
Error: rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
File: rHITs7LocPtTc8MpQCO1C-Vd5gw.mft (raw, json)
Hash identifier: ZK9GfaU4l4ee6QpOl/IEGmrjHmOniWs9lE3wmcKF/eg=
Subject key identifier: 4B:3F:9A:D3:E7:93:6D:50:67:FF:6D:48:32:67:75:8C:73:B6:B2:CE
Authority key identifier: AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
Certificate issuer: /CN=F36894B8AR/serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
Certificate serial: 1B
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
Manifest number: 1A
Signing time: Thu 08 Oct 2026 05:54:33 +0000
Manifest this update: Thu 08 Oct 2026 05:54:32 +0000
Manifest next update: Sat 10 Oct 2026 05:54:32 +0000
Files and hashes: 1: rHITs7LocPtTc8MpQCO1C-Vd5gw.crl (hash: G16twig9PudO0lVKq1iN1ITAsi92mW2CAcUbGNcmckU=)
2: FFFD6E52B03411F19F2D32E6CE1D38B0.roa (hash: Va63pqJ3CMpQhpi8Ld4p5aHiyR85A5tdFO5Lva8PMsw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36894B8AR, serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
Validity
Not Before: Oct 8 05:54:32 2026 GMT
Not After : Oct 10 05:54:32 2026 GMT
Subject: CN=6ac73019-94f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:58:d0:08:ad:ff:44:06:a0:7c:04:53:6d:
9b:93:9a:ad:a4:58:06:d1:1c:d7:2b:5c:17:7f:37:
34:38:43:b4:cd:61:c9:31:f6:ad:89:dc:dc:fa:de:
71:ff:aa:f8:83:b1:86:31:32:c3:85:c4:ac:78:42:
13:e0:0a:da:b4:82:eb:86:b3:1b:8c:b6:36:36:45:
f0:13:fc:d9:1c:30:25:87:fa:48:f1:76:23:3c:aa:
25:e3:46:bc:b9:41:ee:a6:50:55:19:25:09:7d:15:
d0:cf:cb:4b:36:2a:a6:57:7d:94:82:fd:f3:5b:e9:
39:13:cf:ad:b6:b8:0d:ea:18:bc:99:2f:65:0b:e5:
02:3d:67:ba:4e:1e:e6:04:4d:c5:72:7d:26:c5:55:
76:ca:9c:f1:41:6d:0a:74:75:a1:dd:1e:74:70:42:
dd:b7:b6:30:da:e2:6d:ff:f3:bc:49:ae:c7:2a:75:
30:9f:44:92:7e:5a:0d:c1:c9:bb:ab:da:98:0b:ec:
a7:83:18:c4:69:21:0c:2f:cb:9f:c6:80:a1:b7:b9:
a7:14:8e:7b:2f:f3:a4:43:f0:79:25:aa:0b:9f:3f:
54:2f:6c:6b:7e:cd:d6:63:b3:c6:2e:f7:db:1f:11:
a5:10:79:62:30:78:f4:8b:8a:6e:8a:d7:24:7a:b3:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3F:9A:D3:E7:93:6D:50:67:FF:6D:48:32:67:75:8C:73:B6:B2:CE
X509v3 Authority Key Identifier:
keyid:AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:cf:12:05:3f:c0:e1:73:8e:48:3f:e0:e9:b8:56:82:12:
f6:6e:18:68:fb:3d:83:cf:e9:6f:40:68:bb:bf:45:bc:49:83:
ee:12:60:87:8b:ad:c3:aa:17:f4:72:ce:4c:0d:6d:2b:0d:1c:
d6:c5:e4:82:78:5c:1e:62:5b:49:9a:fd:d5:00:2e:ae:70:49:
8d:35:44:d5:10:b8:0f:ab:02:0b:bc:e4:c7:36:be:58:e2:ef:
ae:5c:20:41:e0:0e:e3:9e:5f:d5:ce:05:c8:18:cf:2e:37:ff:
14:69:ac:8a:b4:a5:b3:45:a0:16:21:1a:b5:52:fd:27:68:fc:
81:e5:19:b2:17:d7:b0:6d:45:61:9e:83:94:9b:0b:34:73:2c:
92:dd:aa:09:f1:3e:9d:fe:85:51:02:3e:26:fb:29:99:12:40:
d6:98:e4:3f:8d:0c:28:07:c3:e6:70:46:c3:d6:fa:1d:fc:67:
77:8e:12:00:b2:c1:ef:5b:d0:d9:98:02:80:3a:b4:e7:49:45:
e9:16:c1:ff:6e:49:c3:12:9f:f3:87:a4:9a:a4:8c:e3:c3:a1:
0f:0b:fe:c6:62:e9:02:ba:41:0b:fd:32:e9:34:38:93:d6:fe:
a0:a2:39:15:1b:28:e0:37:8a:b4:8c:46:7a:e2:fd:f4:6e:86:
52:09:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:33:28 2026 by rpki-client