
Error: rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File: QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier: r74B7Vx+BjRY9sjedoLkLT+38vq+ctf92iTm0MScY38=
Subject key identifier: BD:B9:6D:42:F3:D7:CE:4F:29:0E:F3:DE:61:E7:AE:01:C4:A9:3D:B8
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer: /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial: 086F
Authority info access: rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number: 086C
Signing time: Mon 28 Sep 2026 02:03:05 +0000
Manifest this update: Mon 28 Sep 2026 02:03:04 +0000
Manifest next update: Wed 30 Sep 2026 02:03:04 +0000
Files and hashes: 1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: FZ34v8oon5jkDDbigrYypTaT8joPc5VTWqrtO6z81HQ=)
2: 3D93A998876811F18427031ECF1D38B0.roa (hash: ED++UQzskmFMrBOiAcPQY8inrGju/ayfk7tJLhTNd6I=)
3: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Validity
Not Before: Sep 28 02:03:04 2026 GMT
Not After : Sep 30 02:03:04 2026 GMT
Subject: CN=6ab9cad9-9651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:e3:19:5a:b8:08:d9:5f:a2:36:47:10:53:
f4:25:74:75:cc:0d:4c:d7:a4:59:4c:19:4d:e6:f1:
cc:77:de:22:f0:ab:ac:c8:86:3f:e2:b6:06:4a:c3:
98:29:e2:95:c8:dc:ab:48:1a:c6:14:9c:ac:a4:31:
79:32:48:a7:ff:b7:f7:18:92:f6:c9:9f:b1:c7:50:
db:ea:35:e3:f9:b3:41:93:09:6b:89:0c:ff:be:fd:
44:57:be:34:65:03:d4:d4:44:17:bb:4c:a3:d0:05:
71:a4:77:a1:5d:ab:e6:7c:d7:01:fd:de:86:c4:e4:
1f:c1:6c:ce:58:b2:a0:d5:83:c6:c4:76:b3:d5:bb:
22:1e:d8:77:91:31:72:d5:43:f8:17:1a:d1:05:ab:
b6:8d:8e:79:ea:5a:df:7f:f6:a1:35:92:03:5d:b0:
6a:1a:b3:ef:0f:ee:32:b4:ab:66:f3:c5:5c:bf:5e:
ec:7e:7f:bb:f6:8e:56:98:5b:45:14:03:4e:62:0e:
55:e3:26:15:5f:83:8c:f9:9d:16:eb:23:0d:3d:b7:
d4:07:54:ae:ae:75:60:0a:c1:51:9f:bf:ba:29:c8:
5a:21:67:c5:bc:db:79:81:a6:a3:20:8c:6f:60:5c:
6a:b4:5b:03:59:94:c8:85:fe:97:4e:c6:d6:1a:47:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B9:6D:42:F3:D7:CE:4F:29:0E:F3:DE:61:E7:AE:01:C4:A9:3D:B8
X509v3 Authority Key Identifier:
keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:5f:20:0b:61:3b:63:88:76:f4:24:a0:0e:81:e5:39:92:9f:
ef:07:8a:37:7b:79:ae:dd:ff:a3:a8:06:75:2c:eb:1d:8e:63:
12:d7:ba:14:8b:d7:7b:01:c9:d7:d2:5d:9c:85:fe:c6:5a:9a:
72:71:0f:b5:76:61:ab:11:b3:5c:80:c8:9d:d1:01:1b:9e:82:
7d:4f:18:dd:fe:5d:09:2a:1a:5e:25:33:79:8a:77:25:20:21:
83:5a:fe:93:8a:e7:18:a7:f4:8a:ee:01:9f:0f:5f:29:c5:3a:
36:4e:24:f7:6d:ae:7b:01:ef:30:0e:6f:cb:8b:97:72:6f:3c:
de:19:c5:75:1c:4c:99:7c:45:e9:4e:18:46:09:de:5b:33:bb:
c5:3e:1d:41:1b:c8:80:70:f8:e0:78:ef:e8:2a:fc:78:87:6f:
fd:f4:61:b1:3d:ca:43:44:0e:cf:ae:e5:d0:e5:31:50:e1:d3:
41:51:a5:8d:bb:59:82:a0:0a:81:1c:69:7a:49:da:35:cb:f0:
d1:cf:c9:e3:ad:7a:7e:06:c9:ae:b5:26:99:02:62:71:e7:24:
a1:2f:d1:64:bc:9c:d7:2b:7e:73:d5:25:e1:97:09:0d:77:af:
60:d8:86:bd:b4:b5:ec:21:9f:9d:21:37:56:97:ec:8e:68:54:
06:8f:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:33:07 2026 by rpki-client