
Error: rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
File: vN_wydKPGrRQYvSTuzVmysFCZG0.mft (raw, json)
Hash identifier: /gwXOfb8ZRUEa01TgO7357giZpQ7qNfgMCI64ta1ifU=
Subject key identifier: B0:DE:3A:A0:66:A8:31:94:6E:E5:83:1E:8E:9F:BB:4C:2B:AD:E7:49
Authority key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
Certificate issuer: /CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Certificate serial: 0EC6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
Manifest number: 0EC2
Signing time: Mon 21 Sep 2026 01:02:48 +0000
Manifest this update: Mon 21 Sep 2026 01:02:47 +0000
Manifest next update: Wed 23 Sep 2026 01:02:47 +0000
Files and hashes: 1: vN_wydKPGrRQYvSTuzVmysFCZG0.crl (hash: Wc5jcqaqFAA+8f92zFkmsYEd5uSQ1bITMVAcYHDnu48=)
2: 5060B532B11911F0A511DFDFDAE4EC9C.roa (hash: m3tnQD+y8g5zm7h352wdDcvQa81e4C1vZsXhyLSMYMk=)
3: F7CE05E67D7A11EF88A9F065762E951A.roa (hash: CO1sEd4b6tDHp7VX2OHYT+QzzDJimiXxpvi4W3VBGpA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680C14AF, serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Validity
Not Before: Sep 21 01:02:47 2026 GMT
Not After : Sep 23 01:02:47 2026 GMT
Subject: CN=6ab08238-1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:7b:51:e1:5f:10:da:b1:01:80:cb:43:85:
01:3c:e4:59:26:08:60:72:a5:fb:31:33:40:83:ce:
67:cf:21:2f:0c:fd:f8:c5:b0:aa:0f:99:cf:5b:90:
71:41:79:a1:5e:b2:73:e1:78:35:29:69:b6:61:1a:
60:06:89:d3:68:27:d0:e2:9f:90:4a:da:1d:0d:86:
4c:7d:d9:e3:a3:af:f4:57:f1:02:57:ea:f3:f2:5a:
a3:3f:cf:10:fe:1e:11:a2:ae:fd:bc:e0:fe:e4:d0:
d4:47:a6:e9:9e:01:6a:d9:6c:f0:0d:1c:5b:a3:15:
1b:4e:48:b1:e4:1c:d5:c6:e2:be:ac:4c:22:9e:66:
19:95:57:79:d7:1f:4a:a5:56:e6:03:61:af:04:d7:
c0:7d:92:f5:de:97:54:e9:51:00:48:78:54:85:aa:
f3:f6:bf:77:96:6a:1e:ff:c5:17:56:48:6f:71:3a:
96:e6:7f:ab:83:94:81:a1:bb:0e:e1:b0:c3:b5:dc:
e3:24:be:5b:d1:0d:24:0e:70:b3:0e:81:89:f3:3a:
92:b7:5c:7d:31:55:b9:2c:d9:ca:4e:02:97:3f:a6:
73:5a:8c:eb:f4:e7:e6:55:14:03:49:cc:4d:91:ea:
26:fa:28:5f:9d:e4:7f:09:ad:c2:ef:db:cb:6b:1a:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:3A:A0:66:A8:31:94:6E:E5:83:1E:8E:9F:BB:4C:2B:AD:E7:49
X509v3 Authority Key Identifier:
keyid:BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:e8:e9:40:e1:18:db:64:ce:9f:b6:49:94:f9:df:16:31:
86:22:a2:18:78:1c:8a:25:8b:16:b6:a3:f5:d3:ba:5c:59:41:
6e:b8:6c:71:9e:0f:ff:e5:1b:e5:6a:0f:82:44:f0:40:b2:df:
4b:0f:d5:d9:ee:6f:88:70:be:19:f3:22:f0:fe:00:e7:e6:a6:
59:ce:02:7e:32:a8:05:a6:15:ce:40:85:37:a1:37:d2:67:77:
dd:c3:86:b8:b0:71:9c:e3:e7:6e:8f:aa:3a:c3:1f:b9:f5:7a:
4b:53:87:a7:d8:20:18:16:49:1c:9a:f4:31:1e:2e:f3:50:d8:
26:d8:8c:78:50:dc:64:90:c8:99:9d:88:fe:cd:b6:3c:f7:8c:
a7:fe:f4:13:63:69:4b:3c:37:fe:41:b0:d6:3d:35:91:75:39:
b9:a6:83:19:f4:d9:34:3f:25:8a:d1:bd:65:f6:e7:36:9c:51:
af:92:0e:94:7e:5c:10:01:68:97:d5:7d:08:d8:ef:d7:32:be:
33:10:21:4b:64:5d:12:16:e8:2f:41:d0:1d:0d:ec:4d:78:65:
5f:e9:b4:09:24:0e:b4:37:9f:4a:2a:00:0f:4e:cf:01:94:12:
5a:ef:68:d8:26:30:fe:3e:d5:e1:40:58:4e:5b:ad:1c:64:1a:
d1:5c:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:10:47 2026 by rpki-client