
Error: rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File: zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier: ykfecsAmU1bA8Bxafw0ymDEpkq75Iu5NNjQaQMgMRYE=
Subject key identifier: 22:49:BB:06:F3:8E:B6:F5:63:B9:B4:03:40:6E:30:22:70:AD:91:22
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer: /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial: 043F
Authority info access: rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number: 043D
Signing time: Sat 10 Oct 2026 03:50:17 +0000
Manifest this update: Sat 10 Oct 2026 03:50:16 +0000
Manifest next update: Mon 12 Oct 2026 03:50:16 +0000
Files and hashes: 1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: UFhL5GogTVb4DvERwK3Xy/uE6yy2Yf2Bn7hGJwNujWM=)
2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Validity
Not Before: Oct 10 03:50:16 2026 GMT
Not After : Oct 12 03:50:16 2026 GMT
Subject: CN=6ac9b5f8-402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:f9:71:95:58:ff:ff:83:7d:35:fb:b1:25:
83:81:23:2b:3a:db:ac:e2:5e:5b:bc:01:cc:56:c3:
78:36:a0:82:18:1d:02:d3:a0:b4:09:39:44:dd:27:
7f:f2:6f:8a:d8:fd:15:15:9f:9b:1d:db:06:29:d8:
e4:a3:de:0c:e4:25:8b:89:f4:da:99:52:50:6f:de:
e5:f1:8c:45:58:f7:0e:a8:3b:ce:6e:aa:9c:f6:3a:
61:a0:97:59:e3:dd:a2:da:75:dc:f5:e1:d7:d2:dc:
e3:77:6b:2a:0b:ba:fd:92:6e:2e:8b:de:ca:b2:98:
7e:16:fc:23:f1:6a:cb:19:78:ad:f3:11:17:36:ca:
dd:7e:4d:75:c9:df:41:eb:c8:2a:55:42:c6:2d:55:
04:23:20:5f:8b:55:d6:50:75:ea:0c:5d:d7:61:fe:
5c:e0:f9:94:d1:85:c1:3c:18:aa:b0:45:f1:4e:1a:
b7:fc:82:de:98:73:a1:2e:b0:41:76:a1:c0:c9:a2:
3d:4b:90:ff:88:46:e0:4a:fb:40:9b:7b:79:98:fd:
dc:e3:d9:e8:98:e8:86:f9:41:96:3f:92:dd:5d:d3:
00:dd:b3:8a:cf:74:78:0c:8a:29:93:a1:7f:0e:99:
0f:e2:7d:f0:b9:64:96:c5:c1:e3:1e:b2:65:0e:ba:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:BB:06:F3:8E:B6:F5:63:B9:B4:03:40:6E:30:22:70:AD:91:22
X509v3 Authority Key Identifier:
keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:ea:22:9b:6b:42:68:8a:21:64:a8:22:34:dd:06:2b:ee:
1a:a7:2a:3a:12:96:e9:55:2d:dc:60:5c:a7:d1:bf:9f:f7:b6:
97:1c:ef:44:31:f5:e3:49:a2:90:6b:72:dc:e0:fd:1c:6f:6d:
1b:ca:21:61:40:d4:db:9d:02:f7:13:90:ba:dd:da:8e:e3:44:
3a:62:85:17:c8:63:58:6d:6c:d7:2c:8e:97:c4:4b:db:6d:bc:
9a:c3:f4:f6:3a:c6:c1:69:97:72:46:26:4f:a4:b3:c7:f0:79:
24:42:d2:93:08:f2:1d:1d:97:ff:c4:7e:43:80:27:12:90:3a:
97:a3:cd:05:1b:22:c5:51:21:d9:e1:77:40:d0:ba:95:fd:61:
72:d3:42:07:f1:5f:1f:23:9b:43:4e:27:9d:fb:0e:8d:0c:a4:
12:c6:ad:88:52:54:bf:b2:ea:29:76:ac:1c:a4:1c:8b:ad:d8:
1b:95:a5:64:29:18:b6:76:6b:44:4f:26:7c:21:c4:91:62:76:
71:bb:de:55:e3:e4:47:7b:bb:54:21:0e:a5:49:29:d4:f2:8a:
b0:0c:1d:6e:65:89:e2:7c:b2:ec:e3:88:a2:0d:6e:cd:9b:db:
95:ee:19:ee:a9:45:42:20:5f:90:55:31:6a:9b:0e:ac:2e:29:
0c:ee:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:15:04 2026 by rpki-client