
Error: rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
File: yS6IWCfGdhnhMXVwMBfERC3f6s8.mft (raw, json)
Hash identifier: DQNOvyglsIDxwJTuabcxBl3gmO7HM/9woveJYsDfHnM=
Subject key identifier: 58:D2:17:84:FB:EE:F2:00:D8:4E:58:9F:A5:A5:86:E4:40:65:8B:B2
Authority key identifier: C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
Certificate issuer: /CN=F369F058AF/serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Certificate serial: 0B1F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
Manifest number: 0B14
Signing time: Wed 14 Oct 2026 01:17:24 +0000
Manifest this update: Wed 14 Oct 2026 01:17:23 +0000
Manifest next update: Fri 16 Oct 2026 01:17:23 +0000
Files and hashes: 1: yS6IWCfGdhnhMXVwMBfERC3f6s8.crl (hash: UXPKSSWe9SjboiOwbj5noFEQUwC/aLoZBK5hh5zyPkQ=)
2: F3961630123611EF80C92C51017001B1.roa (hash: P7zmLDBytjro0KKIgTEyZppS7BdxrGwBEJ1mm2r94Gc=)
3: CF05ECFCA77411F198E04AEDCE1D38B0.roa (hash: iYESV8f6QL3YpRdWWw9rt0Ncx/khSrDTjVayuJcHApQ=)
4: 04605838361A11F0B9F961F3DAE4EC9C.roa (hash: r+y3Fw+81AAFIoIiHOQuOaDuH+WDZZZ3ri/u6RsXKpg=)
5: 25843EB0123711EFB5C1A851017001B1.roa (hash: 5Dbg0It6Gnjot6cZHpwak5GthbHzIipbWJ6mhVVl1e8=)
6: 90AD6192A77411F188D6BAE9CE1D38B0.roa (hash: fWmY6i/CSL5/fkan32p1pVRsVhJJHvl/8SPguXbL6cM=)
7: 32FAEFC2361B11F0B2EA437CDAE4EC9C.roa (hash: 22FqTrSwm7BxiKIiscjIzYYBmw1MfLawSBgcnxT4pB4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 Oct 2026 00:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2847 (0xb1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F058AF, serialNumber=C92E885827C67619E13175703017C4442DDFEACF
Validity
Not Before: Oct 14 01:17:23 2026 GMT
Not After : Oct 16 01:17:23 2026 GMT
Subject: CN=6aced824-5c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:51:ed:27:9e:a8:42:b8:4c:c6:c3:26:04:
7e:d1:33:d8:85:98:38:fb:d9:ae:af:7b:9a:89:73:
cc:88:40:59:0b:de:91:93:87:e2:a6:a9:c9:8c:30:
3c:01:79:13:20:68:9d:90:8a:82:77:b0:95:b1:82:
76:d4:fb:2a:a4:b1:6a:13:c7:b9:7f:0f:23:f0:5d:
0c:26:59:c4:54:52:65:b4:61:dd:03:2d:0c:ee:67:
eb:57:da:c0:3c:f7:1c:55:48:56:b9:ec:e2:f5:7e:
0b:6e:08:f8:cb:03:3a:52:3f:4b:1a:f3:ee:bf:f8:
39:f4:e5:f0:cd:cc:be:e0:28:14:16:01:ff:60:a8:
ff:1d:fc:23:05:21:54:eb:1a:f1:37:e8:77:11:fb:
1c:91:53:7d:3f:1f:1a:63:79:92:25:cd:de:19:cf:
9e:bd:13:46:e1:d1:73:e2:62:d8:83:f7:5a:4d:60:
d2:32:18:ef:fa:a1:c2:1b:fe:45:12:3f:0a:d9:6e:
43:7e:fe:e6:a8:59:cc:0e:bd:d1:23:a0:5c:f5:3e:
8d:d8:87:fa:ab:12:b0:76:9b:91:60:79:0e:f7:ea:
4a:12:b0:48:fa:ff:60:6e:5a:38:66:0a:d6:d0:6f:
3a:8e:fa:38:ee:41:6a:fa:32:f0:fa:67:79:de:f5:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:17:84:FB:EE:F2:00:D8:4E:58:9F:A5:A5:86:E4:40:65:8B:B2
X509v3 Authority Key Identifier:
keyid:C9:2E:88:58:27:C6:76:19:E1:31:75:70:30:17:C4:44:2D:DF:EA:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yS6IWCfGdhnhMXVwMBfERC3f6s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/8B32E79A553911E9A572702FF8AEA228/yS6IWCfGdhnhMXVwMBfERC3f6s8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3c:3c:28:7f:a9:81:71:da:b3:df:25:84:a6:ae:bd:ab:2b:
ea:2d:2d:e8:ea:ba:42:85:a2:21:b2:3c:4c:e9:89:1f:16:fe:
41:c0:1a:dd:fb:1a:83:84:c3:4e:b0:ff:f2:45:31:82:b5:55:
16:fb:34:3a:de:87:08:11:d4:16:46:e1:8b:d2:c6:ed:72:08:
cc:d2:8d:78:dc:fd:dc:4b:61:d9:c1:09:21:65:93:e0:dd:d1:
2f:0b:9f:ed:20:fc:30:6a:8c:03:a7:bd:39:85:a0:5d:db:9c:
93:3d:ff:8b:fe:b6:39:5c:9e:9c:8a:f8:18:46:5e:7d:93:f1:
7b:79:a1:38:a8:1c:11:c6:f5:f5:81:14:ef:e5:df:91:1a:42:
2e:c4:8f:cb:c7:5d:02:87:a5:3f:42:19:91:75:3a:9b:f2:a8:
30:6b:34:11:31:51:48:13:61:51:a2:70:bb:a2:22:bf:b1:58:
be:b3:05:cf:b4:3a:23:52:c6:48:28:b4:92:1b:b9:a1:7f:f9:
cd:e5:43:b4:7c:44:d2:08:44:04:7c:9d:0c:b2:b8:d9:9c:5a:
e7:eb:ac:0e:8f:1d:8a:7d:a8:b2:05:b5:16:87:59:34:30:f3:
26:e5:d1:49:01:37:4d:83:6d:dc:2a:8d:e3:6e:c9:51:16:54:
aa:c5:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:03:57 2026 by rpki-client