
Error: rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: UEF8UhK79kZ34Tkz+LzO0rvh1JQIfhF1YL4WMrHpa58=
Subject key identifier: 45:64:B4:E8:11:69:AB:7E:8A:DF:5A:67:26:4F:0D:34:81:57:05:D4
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 0401
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 03F7
Signing time: Sun 15 Nov 2026 04:03:13 +0000
Manifest this update: Sun 15 Nov 2026 04:03:12 +0000
Manifest next update: Tue 17 Nov 2026 04:03:12 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: 4OGtQe0uvMKObrLn0YxIcrWwH9xRhOXAozUYDslQ27k=)
2: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (hash: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=)
3: 38B7F27252A611F193771CEECE1D38B0.roa (hash: VujmE/3tHBn8mLb5BtmFjZUZZTvVtkiSObpapiNv1LQ=)
4: 1D81231A52A711F1A84AD4F5CE1D38B0.roa (hash: ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=)
5: 48F8F5D652A711F1B352EDF5CE1D38B0.roa (hash: ce02ImdLwo/7RXTluhZpqtmk35loPw9NQKUYoqpIyRA=)
6: 9938B42452A611F1A083D6F1CE1D38B0.roa (hash: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Nov 15 04:03:12 2026 GMT
Not After : Nov 17 04:03:12 2026 GMT
Subject: CN=6af92f01-b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:72:62:7c:46:9a:b5:88:09:cc:10:3c:4b:
fa:55:40:d4:1a:d9:5e:41:c0:19:b9:e3:3d:ab:8d:
91:7b:f3:5b:82:ed:dd:e9:4c:b1:e8:46:25:49:1a:
47:75:70:5d:74:88:a8:60:b9:43:7b:51:bc:78:78:
34:47:62:33:13:fa:dd:dc:a9:0e:73:98:a6:1e:83:
e5:d9:33:8f:f4:dc:17:c4:61:1e:8e:89:35:f4:97:
2d:88:72:ef:4d:36:4d:8e:12:ce:26:ec:fa:ac:34:
44:a0:99:17:68:3a:48:20:92:ee:33:87:7d:70:6c:
71:94:2f:13:55:ea:e7:9f:03:6d:49:05:0d:8d:20:
6a:ce:82:54:56:7d:9d:43:27:5f:50:fc:6f:87:01:
68:32:15:cf:38:77:fe:dd:b2:62:e5:3c:71:21:4f:
6e:6f:65:c1:25:5b:4c:52:9a:f3:40:a3:d1:0a:d5:
dc:6f:9e:07:c8:5c:3c:fb:46:47:e7:1f:72:c2:11:
dd:3e:a1:80:0b:38:31:29:38:2d:73:01:9d:84:06:
43:04:08:62:e6:a3:f3:75:56:79:bc:0c:a9:6b:19:
7d:6a:07:1c:b0:f6:91:4f:64:1a:82:19:9e:cd:d3:
3d:a7:64:b2:ef:bf:95:23:c4:bb:24:d3:2c:a6:9c:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:B4:E8:11:69:AB:7E:8A:DF:5A:67:26:4F:0D:34:81:57:05:D4
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:32:eb:92:da:fe:90:71:39:fe:99:04:a2:6a:c6:f2:01:43:
99:3d:2f:17:30:1b:0e:d0:ec:7b:86:4e:ee:7f:47:f1:d9:8e:
e1:32:e4:f6:1d:c5:b3:6c:7c:ab:e4:26:9b:4a:bc:33:22:cc:
b3:aa:fd:83:34:88:cd:c5:c9:f0:28:d3:36:44:d8:05:7a:b5:
3a:99:f5:5b:7d:01:af:cf:00:c8:81:a3:29:27:c9:64:21:50:
7a:d5:36:3e:ba:fa:d7:db:f8:c2:fd:67:e5:cd:01:80:f5:7b:
94:7b:a5:58:7e:a9:c3:03:7b:1e:38:bf:d4:41:a7:2a:3a:b5:
73:72:cd:0a:32:4a:d1:35:73:23:58:4b:d2:c3:18:9b:c7:be:
ad:37:dd:ad:bd:c5:41:ae:5c:34:63:e0:ff:d2:4f:cd:ef:dd:
b6:f8:a6:4a:74:48:8c:6b:c8:3c:15:f3:17:d8:66:12:11:e6:
09:26:22:5e:96:ca:69:f9:d3:ad:5a:af:44:73:ae:07:0c:37:
c8:3b:01:68:5e:69:85:b6:1b:ad:76:10:87:50:18:45:e9:b7:
2c:dc:89:da:4b:ff:d7:16:91:12:c7:34:0d:d3:1e:5a:86:01:
88:4f:5f:bb:41:39:55:a9:2f:be:7a:a5:6f:2a:a0:07:d0:b8:
f0:15:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:40 2026 by rpki-client