
Error: rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File: 1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier: nTD2K0GUEMWpHPOHPqkUjt6qTOG/ANB+aMXT9oWwNS8=
Subject key identifier: AA:0E:9B:E2:FA:FD:5A:8F:AC:38:DE:9F:8F:34:0F:50:F9:31:8E:64
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer: /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial: 079A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number: 0795
Signing time: Tue 22 Sep 2026 02:16:43 +0000
Manifest this update: Tue 22 Sep 2026 02:16:42 +0000
Manifest next update: Thu 24 Sep 2026 02:16:42 +0000
Files and hashes: 1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: 4LoOTPR3eQiLvIqJp1SRCPmdXpCJud7gAeXM/yBQTJ0=)
2: 2D74E6CE2CDE11F1B13255A8DAE4EC9C.roa (hash: +81hzYpM3W36exbMJDzXr2Ri1//pFW7oRixW0r8/AJY=)
3: 526901882CE611F1BF63EBD6DAE4EC9C.roa (hash: aw2Z7KwdzkCBr55pTjeJJCbVsjj0x/wKbNsblVOzb6E=)
4: FF757B4E2CDD11F19B6540A8DAE4EC9C.roa (hash: 5UlL0ZRX7x5wQWu7za/SUcPB92F6HJ1BFe+lS7nnTtc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 02:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Validity
Not Before: Sep 22 02:16:42 2026 GMT
Not After : Sep 24 02:16:42 2026 GMT
Subject: CN=6ab1e50b-937a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:82:a4:30:30:d8:70:9f:b2:21:b2:30:88:
45:78:f4:c0:a0:9b:a1:44:b2:3c:6b:e2:1c:c8:a3:
8a:33:52:78:ca:a4:3c:8d:b4:20:15:b7:89:0b:2b:
0c:f3:7b:d2:a2:7f:d8:ca:de:0b:df:1e:98:15:b1:
33:fb:1d:9f:fc:4a:f1:f6:11:79:1c:6e:46:eb:bb:
a6:5c:4a:90:af:50:6a:db:8e:83:2d:08:3a:ef:49:
03:ea:2a:23:2a:4f:39:55:a8:6d:3e:95:7c:66:26:
3e:b3:7b:4a:ca:ef:72:eb:ea:7e:63:c3:eb:da:78:
58:50:a0:f3:cb:59:61:fe:75:e9:b2:41:7d:0c:eb:
7e:1b:d1:01:f9:b1:1f:ac:df:a6:11:98:4a:38:e3:
f7:b9:4f:54:de:d6:e1:9e:54:5f:a4:96:b6:86:64:
b9:32:96:72:e5:71:db:44:9c:f3:cb:53:1c:31:65:
94:4a:39:40:8b:93:52:21:27:fa:87:d9:72:e3:36:
00:aa:35:97:0e:1f:36:8e:b1:92:b6:78:cd:0f:eb:
78:22:f0:03:5f:18:0c:7b:17:b0:64:8f:49:15:a0:
03:74:92:42:ce:d9:42:7b:e4:9f:e9:94:e2:8b:1e:
9a:07:af:64:29:93:32:b0:1d:a1:b4:a1:1c:ee:e5:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:9B:E2:FA:FD:5A:8F:AC:38:DE:9F:8F:34:0F:50:F9:31:8E:64
X509v3 Authority Key Identifier:
keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:98:3f:b2:ad:63:ad:de:9e:d7:b9:50:3d:75:71:05:34:
2d:92:02:83:f9:f9:69:c2:81:1c:46:5c:f5:ce:16:68:fe:d0:
55:f4:ce:17:20:fa:f8:b1:f2:bd:f5:23:8f:a8:95:88:65:7c:
7b:9d:fa:94:0f:e0:76:ba:4d:50:b9:bc:7f:45:d2:1f:0b:0c:
19:ee:d1:6a:f1:f9:ec:69:e5:04:27:da:04:6f:55:b1:4c:3d:
fc:f0:2c:0c:0f:64:36:27:88:35:9f:2d:b0:63:c9:3a:9c:a9:
de:3b:99:f2:44:6f:e4:7c:d8:96:b9:69:59:ea:8c:30:86:ee:
6d:2c:a0:db:0b:1c:2a:54:e3:af:02:6b:1e:1f:f2:99:74:8c:
9c:4d:e2:90:d2:bd:91:fa:da:16:d0:0e:10:25:f4:42:0b:ad:
70:b0:b1:50:db:be:54:a7:ff:17:ad:3d:bf:8d:67:2e:6d:b2:
f7:4f:96:83:f5:89:0a:89:6b:51:50:5d:7d:05:8e:41:e4:c1:
f5:34:27:b9:84:4a:70:f7:7b:06:ab:22:e2:1f:ef:76:8e:3a:
65:ba:8a:c6:9e:0f:a3:eb:a6:e8:f9:17:2e:9d:27:5a:39:43:
db:e7:81:a4:e1:52:37:ed:38:ac:a8:9f:df:e1:65:42:56:06:
e9:b5:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:29 2026 by rpki-client