
Error: rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: ht6UN7MOcR3ewlJOTpKUqE2KkktvIbJXWN105xVq8W0=
Subject key identifier: 69:5F:AA:02:A9:E3:95:C1:01:4B:70:31:65:31:B3:C3:5B:28:87:F8
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: 02C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: 02C1
Signing time: Mon 21 Sep 2026 04:36:28 +0000
Manifest this update: Mon 21 Sep 2026 04:36:27 +0000
Manifest next update: Wed 23 Sep 2026 04:36:27 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: H2y1kRZixNTim2VP1tBLlrv2ZGhIcGtPPfINaIaUa2w=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
3: 551A9F322CCD11F09F73B0B5DAE4EC9C.roa (hash: qDJZJ73fwcMimn2oqNCcTPQF5DF0ccPRcwR3NYTQ2dI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF, serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Validity
Not Before: Sep 21 04:36:27 2026 GMT
Not After : Sep 23 04:36:27 2026 GMT
Subject: CN=6ab0b44b-08b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:8f:e0:e5:e0:f8:90:60:8d:97:a3:0b:bc:
ca:d0:73:c8:b5:34:6e:65:dd:a4:38:71:f5:a2:1d:
a5:d5:56:6e:d7:15:b5:d6:df:6f:4e:11:70:df:08:
eb:8f:54:46:eb:d6:c3:8f:95:1f:d5:63:2a:3c:67:
bc:2d:04:fe:35:f7:b8:5c:c6:9e:5b:da:08:36:7a:
75:dc:f1:86:62:31:70:ae:5f:be:da:0d:dc:3f:19:
a0:d4:51:47:1c:c1:c4:7e:73:27:80:74:27:a6:97:
73:d1:56:11:54:ef:5b:3e:97:7b:45:8f:92:27:5c:
30:e8:6a:b4:b8:f2:90:44:4a:66:78:f8:68:18:16:
6c:bd:31:f8:07:2d:c1:28:bf:0f:d1:46:be:d9:e0:
f6:21:04:3a:b4:45:0f:4e:c4:f1:0f:f5:66:24:10:
15:f7:00:ab:db:f3:54:e1:5c:b2:7f:91:b0:13:ee:
bb:44:ce:e4:d3:95:a7:b6:fe:e7:03:09:7d:13:c3:
35:10:4e:6c:2d:89:4f:8a:57:a4:b6:ed:f4:88:c1:
e1:33:d5:f7:12:3a:b1:56:1d:86:59:2f:5a:cb:49:
1d:3e:29:7e:72:ec:88:c1:03:6c:87:76:6c:83:c4:
d2:e2:e7:ec:00:84:4f:54:36:13:93:d3:21:18:e0:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5F:AA:02:A9:E3:95:C1:01:4B:70:31:65:31:B3:C3:5B:28:87:F8
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:28:cf:4f:8c:95:49:c0:a7:09:21:ba:fb:b8:02:07:b6:
e1:d1:96:9f:91:d0:46:54:92:55:77:9e:6e:f8:c7:b0:33:21:
d6:14:91:d3:73:a2:ed:44:be:7b:de:58:22:fb:40:b1:2a:ab:
e3:cd:40:51:93:96:c1:9d:15:cf:38:ca:1e:ed:c5:88:11:8c:
b7:1e:5a:bd:f9:30:3e:46:51:1a:ca:9f:a6:5e:50:fb:a3:0e:
4f:62:24:29:3c:78:eb:69:2c:82:de:f1:e0:9c:ae:02:24:17:
6d:67:52:a3:2d:17:6f:9c:82:cc:ed:13:6a:ac:7f:3c:5d:56:
0c:06:7f:1d:b3:5c:3d:6b:19:23:0d:88:96:3a:86:f7:8d:e0:
71:9e:79:3e:97:33:c6:84:0c:f9:c6:37:fe:f9:81:aa:aa:15:
58:85:b8:3b:e3:f4:f8:4b:9a:a6:b9:bb:92:4c:c5:e6:88:ce:
a7:ec:17:02:8b:33:93:2d:f2:79:6c:11:2c:33:18:ca:e7:44:
37:f3:c6:1e:f3:50:3b:d4:33:57:2c:39:e8:a5:90:25:17:bb:
35:b3:f6:4e:17:34:0a:d6:2b:1e:b6:a5:06:50:15:cd:53:d4:
a7:74:7f:b2:97:37:60:77:33:e2:d8:7a:f4:ee:0c:72:f3:0e:
b2:cc:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:18:29 2026 by rpki-client