
Error: rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
File: CNLFTntRy8c0NN0AYFFFEi8ay2c.mft (raw, json)
Hash identifier: a2KLG7kwFkdvgKde1C8GCpE16YUipYPplPXktSNGkZ4=
Subject key identifier: 7E:07:E7:BE:EB:83:29:92:B1:81:01:0B:C9:49:06:04:36:A6:CC:BA
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Certificate issuer: /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial: 0B24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
Manifest number: 0B20
Signing time: Tue 22 Sep 2026 01:18:10 +0000
Manifest this update: Tue 22 Sep 2026 01:18:09 +0000
Manifest next update: Thu 24 Sep 2026 01:18:09 +0000
Files and hashes: 1: CNLFTntRy8c0NN0AYFFFEi8ay2c.crl (hash: F3Hjvk6P3BcWH9Zc6KRnn+8qMNA3dhMrrdUce8Zyif8=)
2: 3F66AD3622C011F181F9D8ECDAE4EC9C.roa (hash: UYTOMSKRs/qbW+Sv3f+3H//zbO7ZLUVhyMToHB8R05g=)
3: 8DA0F20E22C011F1A24EFFECDAE4EC9C.roa (hash: pJKKgO8f4WVnAhfiOK2fL78gUsep3QpfIXLd2mvgIoo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625A15AF, serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Validity
Not Before: Sep 22 01:18:09 2026 GMT
Not After : Sep 24 01:18:09 2026 GMT
Subject: CN=6ab1d752-f587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:83:e3:22:df:13:0e:f5:b1:f0:6e:b9:1b:
b6:26:69:9d:71:6b:bd:b4:d2:b1:6d:08:5b:1d:93:
ed:6a:a8:c4:87:22:ec:3a:53:57:23:86:8d:66:22:
07:a4:b1:3d:7e:dd:40:84:5f:51:c9:ae:2a:e1:de:
74:2e:d6:e0:c2:1b:a0:84:ee:0f:76:a2:fd:2e:06:
f0:fe:f7:e5:a5:f1:64:a7:28:5b:06:40:d0:7e:91:
11:de:96:6d:4c:73:46:2a:d1:70:f2:ee:71:25:39:
51:a2:a2:0e:00:e2:17:34:81:26:7f:d0:fe:01:cd:
42:94:70:0d:6a:83:75:c4:f6:4d:be:d5:83:c5:6a:
1e:4b:97:cb:2c:01:5d:2f:66:1a:9f:c1:8c:ad:b7:
ee:13:ce:ab:bc:f3:60:c3:8a:f5:ee:a8:c8:78:61:
ab:ef:27:db:6f:e5:3a:25:e0:a6:02:7e:8a:97:f6:
84:4d:8d:2b:1f:10:de:79:79:fb:11:e3:cf:93:e9:
9e:4f:a1:56:d2:33:a4:89:ff:df:c5:bd:1a:16:e3:
3e:d5:e2:ff:b4:37:2f:6f:9f:b7:3e:0d:17:b7:4a:
a3:fa:d3:aa:d2:13:e5:01:e5:23:70:12:85:c4:7d:
1c:67:8d:bc:37:e0:6b:28:75:11:36:ea:1e:df:6b:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:E7:BE:EB:83:29:92:B1:81:01:0B:C9:49:06:04:36:A6:CC:BA
X509v3 Authority Key Identifier:
keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:17:80:88:5f:8e:03:06:1b:eb:c8:88:56:9c:e4:b6:58:
7b:71:18:6a:a4:ce:b7:97:ad:92:ef:f0:1a:9a:99:1b:cd:b0:
44:e0:fe:65:bc:62:31:c8:0b:af:1c:00:29:de:fd:2f:d6:02:
25:d7:15:7b:79:c9:36:5f:5e:36:57:b5:f9:ae:d8:99:6c:83:
0c:0c:fd:03:c0:ef:6c:05:01:f5:bb:fd:a0:ee:90:a7:fd:6f:
db:40:f8:53:2e:a3:21:9d:3b:c0:bc:73:36:6f:97:79:3f:d8:
38:98:f8:e4:77:92:32:c7:4e:43:8f:35:f8:5c:5e:3f:e5:d1:
ff:a9:58:b6:7f:93:1b:9c:88:10:34:1f:9c:97:e7:3a:59:96:
42:b8:db:b2:77:57:81:f3:0a:c7:ae:5d:65:a3:58:0f:f8:8c:
9d:4f:77:8d:a9:ef:c7:f0:02:08:50:a3:5a:6a:f3:56:c3:46:
ab:a7:7f:21:49:5c:c1:70:21:81:00:d9:d5:ee:dc:84:6a:4f:
eb:7d:7f:70:0d:df:dd:4b:aa:05:78:92:5c:2b:c9:fa:ae:2b:
0e:1f:d1:04:ce:eb:86:4b:62:ad:62:44:79:e6:a6:30:ad:e9:
46:19:ef:e0:b0:02:82:24:34:77:47:47:31:a9:42:71:ae:5d:
f4:e8:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:28 2026 by rpki-client