
Error: rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File: lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier: CMx84Y+0bP3b7xEzDajKLq0Gh+GC4VtxRGklitylip4=
Subject key identifier: D5:C8:36:67:E9:78:D7:0B:66:1F:38:E8:9B:24:C6:55:AF:ED:C1:2E
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 0AB7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number: 0AB3
Signing time: Sun 11 Oct 2026 01:30:03 +0000
Manifest this update: Sun 11 Oct 2026 01:30:03 +0000
Manifest next update: Tue 13 Oct 2026 01:30:03 +0000
Files and hashes: 1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: XNJNH0QC1r76RWDO2BOCY2fhvH4Dh9Ewx4/Dy2WsFKs=)
2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Oct 11 01:30:03 2026 GMT
Not After : Oct 13 01:30:03 2026 GMT
Subject: CN=6acae69b-74c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:65:ab:1e:42:61:d9:be:06:ce:f5:80:9c:
fd:40:13:39:9f:ea:1d:7d:c6:7f:b0:ac:4a:68:79:
64:11:b6:fe:ba:d5:0c:a0:21:3e:87:cf:18:d2:5e:
61:5e:a5:56:c0:12:4a:14:44:4e:aa:cb:5c:29:42:
9d:73:43:50:41:51:be:cb:e7:46:3b:13:a5:37:60:
6b:00:ef:51:1b:e4:3a:de:a6:e1:84:b3:48:20:fc:
ba:c3:32:c1:a6:49:6d:8b:26:70:16:f0:b5:a1:8a:
37:51:e8:b9:ac:fa:9b:d2:e0:dc:b7:1a:0c:56:a5:
8b:98:33:6a:fe:cf:c6:96:b6:73:70:89:8d:2f:8c:
98:64:3d:a5:cb:7f:37:93:90:ac:eb:bb:af:cf:86:
16:a4:19:18:5e:62:df:f7:82:6f:b1:25:61:2f:b1:
17:55:76:27:85:d5:40:c1:4d:37:50:1f:0c:86:ce:
2b:cd:24:25:29:f0:60:0c:2b:e6:04:8d:c5:28:59:
dc:9e:a0:f1:8d:c3:73:2a:a3:e7:87:a3:71:95:45:
ef:e4:49:8a:a4:ae:1a:e0:b4:20:bf:0b:8b:41:fa:
c1:f7:32:c7:65:82:1c:b3:87:ce:b0:a5:57:a0:80:
da:88:4e:95:d5:7a:5c:86:8c:6e:19:56:23:c8:39:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:36:67:E9:78:D7:0B:66:1F:38:E8:9B:24:C6:55:AF:ED:C1:2E
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:fa:b1:54:4d:75:eb:c5:17:ca:7c:39:04:34:38:be:be:
dd:5b:4f:1a:93:5e:6a:90:69:cd:a7:51:87:66:dd:63:a2:d0:
eb:62:77:40:4b:42:01:72:32:08:d0:b5:cc:4f:38:60:cb:3c:
a2:65:4b:87:c5:f6:6e:63:b0:72:3e:44:31:2e:d1:7e:bf:a5:
78:4e:68:e6:33:30:9b:d2:40:8e:f4:7d:ec:d5:df:49:66:ba:
b8:81:7d:f7:19:a4:72:03:0e:24:82:30:4c:94:72:63:e9:bb:
ce:0f:0a:09:7d:9d:8c:e6:ed:70:a7:e5:00:7d:23:24:f5:65:
ed:28:12:db:c2:64:29:ca:3f:b3:e8:bb:af:07:78:61:4f:75:
bc:9e:f6:d1:a9:68:ef:65:a5:52:82:43:67:dd:3d:c4:f3:c2:
49:a0:da:a5:1b:93:fa:fb:5c:3b:11:bf:17:d7:ac:f4:81:f2:
c3:85:06:33:c3:67:31:ed:5e:78:12:87:15:88:d3:4f:55:8a:
c7:9a:2f:09:61:9b:44:e5:b2:f7:87:03:b3:f0:55:9c:5d:74:
99:ba:0f:e8:6e:8b:df:d7:bf:b0:c1:9c:a4:72:03:90:27:da:
77:a8:f0:89:ab:f7:4f:fa:f9:f5:c0:93:d0:62:98:1c:79:ac:
56:b7:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:40:08 2026 by rpki-client