
Error: rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier: 2aiHgin/N3iJGMSXPJw2fF8Ps0jJd34hChHv6PwmWng=
Subject key identifier: A2:41:7E:AF:58:E3:8B:41:D0:41:80:54:C3:FD:A3:17:B0:19:EE:87
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer: /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial: 013C
Authority info access: rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number: 013A
Signing time: Sat 10 Oct 2026 05:20:00 +0000
Manifest this update: Sat 10 Oct 2026 05:20:00 +0000
Manifest next update: Mon 12 Oct 2026 05:20:00 +0000
Files and hashes: 1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: NU1vMvLgEfbbgCo56SLh+OEp39AYq6ID6ujbxtjCXCA=)
2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Validity
Not Before: Oct 10 05:20:00 2026 GMT
Not After : Oct 12 05:20:00 2026 GMT
Subject: CN=6ac9cb00-dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:a6:b5:54:34:f1:92:30:b9:6a:f7:47:f2:
ab:19:42:26:e2:3f:08:74:f4:6c:00:db:9c:e4:2d:
de:2a:69:2b:c4:cb:62:87:42:18:32:d4:14:01:30:
4c:fe:b1:3a:64:fd:29:be:a3:e2:9a:57:71:01:2d:
4c:30:ae:d9:be:c1:f6:4a:dc:f8:5f:7c:4f:a0:72:
63:24:d3:06:60:09:1c:83:c0:89:46:8a:bf:e9:c8:
59:75:6d:8f:fc:a0:2a:7c:58:93:2b:4b:c2:08:78:
94:60:16:21:84:e5:6f:9f:de:11:2c:6c:48:c3:c4:
ef:53:de:41:69:b7:7b:1a:7e:ab:f3:1d:24:bb:a5:
ea:d1:f0:c5:59:c5:b1:62:26:6c:06:a5:d8:ff:3a:
4e:36:9e:be:f2:c7:0f:8e:03:71:a8:27:6f:54:06:
f8:1b:5b:e9:50:87:e0:b8:de:93:dc:13:5f:68:ce:
36:6c:0d:0a:fb:2e:36:32:87:01:f6:5f:8a:68:5f:
cd:5d:1a:be:62:12:ee:5b:7d:36:de:b6:59:0b:92:
9f:91:9e:64:ba:4e:c7:c6:83:7e:16:08:33:6f:4b:
75:e3:4b:39:71:35:7a:56:e2:9b:b3:ad:55:f1:c8:
fe:95:41:ab:30:0e:37:28:70:7a:dc:89:df:a9:21:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:7E:AF:58:E3:8B:41:D0:41:80:54:C3:FD:A3:17:B0:19:EE:87
X509v3 Authority Key Identifier:
keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:13:80:36:47:47:02:2e:3d:75:cd:29:a0:e8:20:0b:6d:
8c:09:91:94:9a:38:e9:22:93:ed:0e:ee:75:7e:63:38:13:0a:
1e:b6:79:f1:08:23:d6:35:a4:15:76:d8:e1:91:93:29:a4:4b:
76:c2:6f:94:9d:b5:da:39:56:bf:ff:f0:70:b0:77:f2:cd:f1:
f8:25:49:27:fb:33:c7:01:b4:eb:c2:e1:37:d5:b1:51:b1:a0:
44:d7:23:49:be:14:86:83:93:7f:83:e5:e7:ea:5a:4c:87:d2:
91:3b:0e:31:67:ad:f8:07:b1:b3:e0:08:6a:87:1f:2e:6c:ad:
20:64:ad:75:2d:06:dc:69:fa:a9:1a:2d:3b:29:d9:76:34:7b:
6b:d0:f7:47:97:6a:c4:91:27:ba:1d:fb:69:c0:23:11:d7:04:
dd:82:cb:d9:09:c4:3c:c8:49:9d:9c:b9:af:55:fd:0c:af:4d:
4d:91:34:d9:55:8e:ac:21:8b:81:d9:f5:b7:6d:c4:86:fa:45:
c5:48:3b:cd:bd:91:2a:ee:9b:41:a4:53:fd:4c:ed:a3:74:80:
92:63:0c:78:2e:04:48:85:0f:03:8c:d0:d0:0b:12:60:6c:c3:
84:3e:7d:77:13:cc:44:d1:d7:24:5f:df:c2:8a:7c:19:e9:12:
d5:06:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:09:50 2026 by rpki-client