3:1c:ec:d2:93:6e:
15:d3:8e:87:f2:28:93:11:1c:94:50:89:c3:c3:80:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:EE:6D:FB:F4:18:81:42:67:74:27:D0:B0:39:AE:B9:80:98:4A
X509v3 Authority Key Identifier:
keyid:33:F6:58:1A:98:AC:95:4F:37:3A:47:09:80:50:D8:FE:2B:F4:7E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_ZYGpislU83OkcJgFDY_iv0fj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C8F5/FB11026A016C11EF98CC2F01017001B1/M_ZYGpislU83OkcJgFDY_iv0fj0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:16:59:7a:bc:ee:c3:fd:b5:b6:3c:ec:92:b0:75:2d:41:ce:
0f:39:70:91:89:4c:ca:0e:c2:69:c6:d7:20:4d:3d:91:71:a5:
9e:b8:f5:38:5e:1c:0d:a8:78:ef:80:cc:a1:2c:bb:43:6a:6d:
e0:dc:56:26:46:65:20:c4:8f:5a:08:54:59:28:c8:a9:3b:d7:
25:08:6d:d2:d5:20:b0:16:5c:63:08:ff:1f:75:e1:06:9b:72:
ec:d6:e8:69:f3:26:94:bc:0b:4c:7e:ef:54:62:5b:5f:35:d6:
bb:d1:aa:8b:d0:1a:9c:60:77:4d:8d:6e:56:7a:30:64:40:ff:
41:9d:1a:a5:96:8d:d9:df:79:22:ed:63:39:9e:70:9f:16:21:
3a:7f:6b:4f:48:c6:54:68:84:04:f3:2e:06:12:20:de:e1:9d:
ff:98:67:b2:f6:d9:ac:82:ae:21:f2:a9:cf:0e:db:eb:87:f9:
14:0c:70:7c:81:50:fe:ab:f6:f6:47:1b:1a:97:85:a2:68:7f:
69:ea:b2:f4:e9:7b:cd:0a:94:0a:06:a1:ba:b3:6a:dd:7d:f0:
c7:cb:dc:84:46:a4:7c:7d:0e:7b:bf:8f:79:9c:39:5f:52:34:
02:c7:fa:b0:56:07:a4:dc:87:39:24:05:82:04:f0:44:48:87:
0e:a7:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:31 2026 by rpki-client