
Error: rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File: kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier: q1RaxLaW7HKdYaRw5Lr8gCVoMlPrhh2xPt96lQBW1AI=
Subject key identifier: A5:53:99:DF:5A:54:40:8E:30:B1:39:5F:EA:A2:33:0C:92:D6:9C:26
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer: /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial: 0761
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number: 075A
Signing time: Mon 28 Sep 2026 02:25:38 +0000
Manifest this update: Mon 28 Sep 2026 02:25:38 +0000
Manifest next update: Wed 30 Sep 2026 02:25:38 +0000
Files and hashes: 1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: rlhEUhGLSg2JvVlseFxgcCXnDtkO8gNFt74J+GyIH9M=)
2: C1A5E32A873311F1818BD6E3CE1D38B0.roa (hash: MlaWz+iw8BJ1MUQeTJwhJ9d/vpySNP8qvYNISa9IMmY=)
3: 58977490B0DF11F1A1FBC1F1CE1D38B0.roa (hash: N11/bWdhvJMGtJ4/BrZKOXxSUZeKS0aLH8pXMLFi838=)
4: 8B40C2F2243A11F1A0BEB48ADAE4EC9C.roa (hash: 3620Wsxd/t0/oMKvGDVNw2kGd63Qxyzn+iydXrHbac4=)
5: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
6: 04D8EA84873411F192C0F7E3CE1D38B0.roa (hash: 0W5gaxdOwk+b6dfWlmRPJjKXBz2u49fbrmDgcDEqrHI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Validity
Not Before: Sep 28 02:25:38 2026 GMT
Not After : Sep 30 02:25:38 2026 GMT
Subject: CN=6ab9d022-8269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:f2:1b:b3:00:65:f8:5e:82:86:89:52:3b:
07:ac:96:2a:2f:a5:83:ba:21:e2:9f:ff:f6:7d:26:
14:09:2f:92:be:82:70:2f:b8:ad:9a:95:10:56:cc:
45:01:fe:04:cb:1d:06:5b:74:42:ba:f7:9a:fb:84:
7c:b0:a3:fd:f4:d4:dd:6f:99:cb:61:46:e1:aa:a9:
c7:fd:75:00:b5:be:75:a4:88:15:59:c9:8a:5b:0c:
ea:58:58:11:59:ec:e2:01:dc:01:71:83:a2:e0:bc:
c7:98:6d:f7:9d:c5:27:cb:09:c1:72:6a:74:a7:c7:
23:00:8d:95:3a:21:71:26:41:87:3e:ff:fd:96:2a:
cb:7b:c4:d5:f2:1d:3e:af:8e:64:8b:f0:bc:bb:32:
4b:f0:6e:8b:66:05:86:ea:a4:4c:e4:a8:54:bc:0a:
29:ab:3d:32:31:46:da:42:65:f6:15:f0:a7:f2:3d:
eb:18:59:2c:81:2b:01:e2:ab:78:cc:89:5b:8d:96:
9c:6b:ca:02:00:6a:c4:2e:25:27:d6:4c:a1:56:27:
b3:f6:60:0b:ba:11:0c:26:fa:a1:9e:77:e6:3c:6a:
b4:44:43:12:14:6d:68:65:8e:be:9f:5b:2b:9f:68:
3b:04:35:63:05:a8:a2:cd:87:39:4b:3b:8f:f1:52:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:99:DF:5A:54:40:8E:30:B1:39:5F:EA:A2:33:0C:92:D6:9C:26
X509v3 Authority Key Identifier:
keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4e:af:eb:1a:ac:04:6a:6e:a6:8d:18:51:27:cd:bf:49:3e:
68:a7:c8:86:9b:77:f3:da:76:b9:fb:d1:8c:d2:b3:c0:4a:ca:
7b:a6:12:a2:57:10:55:b8:b3:9b:14:66:d9:c4:e7:cc:76:8e:
47:fa:3a:7b:5c:fb:38:20:50:2c:a9:f9:e8:62:e9:62:b7:21:
a6:81:bf:f1:02:18:22:34:26:72:0a:95:09:1b:99:b3:d7:45:
1a:96:bd:46:3d:b3:e1:3d:ae:10:10:5a:59:5a:d2:90:d7:6a:
32:56:2a:ab:7a:f4:ad:9f:f2:7d:cb:20:bb:04:57:a1:68:40:
08:ac:32:55:a3:4b:89:32:39:da:67:f0:8f:28:11:3b:33:5f:
4f:fb:4a:40:17:7f:5d:ef:0f:27:96:c2:85:94:1d:1f:94:7d:
0a:7b:83:30:7a:2b:3b:d7:5b:06:70:a9:34:9d:0f:a9:12:89:
6e:7f:10:f7:bd:a9:a5:c1:c5:08:13:9c:66:8f:3d:9e:c7:37:
5f:a5:8b:f1:e3:cc:dd:26:56:ae:7e:b9:ea:66:d1:e4:28:c5:
0f:41:d7:92:6d:71:1e:ec:49:01:6c:81:7e:81:d8:4a:fb:5e:
9f:47:af:0b:d8:03:a0:2b:1b:e6:df:aa:7b:9f:dc:da:02:78:
d7:d8:09:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODNBNTRBRjExMC8GA1UEBRMoOTE3MzMyOTNGQzYzNTBBRURGQkE3NUE5MTZGRkY0
MUI1MTVFQ0Y0QzAeFw0yNjA5MjgwMjI1MzhaFw0yNjA5MzAwMjI1MzhaMBgxFjAU
BgNVBAMTDTZhYjlkMDIyLTgyNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpXfIbswBl+F6CholSOwesliovpYO6IeKf//Z9JhQJL5K+gnAvuK2alRBW
zEUB/gTLHQZbdEK695r7hHywo/301N1vmcthRuGqqcf9dQC1vnWkiBVZyYpbDOpY
WBFZ7OIB3AFxg6LgvMeYbfedxSfLCcFyanSnxyMAjZU6IXEmQYc+//2WKst7xNXy
HT6vjmSL8Ly7MkvwbotmBYbqpEzkqFS8CimrPTIxRtpCZfYV8KfyPesYWSyBKwHi
q3jMiVuNlpxrygIAasQuJSfWTKFWJ7P2YAu6EQwm+qGed+Y8arREQxIUbWhljr6f
WyufaDsENWMFqKLNhzlLO4/xUvFDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpVOZ
31pUQI4wsTlf6qIzDJLWnCYwHwYDVR0jBBgwFoAUkXMyk/xjUK7funWpFv/0G1Fe
z0wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzQTU0LzVDMzY3N0YyMUY3ODExRUM5QTEyMzExQUQ4QTAxNENFL2tYTXlr
X3hqVUs3ZnVuV3BGdl8wRzFGZXowdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tYTXlrX3hqVUs3ZnVuV3BGdl8wRzFGZXowdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODNBNTQvNUMzNjc3RjIxRjc4MTFFQzlBMTIzMTFBRDhB
MDE0Q0Uva1hNeWtfeGpVSzdmdW5XcEZ2XzBHMUZlejB3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwTq/rGqwEam6mjRhRJ82/ST5op8iG
m3fz2na5+9GM0rPASsp7phKiVxBVuLObFGbZxOfMdo5H+jp7XPs4IFAsqfnoYuli
tyGmgb/xAhgiNCZyCpUJG5mz10Ualr1GPbPhPa4QEFpZWtKQ12oyViqrevStn/J9
yyC7BFehaEAIrDJVo0uJMjnaZ/CPKBE7M19P+0pAF39d7w8nlsKFlB0flH0Ke4Mw
eis711sGcKk0nQ+pEolufxD3vamlwcUIE5xmjz2exzdfpYvx48zdJlaufrnqZtHk
KMUPQdeSbXEe7EkBbIF+gdhK+16fR68L2AOgKxvm36p7n9zaAnjX2Ang
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:37 2026 by rpki-client