
Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File: LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier: StXK9CYn8Ric47m5oqX4y57VYioGn2DgK/iRLrKpvQo=
Subject key identifier: 3E:28:C7:C2:FD:BF:82:12:3E:5A:74:8A:46:02:45:B1:40:03:2B:3B
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 0932
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number: 0920
Signing time: Mon 21 Sep 2026 01:52:45 +0000
Manifest this update: Mon 21 Sep 2026 01:52:45 +0000
Manifest next update: Wed 23 Sep 2026 01:52:45 +0000
Files and hashes: 1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: mR8nTJsdMG2sdUm62KSisKtz+4IVd8suhsNq+5B2SFw=)
2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 01:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Sep 21 01:52:45 2026 GMT
Not After : Sep 23 01:52:45 2026 GMT
Subject: CN=6ab08ded-e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:70:32:6b:66:f3:30:ac:b0:cd:eb:ca:a6:
e1:4c:7b:6f:ac:5f:65:cc:42:d1:25:dc:10:1d:9f:
37:15:15:54:bb:84:bc:97:25:3f:7d:49:0b:09:c1:
ae:f2:7e:79:c4:ea:40:b2:80:01:b1:54:27:f3:06:
e6:f4:e2:a2:e1:0b:25:6f:03:6e:80:fe:58:3e:2b:
61:4d:8c:de:8d:12:57:58:ed:33:f7:b7:b2:8e:96:
17:81:06:e6:49:24:aa:4c:7b:0d:f6:5b:ba:2f:29:
05:1e:fd:67:1e:69:8b:22:c1:0b:38:cc:91:c2:4c:
ca:bb:3d:bd:fb:e0:9b:1a:8f:e3:98:3f:ec:d0:00:
8b:e0:41:8b:69:01:c2:00:bc:35:48:7c:01:5c:2f:
5b:0b:38:f7:f7:9a:54:17:ba:f4:56:61:82:9b:f5:
dd:84:76:55:fb:2b:88:35:65:54:a3:57:4b:84:e0:
c4:bf:f1:cc:5a:0e:7c:84:33:e7:b9:de:35:00:46:
0f:35:ac:61:c8:6e:be:46:17:f6:ae:cc:55:ae:62:
ce:dd:ec:c8:80:a8:97:f5:18:8a:01:4e:0f:76:1c:
d1:08:26:dc:95:76:84:ba:6d:6a:e7:57:ac:8c:f5:
74:9c:e5:72:d6:e3:22:84:bd:a8:0e:e6:6f:39:61:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:C7:C2:FD:BF:82:12:3E:5A:74:8A:46:02:45:B1:40:03:2B:3B
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ee:9e:69:a5:01:7f:62:39:1a:dc:be:c4:c7:18:e7:80:dc:
75:b0:f2:1b:03:9a:27:bd:48:ce:36:fb:28:cc:f3:18:9f:01:
13:ec:44:c2:f3:eb:59:bd:90:04:02:bf:41:f6:62:c7:d5:44:
f9:67:05:2f:80:95:4b:b2:77:6c:fc:99:dc:6d:c4:1d:98:25:
66:ca:02:06:b1:eb:23:22:31:e3:bc:0f:88:86:4c:b5:fb:65:
b1:10:20:41:70:43:71:1e:c8:c9:80:4d:5f:ff:36:47:e0:0e:
56:82:e2:3a:78:ef:f9:6e:d4:2c:b2:d7:c1:bd:bd:d5:2c:55:
7a:b5:b3:ef:c7:3a:b7:c3:4e:b2:57:bf:98:9c:03:ad:70:ee:
34:b8:59:87:17:11:5b:48:f9:ce:b2:30:d0:8e:df:9c:8a:c4:
0d:51:98:d4:62:5b:21:fb:14:21:26:e5:f3:af:07:f5:dd:1a:
e2:4b:97:46:00:15:c4:e7:7d:c0:9d:86:f1:3d:a9:8f:c8:6d:
02:f9:cc:b2:f5:a6:6a:d7:6a:c0:81:59:4b:e5:18:1b:b5:76:
e6:e9:e4:db:46:41:0f:52:89:91:65:44:1e:91:36:06:e6:aa:
05:e0:35:dd:de:cb:62:38:2f:e7:07:a8:12:a8:89:13:d8:4d:
ac:aa:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:30 2026 by rpki-client