
Error: rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier: CXPOazRFts1oxu1g4BdC26CsRPrJe63CMY0z6LzIGrk=
Subject key identifier: 52:41:E3:F0:FB:65:99:C6:2B:05:D5:E4:7B:46:F3:B3:A4:DC:8D:7C
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer: /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial: 02A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number: 02A0
Signing time: Mon 12 Oct 2026 04:41:52 +0000
Manifest this update: Mon 12 Oct 2026 04:41:51 +0000
Manifest next update: Wed 14 Oct 2026 04:41:51 +0000
Files and hashes: 1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: FDvtoILEgauCy+AvjNzm2+Gm84loUAqa5ekiSasj86U=)
2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 04:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Validity
Not Before: Oct 12 04:41:51 2026 GMT
Not After : Oct 14 04:41:51 2026 GMT
Subject: CN=6acc6510-9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:26:41:30:00:2f:d0:bf:2e:4c:07:34:38:
3c:c0:06:d5:af:c4:15:a9:97:5f:b1:90:ad:b9:eb:
f9:82:3c:93:71:64:17:9d:35:cd:4e:e0:a0:ae:37:
df:47:6b:c8:dc:08:90:94:79:af:d1:f7:24:31:54:
86:5f:1c:fd:7e:c6:ad:8f:9c:2a:04:07:2f:74:3c:
a5:4c:4e:c6:ee:35:ba:40:ab:8d:09:e6:fb:61:35:
a9:5d:f5:2b:c2:25:62:b7:53:72:bc:19:4a:8a:08:
94:04:b8:f1:cf:4b:a5:06:20:ad:59:c8:93:d2:71:
22:7a:60:36:78:7c:8d:1b:84:93:3d:74:b4:d4:bf:
a6:fc:de:02:05:74:d9:eb:46:bd:53:a5:49:9d:f5:
a4:35:b6:b9:7c:6f:3e:80:d5:74:1e:27:22:c0:e0:
ea:1f:a4:43:f3:9e:a5:ea:aa:3a:98:a4:6c:d4:d6:
ad:86:e1:d1:e5:54:40:b8:9a:a8:c1:07:41:50:78:
cc:ff:11:56:35:2b:74:ef:ec:3b:1a:a4:49:2c:92:
3e:cc:6f:34:c3:41:61:9a:9e:ff:f0:3f:57:a0:47:
45:e2:fc:79:e4:7d:cf:35:7f:75:77:e2:34:fe:98:
18:93:dd:7f:09:2d:c5:5f:25:31:d2:47:1a:aa:bc:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:E3:F0:FB:65:99:C6:2B:05:D5:E4:7B:46:F3:B3:A4:DC:8D:7C
X509v3 Authority Key Identifier:
keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d9:64:af:fa:4f:c1:95:90:dd:27:0f:29:63:21:6d:64:46:
60:be:5c:66:05:d4:13:28:fd:25:e6:c3:7a:65:55:9f:85:ce:
26:ea:13:6f:ad:f9:bb:98:e2:61:59:16:87:0e:98:96:4e:98:
94:e9:fd:a6:47:ca:f6:5c:0e:d4:a6:61:92:be:74:df:0a:be:
14:ae:b6:7c:ff:d6:24:a0:6f:01:52:20:8f:c6:b3:64:39:b9:
50:09:99:72:9d:60:94:77:55:c0:21:ff:e8:ce:49:cb:87:28:
26:8a:dd:e8:cb:a5:aa:f6:97:ed:a3:d2:da:0b:89:be:90:ba:
7a:6f:0d:00:04:be:31:8a:a2:05:d2:40:04:53:16:10:03:0b:
ad:db:3f:02:55:63:0b:b9:3b:c1:35:e0:67:fa:c9:db:80:f8:
bc:a8:c1:6d:35:32:85:8c:57:28:4c:20:14:36:de:0a:c5:59:
f2:0d:6f:42:40:79:18:e0:65:83:b1:e3:34:24:0a:28:cc:c7:
ae:7a:0f:1e:84:d6:82:ef:d4:d5:75:67:94:9c:37:97:44:93:
2d:a4:9d:8d:51:f4:3f:02:46:37:fd:e4:59:58:92:e5:a6:89:
b5:8e:25:f1:e6:3c:24:04:24:4c:d3:e4:1f:6e:45:32:d3:44:
f6:c5:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:58:30 2026 by rpki-client