
Error: rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
File: 9XSxa6hq2W4A3trNY0H5qCTqR6c.mft (raw, json)
Hash identifier: lthFQDCta/3cSe4ehg7UxkDE0z/Lrwgc+yC/BM1h93c=
Subject key identifier: 00:DA:C5:70:F7:EF:17:F2:F7:A0:47:23:13:2E:3E:27:4C:F5:71:9F
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Certificate issuer: /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial: 0340
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
Manifest number: 0339
Signing time: Fri 09 Oct 2026 04:22:59 +0000
Manifest this update: Fri 09 Oct 2026 04:22:58 +0000
Manifest next update: Sun 11 Oct 2026 04:22:58 +0000
Files and hashes: 1: 9XSxa6hq2W4A3trNY0H5qCTqR6c.crl (hash: hYMzjwu515DnNBmcSM+vr3booV5mefAPESyYBJ89ZHI=)
2: AEEDAD061A0711F192AA088FDAE4EC9C.roa (hash: JNwZ7kUtB4FzpUgaJAkRzngvDEP1d2+9HLGp6xBl/AI=)
3: 8036BCAE2A7F11F19DD1749ADAE4EC9C.roa (hash: Br53n/pGReLNyDpsiSvYoijagBzl59OaUoRNTDvz4ms=)
4: F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa (hash: w6gvWanr3TgG7meRgmSObxkcZzrvD0UBJOndkTrbcL0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Oct 2026 04:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Validity
Not Before: Oct 9 04:22:58 2026 GMT
Not After : Oct 11 04:22:58 2026 GMT
Subject: CN=6ac86c23-c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:f7:06:a3:22:4e:91:7c:5b:ac:03:12:02:
81:6d:82:2b:05:cd:52:c0:ac:3c:93:8a:5c:16:e9:
b1:14:75:a4:f8:0a:dd:1d:9c:c1:54:20:0d:21:6e:
b5:ee:2a:36:72:37:8e:e8:ef:3f:e9:d4:f8:8d:45:
c1:f9:b2:73:3d:73:9f:6d:9e:64:5c:af:06:b9:52:
49:ed:c0:4d:9b:50:a4:8c:e0:85:b6:3f:77:5e:40:
e4:15:6a:0f:33:a1:73:55:44:0e:f5:29:1b:ef:29:
6e:fd:fc:41:e7:9f:16:a1:ec:cc:8a:9b:49:02:91:
15:e0:e8:42:a7:40:cc:ce:be:e5:21:49:22:d2:ac:
75:48:b7:c4:0a:82:12:ed:16:2a:19:a0:6d:c0:3d:
18:71:8d:3b:4f:00:88:a3:af:f0:ca:2a:d6:a9:19:
f1:c7:2a:a5:5d:15:90:07:01:da:10:f8:dc:fa:d7:
0b:aa:53:9a:00:3a:91:6a:cc:c1:5b:91:59:1b:76:
a6:d1:b4:3d:57:95:f9:61:06:67:fc:a6:15:da:1b:
46:c8:d4:d5:48:38:6f:43:41:9b:d5:fa:bc:d2:e3:
13:98:62:02:78:7f:30:19:32:c6:e5:96:b3:3c:03:
c2:41:22:85:7e:10:b0:8b:5c:b2:86:6f:52:de:9c:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:C5:70:F7:EF:17:F2:F7:A0:47:23:13:2E:3E:27:4C:F5:71:9F
X509v3 Authority Key Identifier:
keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:fa:98:14:99:0d:2b:f4:e6:5e:9b:73:9a:32:ba:c8:cc:
0a:eb:35:c4:de:7e:c5:f2:ec:3c:bd:05:0e:4f:19:ef:e2:3c:
d0:07:f4:68:2b:98:4a:6e:4f:2f:28:c1:f4:12:5e:b3:88:fd:
ac:22:34:1b:4f:d8:53:cf:f9:e8:92:65:39:96:e4:a1:f2:0f:
bf:56:9e:e6:ea:43:ec:f2:ad:99:f0:92:c7:b8:a0:41:c6:15:
b6:4b:9d:24:de:ff:ca:dd:6b:53:90:64:79:f6:cd:71:41:99:
7a:3d:ef:59:45:c0:ec:10:91:fc:5d:16:98:ac:b1:db:99:47:
21:9d:2e:4d:d3:e3:b7:d2:a2:70:98:e8:dd:7e:90:58:b0:9e:
65:34:18:35:c0:26:b4:d4:64:8e:ca:74:7e:cc:d5:d4:09:72:
56:e1:75:44:ce:f2:9f:90:34:c7:4b:b9:b6:e4:db:52:ec:83:
43:6f:df:0d:f2:eb:8c:ab:30:40:ad:91:85:d4:86:c8:f6:66:
de:ac:bc:29:2c:d7:e8:b9:07:d8:e1:de:5d:9b:1e:15:d5:36:
c6:54:98:9d:ea:5a:6f:96:b2:03:16:9d:7b:de:c4:64:93:f9:
fe:a7:cf:7e:48:f9:f0:b3:0e:d8:a1:a2:67:d0:d3:a1:07:36:
12:db:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:23:15 2026 by rpki-client