
Error: rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File: 0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier: PLIFNck/9F2BqaZKglERA4H0t4bz8U45kVUKVGPPBvA=
Subject key identifier: C5:90:8F:CC:24:DD:76:27:79:E4:7A:A6:F7:AC:D1:01:C9:DD:32:0B
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer: /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial: 076C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number: 0765
Signing time: Mon 12 Oct 2026 02:26:05 +0000
Manifest this update: Mon 12 Oct 2026 02:26:04 +0000
Manifest next update: Wed 14 Oct 2026 02:26:04 +0000
Files and hashes: 1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: xNTHtr/hWo04AkjSeQl/sjvanqc6VNH8tpY73/W/Tbg=)
2: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
3: 9E1E04DAC42A11F195A36CD8CE1D38B0.roa (hash: N2Ari3VqP125GfUVmY/HdUpQCynCdIpetGzSelUfNiY=)
4: FACAEE98703B11F186502B13CF1D38B0.roa (hash: +atnFyNmkEsaCKX9Ro0ZZNx+4LrHBs/bVM1erUMfE6Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 02:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693944AF, serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Validity
Not Before: Oct 12 02:26:04 2026 GMT
Not After : Oct 14 02:26:04 2026 GMT
Subject: CN=6acc453d-ad9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:ba:f6:bf:ab:a8:3a:9a:69:c9:18:bb:80:
eb:44:29:25:2a:06:1f:a7:fe:93:70:69:84:ee:dd:
ee:21:db:8e:b6:e1:75:3d:f3:af:16:ed:d5:46:eb:
21:7f:5b:0e:dc:cd:03:34:af:ef:0d:6e:36:a9:4f:
62:7e:1e:8e:64:9b:50:1d:78:ca:03:76:9f:5f:c7:
37:6a:5f:23:ef:b8:e1:f1:3a:3b:9d:85:73:b8:9c:
b4:5b:7e:8f:ee:16:ce:5d:3a:02:f6:88:a2:69:25:
f6:ee:13:25:14:cb:8d:11:e4:c5:47:5b:4a:c2:a2:
73:a6:b2:28:d9:06:65:63:24:89:c0:3f:d2:7c:c5:
3a:7b:6d:2e:3b:ee:10:cd:68:5d:44:85:7b:0b:f1:
7c:b9:38:81:9b:12:bf:a0:b6:b6:1b:eb:7c:60:ce:
a1:f7:1c:45:4f:5d:80:a8:60:80:4a:2b:f5:19:f9:
54:29:7d:fd:06:86:9c:56:d8:3d:6d:ac:64:e4:2c:
57:58:31:75:ee:1d:85:ae:4b:a3:42:c5:0d:28:b5:
69:78:b8:37:1f:2f:30:e9:1e:50:d1:0c:bf:b0:f6:
e5:eb:bf:ae:2a:3d:27:d4:1f:38:5b:65:8b:e6:d4:
27:52:a5:a5:75:fe:d6:eb:6c:e3:22:ed:b9:50:b5:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:8F:CC:24:DD:76:27:79:E4:7A:A6:F7:AC:D1:01:C9:DD:32:0B
X509v3 Authority Key Identifier:
keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:65:8b:05:56:f9:f7:7c:84:b9:9f:a7:9d:e9:51:c1:2e:d5:
a1:63:88:e6:a4:3e:29:91:91:8c:05:37:f8:24:1a:82:cd:87:
6b:ef:07:04:1e:61:ee:21:b4:28:17:f1:f4:89:89:76:7e:8f:
c7:77:32:2d:35:59:54:5f:f9:a2:bd:9a:fb:88:3e:a0:30:e6:
28:cc:b2:60:61:41:d6:7c:a5:b7:97:cb:8d:c1:1e:a3:e0:ca:
35:9e:ca:43:dd:81:7a:c3:f6:6e:28:bd:c8:4f:e0:fa:e7:d2:
a3:04:4c:77:f4:66:7f:34:55:01:dd:36:8e:86:88:80:a8:86:
ee:7b:2e:e7:25:87:b7:58:62:74:d3:01:74:d3:e8:bc:23:5b:
22:38:ba:b0:47:85:92:f1:03:d1:7f:a2:d7:97:eb:bd:1f:e3:
15:b6:54:ce:1c:c8:49:c4:a2:98:95:b2:f1:c3:bb:b4:d5:55:
b5:c4:1c:8a:a8:a2:b4:d9:4b:1f:5e:89:70:c9:af:0b:8b:33:
bb:8e:79:fa:15:83:84:a0:93:c9:32:90:5d:50:67:64:f4:57:
fc:39:68:3d:4f:6c:5f:35:5a:98:ff:e3:b8:c7:82:4d:5c:b9:
18:d2:40:51:2b:b7:e6:18:47:bd:f4:b0:3e:36:4c:bb:f2:a4:
f9:17:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:48:56 2026 by rpki-client