
Error: rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
File: 4LRXYprC1N58lOp7iBVXQdHsICQ.mft (raw, json)
Hash identifier: IhYW0i9Zs0nKxnNXsOtnizGEzwS61mV6Fso4rOsavY4=
Subject key identifier: 3C:AD:6B:62:66:AC:45:AB:AE:A7:3A:5D:D1:F8:A1:CD:FE:1D:F7:A3
Authority key identifier: E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
Certificate issuer: /CN=F362C7E9AF/serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Certificate serial: 0A38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
Manifest number: 0A35
Signing time: Fri 25 Sep 2026 01:36:40 +0000
Manifest this update: Fri 25 Sep 2026 01:36:40 +0000
Manifest next update: Sun 27 Sep 2026 01:36:40 +0000
Files and hashes: 1: 4LRXYprC1N58lOp7iBVXQdHsICQ.crl (hash: lVb86fZVay9I/kKh7YNaTLBenQnw1mbUzC8CGpkLI+8=)
2: 70E0EF4A1C5611F18E32DD81DAE4EC9C.roa (hash: CQ0hSEAMLadXtbNl+F7CDLaiilmNLE2/Ef+nvNSAYdY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 00:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C7E9AF, serialNumber=E0B457629AC2D4DE7C94EA7B88155741D1EC2024
Validity
Not Before: Sep 25 01:36:40 2026 GMT
Not After : Sep 27 01:36:40 2026 GMT
Subject: CN=6ab5d028-cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:6f:16:73:99:da:3b:21:fe:06:d9:ab:ea:
9d:c3:f4:78:47:1e:8a:8d:4e:15:35:12:df:32:20:
b0:58:bf:33:36:9d:65:13:7f:0d:04:6c:3f:06:37:
5a:26:31:1f:a0:28:49:e5:f1:f9:0a:42:0d:02:f1:
25:e5:c6:62:c4:24:73:69:4d:ec:b4:fd:8d:12:d4:
ad:93:45:5f:ea:88:e7:84:46:22:6f:cf:86:db:5a:
bf:4d:7f:6e:ae:40:67:36:e8:c6:e0:9b:9f:04:39:
52:7d:86:80:c7:bc:21:3d:10:4e:68:0f:76:d0:4d:
64:bd:21:5e:b0:74:47:53:28:62:33:28:60:47:f2:
ec:53:28:32:c5:b6:80:a5:c5:0b:74:5d:0d:66:9c:
c8:1a:d6:b8:98:13:ed:f0:50:18:ba:fd:29:47:bc:
7f:d2:21:25:88:89:f7:af:66:6f:f9:9d:7f:6c:68:
c7:e6:32:3a:20:a1:98:27:84:57:e6:bc:fe:3b:ba:
f6:63:22:dc:f9:7e:b9:1d:cf:b6:a2:cb:f7:6a:b5:
3e:e5:76:de:d3:89:55:fe:e5:5f:d7:18:d1:bf:0a:
d6:72:5c:c6:ba:59:b6:20:7c:23:a2:81:67:41:7c:
b4:49:17:3e:55:61:6d:37:3a:1a:c7:ab:ae:97:cf:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:6B:62:66:AC:45:AB:AE:A7:3A:5D:D1:F8:A1:CD:FE:1D:F7:A3
X509v3 Authority Key Identifier:
keyid:E0:B4:57:62:9A:C2:D4:DE:7C:94:EA:7B:88:15:57:41:D1:EC:20:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4LRXYprC1N58lOp7iBVXQdHsICQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/F649106CE8D811E986B0B040F8AEA228/4LRXYprC1N58lOp7iBVXQdHsICQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:4c:c5:c4:f0:18:5f:dd:a4:62:16:10:69:44:4c:79:60:
f9:87:64:d5:f6:f9:7f:31:21:2d:8c:59:5f:5e:73:1c:81:a6:
49:5b:f1:64:13:1e:47:73:be:2c:1c:9a:6c:54:59:a6:51:ed:
cd:bc:d8:1e:e0:89:bb:1d:12:0b:02:e2:08:9b:34:8c:2d:1f:
2a:11:1b:5e:d7:03:f3:bc:1e:e4:d8:41:f9:91:be:0e:31:45:
b0:05:28:34:df:f1:6b:10:1c:66:48:c2:3c:70:d3:e9:65:f4:
ad:7b:4b:67:20:14:17:06:b8:d6:b5:fe:91:9c:08:83:b9:a5:
12:19:ee:ec:4d:35:ed:ad:9b:90:74:a8:51:af:fa:fa:24:88:
2d:65:62:9c:18:41:67:df:e9:ab:c4:f6:b5:0e:41:67:fb:3a:
4a:a1:49:f3:40:fe:30:3f:39:a7:9e:f3:64:2e:ba:3c:8d:9e:
31:2a:e6:0a:7a:7e:6c:24:94:d0:f0:d6:f6:06:56:d4:57:7b:
c9:fc:6e:25:00:e4:71:04:59:78:8e:a7:60:68:f1:c5:ab:ae:
af:48:3c:38:2b:97:2c:48:c3:df:6d:b3:b2:b5:fc:3e:42:19:
34:59:99:4c:05:46:86:04:10:54:3d:2b:f3:c1:c7:64:2f:8d:
2d:2c:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:57:34 2026 by rpki-client