
Error: rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: sNW0l6dIUZWDJuIihvMi2C7qjMT3ElCa2xEpkAUFWj4=
Subject key identifier: 40:CB:89:19:FF:38:BD:91:DC:95:E6:DC:B1:DF:CF:13:D0:78:E4:63
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 0798
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 0798
Signing time: Sun 20 Sep 2026 02:14:49 +0000
Manifest this update: Sun 20 Sep 2026 02:14:48 +0000
Manifest next update: Tue 22 Sep 2026 02:14:48 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: m5Bw4V/i7kZb56iKZyH+5xSR89aUZPJMMdrY3oLhlW0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Sep 2026 00:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Sep 20 02:14:48 2026 GMT
Not After : Sep 22 02:14:48 2026 GMT
Subject: CN=6aaf4199-3712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:1f:1a:c8:ed:eb:2d:d2:d4:77:22:70:20:
8f:f2:ff:46:ad:0f:75:cb:02:0e:71:15:2f:9c:f4:
59:d6:99:09:93:37:73:82:f0:b3:ab:8c:28:7f:28:
eb:a9:1c:30:37:d3:fd:ce:9c:f7:2e:5a:81:0f:6b:
e1:bf:5a:52:2f:74:e2:c2:ce:a1:1e:44:d8:e4:b6:
b2:f5:07:b1:78:d3:c4:b8:7c:b4:2d:c6:70:20:d2:
ba:f6:2f:5a:af:6d:d1:f3:d5:c0:6b:58:e4:e5:11:
93:fc:82:f6:fd:d6:91:da:42:49:5a:aa:4b:a8:cc:
fd:c1:2d:9c:ec:a2:a8:a5:3e:e1:74:d3:09:51:de:
d6:5b:60:e0:64:86:a1:97:5b:74:c5:22:a2:77:a0:
be:e2:2e:d3:de:ef:cc:8d:29:a3:fa:16:56:8d:5c:
8d:85:4a:ec:09:10:71:4c:0f:69:0a:98:61:14:cf:
03:de:5e:14:a4:01:f6:3d:06:34:70:8d:ca:f5:39:
24:f1:bc:94:17:17:3a:a9:ed:2f:fa:6e:44:1e:71:
f4:a1:68:df:41:e8:10:9d:0f:9b:87:ec:07:e9:e2:
49:27:ba:e5:06:14:2e:ca:aa:a3:04:d4:2e:81:df:
ef:9b:4c:04:66:30:e1:be:3f:61:b0:63:25:22:13:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:89:19:FF:38:BD:91:DC:95:E6:DC:B1:DF:CF:13:D0:78:E4:63
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:1c:01:ae:5d:a7:9a:08:2a:b1:99:16:1e:a3:da:ea:ce:
1b:b5:20:60:cc:25:f7:12:a6:f2:9a:ba:44:a7:db:09:28:43:
f4:0c:ea:7c:b2:ae:5f:04:84:37:9b:d3:6a:66:31:90:8d:ab:
6a:cb:6d:c6:89:f2:7d:77:84:8c:a2:6b:09:5d:49:1b:aa:2b:
a6:23:90:3b:6d:ac:5d:fd:81:53:9a:23:7b:86:3e:b2:ed:73:
fb:33:87:6d:b9:7c:6e:ee:44:e2:3a:53:c9:e8:1c:87:71:0f:
89:f3:65:59:33:73:c6:fd:35:d4:d6:d6:76:f4:04:93:41:b7:
10:25:81:dd:11:4c:cd:b5:f1:65:26:f4:61:11:8d:87:d1:01:
09:ff:95:be:ea:4a:4e:46:76:3c:02:2a:7d:5f:87:5c:5b:19:
76:24:63:cb:d3:45:9c:6f:37:9f:a4:1f:cf:f0:ac:3b:72:7c:
ca:37:3a:f5:64:70:35:dc:17:ba:bf:d2:4c:c0:0f:41:ab:50:
a0:1a:2d:56:da:c6:4e:b0:9d:c5:e1:c2:92:f4:40:df:ee:2f:
af:75:2a:da:ea:58:94:3e:a0:a6:91:aa:9b:5f:6a:74:06:ec:
ce:78:44:63:ef:89:2b:65:28:bc:32:a9:03:77:6e:cd:e0:cf:
25:75:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:50 2026 by rpki-client