
Error: rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
File: NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft (raw, json)
Hash identifier: o1osU6d2T4y79hQZw6pyrCghPczOeiS9TkAbnTEUdig=
Subject key identifier: 02:65:3E:1F:95:B9:37:99:02:CC:2D:19:B6:F5:94:F7:CA:4C:50:7B
Authority key identifier: 34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
Certificate issuer: /CN=F367E135AF/serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Certificate serial: 04BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
Manifest number: 04B5
Signing time: Thu 08 Oct 2026 03:34:59 +0000
Manifest this update: Thu 08 Oct 2026 03:34:58 +0000
Manifest next update: Sat 10 Oct 2026 03:34:58 +0000
Files and hashes: 1: NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl (hash: ENC2iizVe5tUjQAKVPup9Jw3javF9mC5fX/Qt8V8ieM=)
2: 781C12E636D811EEA590B3444AD9E6FC.roa (hash: Js2yPxnRr8TnD2VHTvWz7stmjZ4nVcG6c5WJuOI5UGA=)
3: E82D503C32D611EEB0CB67854AD9E6FC.roa (hash: bctspn/KtgLTzAkf9/RykTiEOapAVACtA+NxhsbPwMk=)
4: B583ED0E3A8211EEB5131E3E4AD9E6FC.roa (hash: WmxgNkjxxZLbC/HeUbCJF95mFGaihCn883qwkH0aO3E=)
5: F31846983A8111EE9706FF3B4AD9E6FC.roa (hash: mPrWONBGBaUvUBb/b7GHTIJknu4XYbHkEHVp7viyvrs=)
6: 91135B6C3A8211EE9A6DC83D4AD9E6FC.roa (hash: jc1BkzeLthjW4uSWrxhP6DCOIx6HYRr2/YSdWQwPOpQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 03:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367E135AF, serialNumber=34E837F9C42B4E64D0274E86B7DA0C928931630F
Validity
Not Before: Oct 8 03:34:58 2026 GMT
Not After : Oct 10 03:34:58 2026 GMT
Subject: CN=6ac70f63-2f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:0a:b4:1b:91:8f:7f:04:eb:72:9c:a8:3e:
0b:2b:d8:a3:ae:21:72:dd:4e:30:d4:ef:fb:8d:d9:
95:10:16:e5:6e:97:a1:93:56:b3:8d:98:94:97:c1:
c4:3e:f6:7e:b1:03:fc:d0:9f:73:dd:b0:97:cc:e2:
d8:5b:f5:4d:53:4f:70:ef:d5:2e:d9:57:2e:18:f2:
ef:98:14:1f:fc:21:1f:a9:48:bf:70:ee:5e:0d:d9:
82:f8:f5:82:ef:77:c0:6f:b1:27:eb:cf:e8:f4:76:
47:ca:71:7e:63:45:23:97:1d:c1:a2:40:b5:4f:6e:
2a:f8:bb:a8:09:40:3a:95:42:af:22:7c:14:45:e9:
65:ae:cc:22:d8:c7:08:e2:c1:23:10:96:29:e0:60:
2f:f9:e0:97:90:d6:9a:41:ee:59:a2:c0:1b:0c:00:
98:20:12:6d:e4:2c:39:d0:7f:8e:9c:12:b3:57:51:
75:22:df:ea:56:e3:89:0e:63:e6:ac:b2:5d:96:55:
e0:dd:c8:66:74:bb:73:04:4a:85:fc:b7:69:b9:bd:
40:6c:84:2c:7a:6e:6f:72:2d:77:a9:de:47:7c:d0:
52:9b:3c:95:e9:02:c1:0d:92:80:00:90:f5:2c:81:
7a:21:ed:d0:ca:38:85:b6:a0:2c:39:3e:d6:b6:99:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:3E:1F:95:B9:37:99:02:CC:2D:19:B6:F5:94:F7:CA:4C:50:7B
X509v3 Authority Key Identifier:
keyid:34:E8:37:F9:C4:2B:4E:64:D0:27:4E:86:B7:DA:0C:92:89:31:63:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NOg3-cQrTmTQJ06Gt9oMkokxYw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E135/F6E812582FAA11EE8D6095614AD9E6FC/NOg3-cQrTmTQJ06Gt9oMkokxYw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:01:61:b6:47:27:d3:0a:ce:d8:6b:8a:03:9e:af:1b:7f:
d6:e6:4d:77:55:24:fa:70:a6:19:21:0f:43:75:2e:13:c3:d3:
2a:1b:90:f3:4d:f3:54:53:18:3d:5c:2c:91:96:0d:52:4f:24:
b3:18:41:21:3b:5c:d2:23:14:14:f6:da:f4:ce:dc:02:01:eb:
3e:13:80:8e:02:c9:f3:52:b2:b9:15:84:15:23:72:c4:67:01:
bb:9e:2b:fb:00:e3:8e:d5:83:4c:be:c8:72:e3:cd:8f:6f:2c:
6c:7d:ba:e4:94:01:84:37:bc:21:cc:7d:71:aa:61:38:e1:10:
a8:b0:d8:9d:01:bd:a6:63:d9:ad:fc:c5:91:2b:60:73:7d:04:
6c:39:93:94:d1:ac:67:30:28:73:b7:d1:93:26:4d:14:9c:e3:
1b:b0:e0:31:fa:75:3b:f3:16:ff:fb:be:7a:18:76:96:e4:be:
ad:78:96:ed:9d:06:1c:14:8b:76:5d:44:5b:83:71:97:f1:5e:
6a:be:1a:8c:80:3d:4d:83:d8:53:73:46:5b:63:57:32:50:ab:
af:fb:20:4d:2c:57:6b:47:e2:9c:0b:62:73:d6:0d:e1:b0:1f:
3c:c5:d0:1e:1a:36:a3:72:88:58:00:98:60:e6:78:45:a7:cc:
69:51:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:23:54 2026 by rpki-client