
Error: rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
File: LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft (raw, json)
Hash identifier: eroji2H3AXdd0Q/JvSVjnLHwRsknFtQKpHnrusSqRdU=
Subject key identifier: D7:94:EF:0C:05:86:1B:02:36:6B:52:32:4A:AB:0A:B8:63:86:73:5C
Authority key identifier: 2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D
Certificate issuer: /CN=F3699F17AF/serialNumber=2E2B561C30BCAD471834801A54586A5C2836365D
Certificate serial: 0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
Manifest number: 0C
Signing time: Sun 15 Nov 2026 06:06:42 +0000
Manifest this update: Sun 15 Nov 2026 06:06:41 +0000
Manifest next update: Tue 17 Nov 2026 06:06:41 +0000
Files and hashes: 1: LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl (hash: Uz9ij7jKujb5QR4TtQU3TP7MaSGp+IhY+d+jBSw3PbY=)
2: 8163911CD93C11F1B3DC98A4CE1D38B0.roa (hash: 66zaA10c2aiO/6pgAuIt1Omee7TvaHhOKzoczOgimNE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699F17AF, serialNumber=2E2B561C30BCAD471834801A54586A5C2836365D
Validity
Not Before: Nov 15 06:06:41 2026 GMT
Not After : Nov 17 06:06:41 2026 GMT
Subject: CN=6af94bf2-c990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:8e:c9:dd:0c:48:ff:8a:81:28:c3:38:77:
de:ea:9b:d9:4b:2c:05:8e:fd:03:54:44:ce:a5:ad:
69:14:14:7f:ec:2c:2c:03:e8:f6:3a:4d:96:6b:d5:
0c:0c:0e:55:ec:19:c7:1b:6f:e9:4f:98:1b:50:33:
60:b4:a4:08:41:83:d1:d5:c4:1c:02:c6:bb:0f:50:
91:a6:77:e3:71:54:41:1d:57:41:00:29:ba:ad:8d:
bf:8d:89:ad:fc:3e:7e:06:13:fa:f2:d1:11:1e:9b:
bf:88:81:10:5b:aa:f8:86:68:55:7e:a3:dc:67:e4:
c2:32:e6:51:44:d4:79:4a:2c:cb:f5:20:e9:a9:e5:
73:b1:dd:6c:58:82:ec:6e:2e:d1:32:09:d5:ca:cf:
c2:ba:7b:85:e7:19:fe:c7:3a:a5:9a:70:8d:b2:d3:
5a:70:dc:42:9e:0f:fc:e5:c3:52:d8:38:37:e3:82:
d9:78:76:72:22:22:4c:61:cc:95:f6:fe:ee:8f:af:
27:b4:e2:5a:de:a1:2b:78:22:63:aa:96:94:6a:24:
fc:82:76:bf:29:a0:eb:4b:4e:78:3e:b5:4c:50:a3:
5e:1c:39:bb:1d:e9:32:cf:af:a0:d2:09:3e:ff:74:
23:b2:cc:be:1b:55:4d:c7:ad:a8:45:a8:59:a2:da:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:94:EF:0C:05:86:1B:02:36:6B:52:32:4A:AB:0A:B8:63:86:73:5C
X509v3 Authority Key Identifier:
keyid:2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e3:2e:0a:b0:ef:bd:c3:dd:ba:e4:46:8c:41:0f:f5:d9:fd:
c1:35:cc:de:94:87:3f:49:1b:92:06:bd:aa:4f:3b:61:56:77:
5e:37:cd:1b:4f:02:b1:3e:fd:ee:4e:bf:d6:14:35:6b:a7:8d:
08:ec:a1:dc:c9:4a:fa:1b:59:87:44:d3:a7:47:69:fa:06:0a:
0c:96:f7:57:aa:a9:63:1a:be:5b:da:aa:36:7a:d9:4d:85:c7:
db:c0:f4:af:78:26:df:02:98:c8:16:77:03:36:96:41:d2:8e:
79:10:00:fc:14:80:1b:c8:29:a0:85:cf:33:22:3d:a9:eb:1e:
64:69:af:88:f8:02:6a:b3:af:41:a6:59:97:65:e7:b6:45:c4:
88:32:3e:ef:78:c0:9e:46:34:1e:a0:d3:14:da:3d:54:a5:b7:
54:42:b8:09:2a:a9:16:5e:bd:b8:92:74:d8:db:7d:17:30:95:
42:e3:4f:1d:e8:05:28:f6:fe:cb:95:7c:b7:d7:da:4f:c6:d7:
48:82:92:4e:dd:ad:55:41:d2:e4:8f:94:51:27:fa:6e:85:b1:
5f:d7:d5:ff:58:10:20:0c:51:d8:40:7e:ea:03:fa:22:71:37:
9a:8f:f4:e0:cd:51:b8:f2:59:a4:b7:c0:4b:22:34:cc:2c:f4:
4b:ba:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:08:48 2026 by rpki-client