
Error: rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: cKfcXYam0D+8pzGKj0PAxd8luTz6bYV/BKPjJB9ED+M=
Subject key identifier: 22:0B:B8:66:11:35:58:9E:A9:87:3A:A5:9E:61:BA:22:A7:05:0F:86
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 03CD
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 03C3
Signing time: Thu 24 Sep 2026 04:04:37 +0000
Manifest this update: Thu 24 Sep 2026 04:04:36 +0000
Manifest next update: Sat 26 Sep 2026 04:04:36 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: eqt6h0WN/IFYFJZ35RTWKncBf56vNLIJsoIyJuP8Do8=)
2: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (hash: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=)
3: 38B7F27252A611F193771CEECE1D38B0.roa (hash: VujmE/3tHBn8mLb5BtmFjZUZZTvVtkiSObpapiNv1LQ=)
4: 1D81231A52A711F1A84AD4F5CE1D38B0.roa (hash: ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=)
5: 48F8F5D652A711F1B352EDF5CE1D38B0.roa (hash: ce02ImdLwo/7RXTluhZpqtmk35loPw9NQKUYoqpIyRA=)
6: 9938B42452A611F1A083D6F1CE1D38B0.roa (hash: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Sep 24 04:04:36 2026 GMT
Not After : Sep 26 04:04:36 2026 GMT
Subject: CN=6ab4a155-91d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:3e:5d:80:ca:af:3a:05:9a:f8:78:a0:21:
49:4a:7d:34:e5:d9:50:e6:c7:38:8c:3a:72:99:b9:
87:9f:b6:e4:c0:05:cc:31:db:04:1b:44:d2:eb:29:
83:18:1e:dd:22:ba:19:3b:3c:74:f3:69:80:1d:cf:
a6:34:cd:09:99:8a:47:42:80:c8:dc:54:6a:3a:42:
f3:f0:50:77:4f:d0:20:8b:80:6e:07:42:c1:ea:80:
c1:2e:b5:c2:05:be:dd:8c:c6:18:45:b3:a5:3a:e2:
16:8c:6f:ce:53:e8:da:1c:55:29:67:c4:7a:cf:8e:
ec:b2:1e:2d:bf:ee:df:8c:b9:d5:68:d3:db:13:2a:
dd:87:ad:a1:3f:b9:33:fd:13:8e:96:01:6b:51:1d:
0a:00:7e:8d:c6:67:20:bd:72:77:3a:94:31:e0:70:
42:34:0e:95:80:3b:62:09:e9:9f:c1:40:1e:c8:47:
91:17:cf:f9:41:41:03:96:7b:c8:8c:e2:bc:97:ea:
b3:79:96:9e:af:eb:e2:d6:47:9b:8e:5b:cb:ea:c5:
82:74:cb:3a:21:0d:7a:7f:16:74:c9:98:ce:d9:ff:
63:f5:76:b4:ac:38:d3:11:87:45:c7:ce:a1:0f:34:
06:cf:6c:c8:70:54:f2:fc:9c:10:7b:2f:b9:44:e0:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:B8:66:11:35:58:9E:A9:87:3A:A5:9E:61:BA:22:A7:05:0F:86
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:d1:b3:50:28:4a:1f:e1:77:9c:c0:eb:74:22:d3:29:31:
dc:c2:ec:89:28:24:ef:68:92:1e:73:82:de:5f:0f:28:52:90:
fa:b5:81:34:fe:5a:38:32:ee:d2:c1:64:93:41:79:2c:52:af:
c4:fb:f4:78:2b:ca:4d:7a:17:77:f5:d9:05:03:85:b1:60:5e:
45:cd:82:9a:60:81:0e:1e:9a:35:2c:a1:7c:d2:a3:44:d5:a8:
a9:f7:ac:ac:c3:c6:df:c2:57:9d:3a:49:ae:5a:92:36:60:e2:
b0:b2:49:54:3d:b3:69:af:2e:8a:a2:01:b6:63:d2:e0:a0:5a:
31:db:77:15:af:cf:62:a1:83:94:52:ae:ec:27:de:4a:37:ce:
aa:0d:92:0a:bb:9b:25:e9:0f:39:46:38:06:36:16:46:04:f1:
aa:6d:47:3e:d3:cf:1d:91:b3:98:98:4f:cc:ce:81:4a:45:16:
e7:e9:59:13:1b:e0:dd:c8:b6:fb:38:46:fa:e6:b7:5b:66:16:
4d:ed:f1:6b:37:5a:ae:11:4b:f7:b0:0c:4c:84:19:02:23:6e:
51:ee:4a:3d:1a:73:87:b3:e3:96:68:77:61:a8:50:36:3c:6d:
06:f4:d3:d5:62:90:21:89:f4:e9:e8:75:6e:57:aa:44:7f:37:
ca:13:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:42:47 2026 by rpki-client