
Error: rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
File: yLmZuqJygsKF7OzIcOEZzeMPLnI.mft (raw, json)
Hash identifier: myolaQqKcwY4FNJP1HCuSnjjsC060/t+sDz6J8x58Vs=
Subject key identifier: 69:D8:49:AB:CE:D4:13:76:DE:1C:65:6C:93:B1:2F:99:76:54:9A:82
Authority key identifier: C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
Certificate issuer: /CN=F36FB339AF/serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Certificate serial: 97
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
Manifest number: 94
Signing time: Fri 09 Oct 2026 05:37:34 +0000
Manifest this update: Fri 09 Oct 2026 05:37:33 +0000
Manifest next update: Sun 11 Oct 2026 05:37:33 +0000
Files and hashes: 1: yLmZuqJygsKF7OzIcOEZzeMPLnI.crl (hash: Outo1gAvO+HdRnz3Rh7lg4b2+F0htYKYRpInbOTnjPw=)
2: B2F6B8EA59E811F190AC18A4CE1D38B0.roa (hash: sDvjDg9SOcbVOSO3Fq25uXtGAAl2I4Z/lvE9EJAbtlY=)
3: 97EB244E530511F18FD440A4CE1D38B0.roa (hash: JkuIP9qbDbHSq3/IwznxY1/qoooKEvF9e6/uwuuEF6c=)
4: F7429FB459E811F18F63FDA5CE1D38B0.roa (hash: VUPk69F6DD+hVqLu9d4kCAXXTSFw8Fj0vDPy/DGBIiI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 Oct 2026 05:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB339AF, serialNumber=C8B999BAA27282C285ECECC870E119CDE30F2E72
Validity
Not Before: Oct 9 05:37:33 2026 GMT
Not After : Oct 11 05:37:33 2026 GMT
Subject: CN=6ac87d9e-5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:2e:53:61:24:27:3c:0d:e9:40:fa:aa:78:
6e:53:52:28:a9:82:23:10:a4:29:b3:bf:7f:da:02:
01:59:38:8e:13:0b:1d:b8:b3:0d:d7:4e:25:73:22:
64:59:8c:1d:32:ff:73:a0:e8:2d:f6:22:aa:3c:d4:
54:c3:bc:77:14:34:59:92:e3:cc:f5:2c:c4:31:9b:
e7:cc:94:5f:3d:53:39:65:9b:61:4f:f5:47:ed:5b:
fc:7d:46:c4:6e:13:69:0a:7f:f8:63:07:a0:bb:d2:
c2:8c:3d:85:38:0b:7c:28:75:51:97:21:f8:16:25:
8b:20:7d:86:24:ea:80:b0:1f:b0:a1:6c:0d:9d:d1:
b9:b8:66:b1:32:c5:5f:99:44:85:40:57:36:dc:ab:
03:3b:a0:23:b4:bd:22:b2:e2:1b:9f:26:e6:25:27:
81:99:dc:82:53:0e:5c:3a:1c:50:e1:94:b6:fc:21:
b1:73:15:61:19:41:02:61:1f:0a:17:67:98:4d:e1:
c1:bc:1e:35:e9:00:f5:0a:df:6f:ff:c3:2d:09:6b:
97:21:09:5f:58:fc:c4:07:40:ad:39:4a:08:c5:bd:
20:0a:ce:bd:38:9b:46:8b:7f:31:ee:01:cb:56:77:
6b:26:5f:6e:f6:e8:e6:49:c6:a8:0f:37:46:4b:1a:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D8:49:AB:CE:D4:13:76:DE:1C:65:6C:93:B1:2F:99:76:54:9A:82
X509v3 Authority Key Identifier:
keyid:C8:B9:99:BA:A2:72:82:C2:85:EC:EC:C8:70:E1:19:CD:E3:0F:2E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLmZuqJygsKF7OzIcOEZzeMPLnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB339/05DD221C530211F18DDC550ECF1D38B0/yLmZuqJygsKF7OzIcOEZzeMPLnI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:51:bf:5d:62:3c:99:b8:74:a1:83:7c:89:cf:24:ba:b3:78:
43:70:a2:6c:ca:6f:d9:af:5d:88:d3:9e:fd:ed:7c:5a:7e:01:
cf:1d:bc:a5:a6:9f:8d:0a:4e:7c:a2:9e:55:3b:54:e3:7a:87:
f1:ba:8f:1f:24:83:5b:58:a4:a1:5a:7a:b3:d0:f1:55:0b:89:
9c:1d:9a:9e:8d:73:51:bc:15:c6:67:6c:f1:4b:99:6a:e3:5a:
54:8b:db:9a:a4:24:f4:ba:e4:90:06:71:ef:ee:1b:8e:89:ab:
b9:f1:41:1f:12:57:db:10:7b:e2:f6:98:5b:7a:01:65:53:a2:
50:de:b0:51:31:d1:c3:7c:0f:bc:67:af:d5:b2:e0:c7:58:10:
3d:c9:c8:f3:d8:8d:78:6b:a6:9f:3a:5c:50:79:83:37:71:a2:
2b:38:34:c5:85:73:a2:e8:06:e2:d7:57:be:17:e5:e5:f6:35:
d2:6a:c5:0a:37:15:3a:a1:2b:9f:5d:d6:7b:b4:02:c7:69:16:
f5:4d:59:76:f0:0b:37:b7:af:14:fc:fa:31:5f:dd:ba:bb:23:
85:f0:5e:84:b7:ed:43:3a:5a:15:82:7f:02:13:36:f7:52:0c:
69:91:1f:6c:6f:b1:0f:72:87:4b:58:4d:a8:f7:a6:05:61:c4:
f9:25:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:52:26 2026 by rpki-client