
Error: rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
File: LN9YDjdnVbH4xogIQhJt1j3XTuc.mft (raw, json)
Hash identifier: TkAgE6vHz/PcgJuYjx7EczPUJom40azK9JF9iYvBO8E=
Subject key identifier: D4:60:9D:FF:0B:F0:D4:61:26:2B:45:96:2C:66:EF:6C:61:28:5D:F2
Authority key identifier: 2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
Certificate issuer: /CN=F3626C5BAF/serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Certificate serial: 0969
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
Manifest number: 0957
Signing time: Sun 15 Nov 2026 01:52:37 +0000
Manifest this update: Sun 15 Nov 2026 01:52:37 +0000
Manifest next update: Tue 17 Nov 2026 01:52:37 +0000
Files and hashes: 1: LN9YDjdnVbH4xogIQhJt1j3XTuc.crl (hash: FL0mhkCVZeBkvbdYHJ+EW83RwbBrQxqwGpUujL/yv5E=)
2: 273CF154890F11EEAE5F7C364AD9E6FC.roa (hash: 6Zyoo60Pz+GnvK6rZB7VRukfQvQPSJF7/Al01Yw7AE8=)
3: C01FDA868C9911F18503E1DCCE1D38B0.roa (hash: kQtLsW7D9ICZ09fDE52xx9CZ7qcYPPsGFlQk50LU9yY=)
4: 05C23B208C9911F18B7848D8CE1D38B0.roa (hash: UBe/FinZwlLfNd1I4Bm1Xqdo/RNekj20lzTVHaiEBsk=)
5: 718E7D0C86B111F19930B2BDCE1D38B0.roa (hash: nBpUPuhm+PdhHS8iH4gpkrl2A2IJbJ1GitlJ8/Nq+0o=)
6: EF27689C86A611F18F5DC2FDCE1D38B0.roa (hash: hoi8TgbPp6u8/kTs9rFoka8RNFl9NxDAJ/DZIKG0zYc=)
7: 9799CAE68C9811F1BA0F14D6CE1D38B0.roa (hash: TCzfsB8L6naHhIMK6FDSVqSB8/tnKisssUeS0Sja/pM=)
8: 66B4A4A48C9911F1BCD0C4DACE1D38B0.roa (hash: 1ybCzxMXlxjH4FAEOI1Qgd0351KDCVr4YxHCk74ZKG4=)
9: B65B4AFA86B111F1B35420BECE1D38B0.roa (hash: kmExG71hjRrSnQLc9Za9djJ4yDfiRKmuCxsWcutkbII=)
10: 2E8F703A8C9A11F19CA16FDFCE1D38B0.roa (hash: 0LNHFPvTTVmKRurY7oAMszXzqgYdND56d0u2tu3Tva4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626C5BAF, serialNumber=2CDF580E376755B1F8C6880842126DD63DD74EE7
Validity
Not Before: Nov 15 01:52:37 2026 GMT
Not After : Nov 17 01:52:37 2026 GMT
Subject: CN=6af91065-497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:ab:55:49:d1:6f:df:3b:e1:7d:ec:9e:32:
10:5b:2e:f2:ba:69:d2:a3:2c:6d:db:62:3d:4e:ed:
8d:69:cd:44:75:8b:ef:3a:22:0d:c8:f1:28:7b:ac:
bc:f7:ff:32:81:a8:53:ae:15:01:34:1c:a9:17:0d:
8d:3f:a5:10:3c:58:4d:76:0c:b0:13:84:28:54:23:
c8:fa:85:63:3c:ca:d3:d2:8f:8c:e6:68:a2:0f:33:
f5:43:a5:01:da:3b:4e:80:07:fd:9b:fb:eb:91:e6:
39:28:d1:f3:41:5d:6d:f3:29:ef:01:fe:18:a1:22:
e2:62:5e:ce:52:96:cc:e0:2c:2a:40:85:3c:55:49:
e5:d0:fe:fb:6b:76:d5:d6:aa:f8:11:1b:91:28:fb:
ca:6a:fd:34:7d:11:47:ea:70:20:66:75:6b:f4:5f:
58:c2:cc:cd:72:7d:87:2d:37:4b:72:ed:a4:ed:5c:
75:90:7a:b3:69:84:18:9f:55:73:42:42:89:c4:3b:
69:db:e5:08:1e:d0:b3:3f:f0:fc:5e:88:8b:36:97:
81:e6:0b:b2:39:45:b7:f2:3c:97:c9:b3:b7:54:0c:
b8:2a:f1:eb:02:d3:bc:19:44:a0:3d:1d:cd:06:1c:
a8:16:fc:40:bc:d4:31:87:8d:4c:69:e0:6e:e8:bd:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:9D:FF:0B:F0:D4:61:26:2B:45:96:2C:66:EF:6C:61:28:5D:F2
X509v3 Authority Key Identifier:
keyid:2C:DF:58:0E:37:67:55:B1:F8:C6:88:08:42:12:6D:D6:3D:D7:4E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LN9YDjdnVbH4xogIQhJt1j3XTuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626C5B/EE6ADCC2CDF711EAA5AED244F8AEA228/LN9YDjdnVbH4xogIQhJt1j3XTuc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:0d:03:4c:36:a1:67:4a:99:a2:06:db:9e:db:06:58:26:
fa:52:86:b3:36:77:63:e8:da:62:70:84:09:47:ac:fe:df:e4:
18:ac:b3:24:aa:f9:f0:df:78:8f:5d:b5:dd:0c:67:0c:95:17:
d6:d5:df:31:12:e0:44:b0:7f:42:39:f6:80:3e:e3:d1:25:ba:
b7:f6:e2:43:37:ba:5f:4c:26:b7:9c:8b:82:fd:bc:aa:ca:79:
f5:60:16:00:10:0f:4f:32:a3:8b:29:3e:2c:7b:e1:f7:5f:cd:
02:79:ac:10:e9:a3:fc:f0:40:d7:f2:fe:af:e9:92:54:9b:51:
46:e8:37:4c:ae:28:c0:8c:3e:2f:94:5c:1f:7b:61:20:e4:0d:
8c:22:cc:14:b5:f1:5b:14:17:0f:70:88:da:a8:35:4c:b8:1c:
11:c4:fe:13:74:d0:01:20:88:a7:56:fe:e8:2d:ad:fc:f9:82:
f9:b6:94:0c:b7:f6:38:b3:62:39:5b:a4:0b:e0:7b:4b:2d:ce:
db:ad:4f:bf:79:f1:77:e0:ce:f2:35:61:5f:e3:b9:56:58:75:
18:1c:23:c7:1e:f0:7d:fe:70:c5:5b:5f:47:14:21:9f:f0:59:
ce:33:ac:bb:be:74:29:3f:96:1c:d9:66:dc:7f:e7:2b:09:cd:
39:12:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:40 2026 by rpki-client