
Error: rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: EM0YZ6ruNJ3fyR9EQdH2PDR1D+e7f3eUgwonGwGMCYQ=
Subject key identifier: 62:45:F0:55:30:90:CF:20:62:56:87:BD:A7:45:9F:75:E1:2B:A0:5B
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 049D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 0497
Signing time: Sat 26 Sep 2026 03:38:24 +0000
Manifest this update: Sat 26 Sep 2026 03:38:24 +0000
Manifest next update: Mon 28 Sep 2026 03:38:24 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: PpWnH1FA1se/+wFjmA9sUozCJUJai5bnHhek32807EE=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Sep 26 03:38:24 2026 GMT
Not After : Sep 28 03:38:24 2026 GMT
Subject: CN=6ab73e30-0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:d0:5d:e1:4e:58:83:28:a0:66:55:58:da:
35:de:00:a4:59:60:19:cd:4f:dc:85:31:72:df:7f:
e7:53:0b:9c:f6:bc:48:4b:49:f6:47:10:2c:73:88:
3c:02:55:03:bf:6e:cf:90:ac:86:24:9f:32:c3:24:
bc:6a:f8:e3:36:b8:11:cf:af:36:2c:86:b1:b0:32:
23:0a:52:f3:ed:e0:c8:ea:7e:ed:33:c6:9b:50:7c:
46:25:1e:ab:dd:0c:59:cd:b2:79:46:2c:ad:44:6f:
7a:4b:99:9d:18:44:98:35:8d:52:c3:81:05:46:75:
31:39:d5:fc:e9:e4:c2:d6:cb:12:83:b1:13:ad:64:
4b:33:8f:c6:15:b1:a8:14:a7:3a:b9:ef:06:b4:1c:
2e:de:0e:a5:85:fb:bd:16:86:1b:60:e4:7b:57:df:
b1:1d:89:70:39:83:39:e4:25:4e:d7:9a:8b:d5:f4:
99:3e:ac:d6:a8:7c:8a:15:ef:bf:56:4d:18:d0:7c:
f7:48:79:ff:f3:b2:17:1f:2c:e7:e4:66:cb:e7:e8:
9b:81:18:14:0a:26:d4:74:2a:08:21:01:89:67:1c:
8e:94:46:26:67:b7:5a:50:a2:04:f4:24:61:82:64:
d2:b0:0f:73:71:e2:87:38:f2:ed:f2:99:c3:a6:ac:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:45:F0:55:30:90:CF:20:62:56:87:BD:A7:45:9F:75:E1:2B:A0:5B
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:c9:04:3f:49:cf:a2:db:27:39:dc:e2:ee:46:af:de:b9:
a0:0a:f3:ac:9c:2b:c9:6c:22:08:8d:45:c7:46:99:28:3c:c7:
6c:eb:67:fa:74:86:47:3e:f8:3a:72:99:12:0a:61:5d:b0:24:
5a:8c:70:d4:42:70:25:be:01:4f:8b:60:13:4b:68:bc:2c:29:
8f:b5:d9:77:b0:4b:40:67:b8:8f:14:c2:97:75:3f:fa:bf:28:
d3:99:6b:81:1a:e5:52:81:b9:f2:be:77:32:dc:b2:99:59:b2:
05:a2:3e:89:47:38:e4:9f:fa:df:df:e1:17:1a:d2:b3:0e:25:
f1:cc:9e:a6:5e:58:86:9c:27:43:39:4f:e2:df:99:8b:26:77:
94:9e:85:d5:b2:bd:79:4e:99:08:af:e5:39:cf:83:b7:f3:46:
1f:65:de:1c:70:cf:6d:35:45:ad:a5:a5:56:f0:87:d5:2e:94:
10:6c:5e:e2:ca:d8:9b:dc:9e:72:75:ef:70:c8:03:0d:19:02:
3e:65:16:f9:aa:ce:01:4d:fd:ce:a6:c3:6b:36:57:4d:df:90:
be:e6:ca:17:41:70:64:8f:76:3f:f0:50:00:4c:51:3d:3b:ef:
7d:02:77:cd:bc:91:4a:0a:29:d0:b5:e5:c5:40:9c:d0:01:73:
1d:56:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:15:29 2026 by rpki-client