
Error: rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
File: dwjmbxwHwddnCuvbrhhtpCvLMMc.mft (raw, json)
Hash identifier: n9Qvci7Dt9dAx/FY8o90iXNzJ9BJ668uaNR1bYJZeOY=
Subject key identifier: 4E:D7:29:85:C5:7E:99:42:E8:81:10:61:8B:13:A4:FF:D7:37:DE:0E
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 02CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
Manifest number: 02AA
Signing time: Mon 21 Sep 2026 04:42:27 +0000
Manifest this update: Mon 21 Sep 2026 04:42:26 +0000
Manifest next update: Wed 23 Sep 2026 04:42:26 +0000
Files and hashes: 1: dwjmbxwHwddnCuvbrhhtpCvLMMc.crl (hash: QHAOjbF3y4R3DaUcQjjI9MZ4IPijIeuCGqlThbpl/gM=)
2: 3F10B7A03CAC11F088C969D5DAE4EC9C.roa (hash: Sjpk4ysp1mNszx84MrVYy/vBQoLw8u4fp7N7mgOTEIQ=)
3: 4A4E4E98F36411EF90236562762E951A.roa (hash: wBEWNOxstUtXs1lRPFI8sqmbxPLl50bzZwGpAM/v03w=)
4: 8D38EA92F36411EFB4C65466762E951A.roa (hash: +EMSMJ3EYz9pXuGkf95ZpK0KIr/3eV/25E+zqK7H2d4=)
5: 6D9333C8F36411EFA21E3864762E951A.roa (hash: qCcMIGMPv6iLqntlPxto9IWFZxg/PkX6K91u1W/HaMo=)
6: 0728E8DAF35F11EFA9798CBF762E951A.roa (hash: r67qgSDZ7UK0rkKjw/6X4Z6plYnnEJR2/PdlSWRgXOE=)
7: 64579188F36311EF961F435D762E951A.roa (hash: ZkAad2oBHy70JS26s+e7DktMHSKgL2XdJzU4c7fdddc=)
8: 04466B80F36211EFB7841C54762E951A.roa (hash: k+w+Al72cOLFmLNM9M2TGC8l+4WDkBhNaHH0njxWTY4=)
9: 4608FD7CF36111EFB87F7D4F762E951A.roa (hash: q4VUHmXqhQLvC4tfCUsaK0VJ9DqAe9PMwDnLK46jh+k=)
10: 8CFF56DEF36311EF8011BE5D762E951A.roa (hash: 8VWmuQHjSKK3nmwbGTPPqeDrZfzpQRmMKrTS4U/AuaY=)
11: AB313988F36311EFBAC9DA5E762E951A.roa (hash: QYTpKFHcH+2F26H8AMuPN3ygS8KPNu9TR1X0KOssigQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Sep 21 04:42:26 2026 GMT
Not After : Sep 23 04:42:26 2026 GMT
Subject: CN=6ab0b5b3-e739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:9d:fe:f7:16:59:ee:d7:0f:da:8f:bf:b4:
32:e4:cd:da:d4:2a:39:1e:ab:71:4c:78:f7:e4:c3:
3d:8b:a6:e4:35:76:5b:41:5b:cb:9a:13:3e:d8:13:
57:a2:1b:3d:10:32:60:96:51:0a:19:af:d5:18:2e:
c2:2e:4a:40:8f:9c:bb:8a:05:12:4e:a5:03:55:3f:
d2:db:97:00:16:43:d8:34:d0:22:2a:fb:db:fe:98:
ea:c5:6b:58:a8:f4:47:41:9f:80:b0:37:61:78:8f:
6f:e5:a9:fc:44:bc:03:8b:e8:54:95:b7:5f:05:2a:
aa:79:28:06:49:0f:a0:56:d0:f8:7e:ec:57:70:d7:
7a:8b:3b:f7:07:e9:c3:c1:a3:82:12:5c:c5:5b:f5:
05:ae:2c:56:a3:cd:cf:f4:13:9a:66:f2:06:f0:74:
2a:41:02:4b:9d:a2:12:ff:14:ee:5a:8a:d0:69:14:
88:c6:04:d5:91:c7:2b:b6:c8:e5:ee:06:c3:9b:54:
85:e0:e3:5a:a0:c6:02:1d:24:0a:92:d1:92:b7:49:
d0:a2:a9:fa:54:1e:bc:ab:7a:cf:f6:6c:e2:20:32:
0c:68:f6:63:9b:4f:c9:8b:8b:1e:8e:ae:0b:49:0d:
1b:5b:7a:9f:73:59:61:bd:da:17:9b:79:92:94:5d:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:29:85:C5:7E:99:42:E8:81:10:61:8B:13:A4:FF:D7:37:DE:0E
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:46:df:91:d2:65:55:24:9c:5c:f3:20:20:f6:7b:76:ab:7e:
7c:94:9d:c3:cd:7d:d9:dc:67:2d:e3:ba:9b:96:56:b0:db:27:
7a:cb:16:55:a7:d1:b4:95:1b:37:23:e3:20:22:e6:df:94:88:
2a:bc:7a:ed:93:77:1f:89:62:96:e1:7f:20:13:69:9e:f8:00:
75:79:7d:ba:87:54:38:cd:3d:87:fa:e7:0d:bc:e7:cf:4f:4f:
f8:d4:38:f7:3a:fb:27:03:46:89:95:5f:14:6e:2c:56:a0:98:
d9:13:66:45:f4:b7:42:3f:aa:0f:70:3c:b1:62:f2:44:44:18:
1d:77:93:7e:06:27:ef:45:7e:24:72:d8:01:86:9f:59:01:f6:
df:e7:2e:b8:a1:e9:06:dd:6b:e4:2d:b4:8e:9f:df:a0:85:d3:
92:6a:f6:8d:92:58:57:77:33:f1:aa:f2:99:ba:ef:ce:e2:01:
b1:70:d2:50:39:ca:8d:c0:5b:f8:d9:14:f1:3a:05:f5:7d:b7:
2d:5f:77:a2:37:e8:24:d8:3e:f5:a1:47:7d:fc:8f:e4:94:c4:
f5:e0:a2:2d:45:8c:60:ef:e3:73:e9:f0:dc:79:09:e6:0e:f2:
0f:3e:d9:c6:db:f3:9f:71:80:06:59:5e:1f:fd:6e:2e:c7:9b:
c4:ce:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:47 2026 by rpki-client