
Error: rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
File: w7UAblEUm7jKxFElONXFSJGYBRE.mft (raw, json)
Hash identifier: LT4JOpkkDBX4vyOAI7Twk7dEGYq9tOjIq1sOl+cF7VA=
Subject key identifier: 32:20:D4:86:1D:1D:73:AF:66:65:8F:F1:A2:B6:2A:C6:1C:29:B4:70
Authority key identifier: C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
Certificate issuer: /CN=F36F1706AF/serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Certificate serial: 40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
Manifest number: 3D
Signing time: Mon 21 Sep 2026 05:46:44 +0000
Manifest this update: Mon 21 Sep 2026 05:46:44 +0000
Manifest next update: Wed 23 Sep 2026 05:46:44 +0000
Files and hashes: 1: w7UAblEUm7jKxFElONXFSJGYBRE.crl (hash: gM5Hb2Q0hW+WirD7NG0Lcq/Nj72WJBAMZmKn9C8bfeg=)
2: 89F59F52899911F1A7AD9101CF1D38B0.roa (hash: YNpVGkQy1GoFTog1cBsr5YOO00CSd9CWUy+PPCH4u+s=)
3: 682E97C2899711F19F9341F5CE1D38B0.roa (hash: rbfOhYq8VLN+kcDtAjr99tjl/9Nwedu05DLdKCoHF/M=)
4: FC113E3289CD11F19C9189BBCE1D38B0.roa (hash: wvDztMtFp9ErIeXN+hPapsd1xp1Y+eDSDNfLR594dug=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F1706AF, serialNumber=C3B5006E51149BB8CAC4512538D5C54891980511
Validity
Not Before: Sep 21 05:46:44 2026 GMT
Not After : Sep 23 05:46:44 2026 GMT
Subject: CN=6ab0c4c4-33a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:42:e9:c8:ff:32:5b:f5:7d:c4:ae:ac:0d:
c1:db:b7:0a:19:07:02:bb:1f:fe:77:a2:f6:d1:b7:
bb:d2:7f:f0:c2:50:bf:03:0a:70:84:07:e4:32:9a:
d3:ab:64:78:2b:b4:ad:a6:04:52:e1:d3:80:3e:9f:
a1:77:5d:58:42:0e:18:04:be:73:7c:20:d7:c5:12:
42:d7:a0:57:20:88:a0:31:6d:71:24:dd:87:63:b4:
5a:03:bf:91:bf:ae:74:68:23:07:54:1b:c9:07:38:
31:3a:51:74:a4:b0:dd:60:40:8c:e6:6d:fd:09:3b:
c7:c5:fe:13:10:46:2b:f2:a5:5e:80:a5:4c:6d:ae:
56:8d:8e:de:ad:63:e6:e9:1d:ef:b8:0b:89:dd:f9:
d7:d2:66:51:ad:0e:d5:ca:d7:97:52:b2:f7:3e:62:
9b:44:8c:86:76:17:95:09:2e:f2:39:cb:78:c4:76:
60:c2:18:62:86:5d:1a:09:29:da:09:fa:5b:06:fb:
b4:6f:ad:30:ae:21:85:4a:21:69:0f:7a:a4:92:91:
68:e3:a8:3f:43:08:5d:e0:f4:dd:ec:1a:fe:ac:81:
50:7c:29:dc:b7:bd:ca:59:55:ca:48:7b:62:4c:4f:
7f:07:35:02:3d:64:89:f9:f5:03:fd:5d:6f:e0:f5:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:D4:86:1D:1D:73:AF:66:65:8F:F1:A2:B6:2A:C6:1C:29:B4:70
X509v3 Authority Key Identifier:
keyid:C3:B5:00:6E:51:14:9B:B8:CA:C4:51:25:38:D5:C5:48:91:98:05:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7UAblEUm7jKxFElONXFSJGYBRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1706/D19FCC22899611F186FB85F1CE1D38B0/w7UAblEUm7jKxFElONXFSJGYBRE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:58:8b:cb:1c:1f:83:79:0d:4a:2b:de:70:2e:0d:ef:c6:56:
bf:44:d8:e3:a9:70:b6:d6:00:79:4f:28:ee:06:c4:50:01:72:
35:3b:d1:6c:c3:35:4a:71:c1:e1:28:e1:2a:21:f3:14:d7:77:
1c:a5:fb:56:0c:ff:ef:a1:54:09:6c:37:34:78:6e:0c:2d:6b:
ec:5a:f3:1c:5a:97:e7:6d:62:a0:57:41:0c:c8:65:bb:57:d2:
90:ba:62:2d:cf:2a:28:a4:06:a7:9f:44:85:3e:3c:21:f7:20:
d1:93:a2:09:d7:6c:70:8f:e5:a2:99:97:00:bf:6b:c9:dd:03:
83:10:c7:a7:f4:e1:4e:13:b2:d8:5a:44:db:0a:48:80:83:0f:
fc:a4:85:a5:d1:55:3b:23:40:1b:6c:86:64:00:5b:32:a6:bb:
b4:49:8b:56:dd:2f:80:65:06:49:1b:fb:a5:8c:87:36:2c:8d:
f1:9c:41:74:49:b1:08:8d:77:d1:20:4b:d3:02:cc:22:47:c6:
44:ab:84:f9:21:0b:43:bc:a1:53:ee:e1:89:2a:2f:60:bc:76:
c2:c0:22:2c:77:fb:07:a5:e2:a1:e0:0f:81:67:96:06:c3:fb:
43:fb:80:94:33:b7:94:1e:5d:07:71:5d:ae:2a:51:12:ca:95:
59:07:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:14 2026 by rpki-client