
Error: rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File: u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier: tEfPOGJbUvMq5s/lTrYh8WQDx+DQ44zUds5ATFY1aaw=
Subject key identifier: 8E:C9:59:BE:3B:4D:05:1E:43:8D:24:34:54:05:6E:DD:4C:3F:F8:BC
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer: /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial: 074A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number: 0746
Signing time: Mon 12 Oct 2026 02:29:55 +0000
Manifest this update: Mon 12 Oct 2026 02:29:54 +0000
Manifest next update: Wed 14 Oct 2026 02:29:54 +0000
Files and hashes: 1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: gxttiYZLtJoFY7UCdaqHY9kobXqRsPuOU+zeU3BB11A=)
2: A727C4428B6F11F1BB2BB2B7CE1D38B0.roa (hash: XawFZJaxnzvq5b0Rtz7wsotNQ+4PwTnD6TvOuVmsVCg=)
3: 6AE6E2A0899511F1836059E9CE1D38B0.roa (hash: Ke0DyeeNvPUu3/HySu88mHg8fSTxD3OWYshhFWO+3pE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Validity
Not Before: Oct 12 02:29:54 2026 GMT
Not After : Oct 14 02:29:54 2026 GMT
Subject: CN=6acc4623-d974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:90:2b:df:25:4c:79:2a:da:d5:ff:95:0e:
cd:6e:03:b8:e2:6d:74:6d:ee:cb:3b:7d:39:d9:cc:
b7:86:f2:15:ad:38:35:a3:3c:4f:e4:aa:e0:75:86:
7f:af:25:83:eb:55:ce:bd:64:58:75:3b:5e:45:14:
10:33:e7:74:6f:11:f1:cf:4c:bc:a8:b9:7b:da:95:
47:57:62:a8:e9:94:83:b6:dd:fe:79:4e:1c:95:63:
ae:2e:a6:9f:4f:12:63:bc:2b:46:74:fb:2a:9f:50:
94:51:2f:36:4f:e5:8c:46:0b:cb:a8:65:17:fd:52:
1b:e7:63:8d:83:d1:5f:44:28:7e:0f:3c:7c:ef:9a:
e5:03:e8:40:59:cc:4e:f1:ce:70:41:1e:42:31:48:
19:fb:f2:76:cc:8a:14:ec:79:3e:d6:7a:23:e1:53:
cc:9c:41:56:3a:dc:6c:7a:74:50:f5:72:fd:b7:dc:
39:92:a4:92:5d:fd:8c:31:1c:89:c5:50:df:d2:8c:
c1:a0:f3:da:d7:a4:5c:df:29:24:30:16:35:5b:a0:
bb:1d:fd:8d:2c:1b:8d:21:e5:86:d9:b1:d9:72:11:
04:e6:9a:91:79:80:ea:c0:17:a4:09:31:01:93:90:
c9:59:45:8e:8a:35:34:9d:b3:58:9a:27:d4:da:7a:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:59:BE:3B:4D:05:1E:43:8D:24:34:54:05:6E:DD:4C:3F:F8:BC
X509v3 Authority Key Identifier:
keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:b3:ce:b5:2c:ed:53:2d:0d:84:cc:77:d5:b0:e8:28:e1:
d2:17:08:cf:8c:84:eb:72:50:8d:d2:6c:da:c6:4a:aa:8a:e1:
fd:82:7b:64:d9:dd:a2:54:f7:24:9e:7f:19:05:9a:fc:12:be:
fc:fe:c1:51:dc:79:2d:f4:3d:04:57:fe:da:a8:9f:28:16:83:
61:3c:56:91:30:03:52:55:c1:a2:89:11:ab:5e:49:b2:5b:52:
84:f5:c5:f1:48:88:cc:fa:58:b2:25:b9:5a:1e:2c:b6:a7:7a:
a7:02:cf:6b:04:dc:5c:ae:f7:25:05:fe:06:c2:db:79:7b:c3:
9b:d7:94:3e:42:7b:ef:4c:5b:78:b9:b3:c0:f4:df:35:93:44:
4a:cf:e5:0f:28:2a:33:06:fa:6b:82:84:5a:15:2e:63:6d:57:
bd:a9:37:3a:e9:f5:c8:7a:19:ec:96:73:c8:fa:92:25:9d:db:
bc:29:69:11:e5:bc:23:63:82:d8:f8:a6:0d:8c:ba:c6:e8:14:
82:bb:6a:7c:27:69:20:19:5f:cf:ab:dc:00:b8:dd:8d:bb:cd:
ba:0c:be:04:83:54:36:98:ba:82:12:9a:73:78:d1:00:fe:1f:
2d:86:7e:b2:9a:be:22:ab:10:17:1c:22:ae:10:b7:32:cd:8d:
64:c1:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:40:22 2026 by rpki-client