
Error: rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
File: wrcqDttgGOuk7XzTA12xMvRJwB0.mft (raw, json)
Hash identifier: vk/P5YSIaLC8JhZgAZ/O6X/Jwrdmgb+nPgtOXO4M4zg=
Subject key identifier: 6D:AC:4F:C7:2F:5C:BA:09:44:FE:7D:67:79:F0:16:17:4C:AF:50:1B
Authority key identifier: C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
Certificate issuer: /CN=F368948BAF/serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Certificate serial: 02BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
Manifest number: 02B8
Signing time: Wed 14 Oct 2026 04:39:14 +0000
Manifest this update: Wed 14 Oct 2026 04:39:14 +0000
Manifest next update: Fri 16 Oct 2026 04:39:14 +0000
Files and hashes: 1: wrcqDttgGOuk7XzTA12xMvRJwB0.crl (hash: qgr5eeLGxeaeYPcPSMFOi2EHmbXiYFIdupzR/cTJ0KU=)
2: 2B39C894B3A811EFB417EA70762E951A.roa (hash: JbNHPWtSF1vQZDwXPX2JIdA3ze8jlLo9getuU4tbAN4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 04:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368948BAF, serialNumber=C2B72A0EDB6018EBA4ED7CD3035DB132F449C01D
Validity
Not Before: Oct 14 04:39:14 2026 GMT
Not After : Oct 16 04:39:14 2026 GMT
Subject: CN=6acf0772-7c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:40:5b:34:3f:8f:e3:74:e2:bb:f0:67:5f:
e3:4b:ed:95:d5:1a:a7:1f:29:6e:2f:66:39:e3:33:
ac:2c:f6:5f:d0:87:41:25:7b:9b:3b:01:54:12:92:
88:08:69:47:94:80:6a:1a:3a:e4:ce:c8:84:da:3c:
a7:5b:72:b4:73:ab:84:ae:0d:3b:b7:b7:3c:67:e8:
e7:28:a9:fb:38:63:79:bd:d3:63:fb:5b:e8:7c:b9:
ba:01:49:c9:ec:83:ba:bb:62:c8:53:16:32:7e:ca:
e1:de:1b:d8:b5:ff:e3:c4:98:fa:09:ff:d3:c4:2e:
e7:fe:7f:92:08:1c:41:61:da:c7:f2:cc:49:48:b4:
68:70:46:d3:bf:0d:25:31:5a:21:39:7b:8f:cc:aa:
b5:9e:15:52:a9:7e:8c:06:9c:05:01:c5:92:f4:29:
43:e1:87:78:84:23:2e:4e:a8:25:0a:eb:55:85:90:
3c:b5:bf:f7:20:f4:92:b0:28:67:8f:28:59:22:a3:
e3:90:5d:bd:c0:80:c0:0b:a5:bf:7c:8f:69:d9:6d:
3d:f3:98:ef:03:17:66:dc:54:b3:2a:c5:6f:64:03:
39:cd:2a:d4:24:83:18:75:be:c0:95:b2:ae:16:c8:
1f:6d:93:5c:7b:e4:34:a9:2b:23:31:63:e7:e7:96:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:4F:C7:2F:5C:BA:09:44:FE:7D:67:79:F0:16:17:4C:AF:50:1B
X509v3 Authority Key Identifier:
keyid:C2:B7:2A:0E:DB:60:18:EB:A4:ED:7C:D3:03:5D:B1:32:F4:49:C0:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wrcqDttgGOuk7XzTA12xMvRJwB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368948B/57871110B09A11EFBA5BE8A0762E951A/wrcqDttgGOuk7XzTA12xMvRJwB0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:49:8a:52:3c:44:5c:b8:99:22:a4:3f:e2:9b:fd:b8:fb:f6:
fb:c3:24:c1:87:ff:c2:c9:1f:09:3c:c3:45:2a:d0:a8:8b:4c:
42:e8:ff:58:5f:73:ca:bf:2a:e0:da:67:9b:4e:31:bb:ee:ad:
d1:8a:56:24:e2:be:2a:0e:84:e6:a8:ca:ce:dc:6c:2c:c7:6b:
84:07:69:c7:27:81:1e:be:85:65:24:02:3c:23:dd:b8:55:56:
11:5f:9c:46:fc:f1:cb:2a:e3:84:a2:a9:75:13:b0:32:48:b4:
c7:41:f0:3d:3b:85:ae:08:32:75:e9:05:ac:87:fe:7c:cc:0e:
bb:a7:38:e6:a6:05:9c:c3:69:64:44:3f:37:14:8f:82:bc:79:
52:7c:f6:59:bb:23:10:97:95:07:99:e3:7f:db:04:be:1a:1a:
86:68:d2:97:fd:ab:53:c5:d9:d8:a4:50:fd:7d:4a:47:75:45:
98:e2:ad:ce:ea:ab:bf:03:ba:43:1f:0e:82:38:77:2b:aa:53:
55:77:bc:01:6c:4c:f3:12:31:a2:15:61:a2:22:20:92:2f:9c:
61:c4:bc:24:58:13:8d:65:09:73:84:56:39:75:49:31:e7:ca:
63:f6:38:b9:61:80:21:74:c8:92:00:95:b2:69:91:91:7c:3e:
33:f0:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:44:41 2026 by rpki-client