
Error: rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File: HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier: HOvSz1S3xQUEHVGHZT7TltnHOLr9Y+0XsTNZO8iFGAk=
Subject key identifier: A8:DB:ED:BD:59:E3:E2:C7:40:0B:E5:0B:7B:CE:E8:12:2B:70:38:51
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer: /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial: 09B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number: 09B1
Signing time: Sun 11 Oct 2026 01:42:54 +0000
Manifest this update: Sun 11 Oct 2026 01:42:53 +0000
Manifest next update: Tue 13 Oct 2026 01:42:53 +0000
Files and hashes: 1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: aQPRewW1E/IlHGuMl1bKtz4I4uGJOrkFTcyZ6NFLdWc=)
2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Validity
Not Before: Oct 11 01:42:53 2026 GMT
Not After : Oct 13 01:42:53 2026 GMT
Subject: CN=6acae99e-0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:30:98:8d:7a:0d:bd:75:8d:b1:a7:5f:de:
b8:6b:b8:cc:d6:d3:a0:9b:7d:87:bf:34:bc:20:82:
9b:44:ac:7d:b9:f9:a8:92:db:08:95:76:75:da:4f:
89:67:9e:19:ae:c3:2d:2b:52:27:e6:6b:0c:9b:18:
6a:bc:70:d3:d2:34:07:eb:2d:1e:35:b9:eb:47:53:
d5:43:ae:87:ea:44:3f:6e:a2:03:1c:c6:8d:77:43:
a3:0a:21:34:00:db:37:e6:97:9b:39:b4:9b:dc:2d:
d6:e2:c4:08:11:95:70:a9:e4:08:bf:78:78:ca:d4:
b7:76:a4:94:98:be:b9:42:89:cd:92:30:34:23:f0:
13:85:40:1d:93:64:49:af:70:eb:be:83:58:6e:9a:
51:15:44:bf:9a:f3:e5:4e:2c:4b:a6:8e:66:73:d8:
30:dc:a1:69:60:e7:cb:a6:79:b7:63:94:54:ac:38:
6c:3e:7d:43:35:2c:e2:20:3e:84:08:5e:43:be:9e:
c9:4d:75:88:e7:43:b4:c8:91:71:fd:f1:d8:55:8e:
9f:7e:69:81:a9:69:c1:2b:fe:d4:3f:83:6d:b3:56:
47:4d:d8:2c:ed:c6:3b:f0:77:c8:e3:b3:0b:4e:fb:
2a:9d:e6:73:17:1b:9d:5c:17:9d:e4:9f:82:0a:26:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:ED:BD:59:E3:E2:C7:40:0B:E5:0B:7B:CE:E8:12:2B:70:38:51
X509v3 Authority Key Identifier:
keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:09:1e:78:aa:62:02:f3:55:e6:de:43:87:46:03:ff:6d:
b4:46:9f:4c:da:7c:73:ce:54:dd:76:a5:f1:7b:e6:55:c9:da:
9a:70:49:e6:eb:bf:15:49:35:ec:f6:a1:89:c1:a7:0c:28:80:
1b:8c:85:b4:a0:5e:a3:1f:68:e9:a4:a1:c6:78:3b:e0:35:c0:
5b:cd:de:de:f8:45:fc:59:88:66:46:0b:e8:ac:3a:46:d4:c8:
f0:cf:95:f1:6d:a2:ae:5e:6b:b1:ca:d5:f2:1a:85:1a:ec:e0:
75:3a:af:a0:59:6f:16:a5:1f:7b:b5:1f:cb:a3:f3:89:a1:8c:
e6:75:6e:4f:8f:86:81:3b:4a:d7:19:e8:82:17:ed:01:60:97:
bc:08:53:ba:ee:28:e0:8a:49:76:07:8d:eb:11:13:31:d7:28:
fc:55:6e:b3:5c:20:8e:54:03:ee:64:0d:99:96:bd:35:99:4a:
5b:9f:7b:f7:7f:7e:61:61:83:c6:66:18:4c:01:de:fc:41:d3:
bd:49:c9:bf:08:dc:a2:aa:1a:63:02:f2:ea:d9:e7:79:86:19:
6a:c3:92:1f:5d:ea:74:bf:5e:07:6a:af:d6:32:72:7c:68:08:
39:ca:80:4c:7b:64:9b:46:57:8e:6c:13:bb:7a:6f:d1:73:92:
e8:a1:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:23:54 2026 by rpki-client