
Error: rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
File: LNMcPCUfXtoYP5OOf8s6Sh26id0.mft (raw, json)
Hash identifier: J2rCgoASVTNPFw6N64qh2pO+4tvkLBULM5RwbxrKmpo=
Subject key identifier: D1:7F:D1:BE:55:68:30:73:C6:DB:88:51:83:3A:C2:4E:A1:DD:A6:2D
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Certificate issuer: /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial: 0942
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
Manifest number: 0934
Signing time: Thu 24 Sep 2026 01:51:33 +0000
Manifest this update: Thu 24 Sep 2026 01:51:33 +0000
Manifest next update: Sat 26 Sep 2026 01:51:33 +0000
Files and hashes: 1: LNMcPCUfXtoYP5OOf8s6Sh26id0.crl (hash: fh7cBh0dGtc7+Tkp25bje/NLektElWnq6H7DL2doqmM=)
2: F0EF141C4FAD11F0A2CF018ADAE4EC9C.roa (hash: s9CANyFnnMQFBebtZSUl9JpC2l7TIpoth6Vtnvo8L04=)
3: 8CBEF34A4FAD11F093912788DAE4EC9C.roa (hash: LYzjFbg1hC2pJNCyNVlFyFaCoTckxwNGPohEbA60zjQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 01:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370 (0x942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FDDEEAF, serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Validity
Not Before: Sep 24 01:51:33 2026 GMT
Not After : Sep 26 01:51:33 2026 GMT
Subject: CN=6ab48225-fbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:c8:2f:f4:9b:ac:8b:cd:c6:08:69:c7:ed:
c8:09:dd:6c:3f:34:9e:30:18:54:3f:f8:d5:c6:5d:
78:5c:c6:04:71:ee:66:6c:c2:06:9f:ea:fd:35:30:
f3:35:8b:56:d5:97:0d:8d:32:2a:65:14:17:ef:3c:
1c:be:13:70:3c:b9:66:63:c2:37:aa:e6:fc:4c:e8:
db:e2:e2:a5:ec:c2:ac:51:f3:7f:a3:bd:ea:5a:a0:
c2:71:6a:75:19:8a:54:f6:da:c0:85:8f:6f:c8:58:
7c:3d:94:7d:c9:23:d4:ec:f0:3d:3b:55:78:57:7c:
95:9b:6b:05:98:83:9d:27:a7:0b:86:b0:17:5a:e5:
8c:db:52:1f:05:cf:bb:f9:97:99:5e:72:cc:e1:7c:
a2:07:b1:e1:ef:87:e6:30:64:b6:37:2a:6d:c2:f2:
71:92:56:57:da:6f:0b:ce:b7:c6:8a:12:d1:30:f5:
70:e8:bc:de:c9:30:14:e4:e1:a4:f7:5c:74:69:43:
58:ef:02:fd:39:1a:33:03:bf:d9:85:02:4a:61:41:
de:0d:43:62:a8:9c:f7:8a:9b:ae:df:3d:d8:92:cc:
35:03:ba:96:cd:5d:9e:77:ce:64:c3:13:25:af:79:
c0:50:74:d5:f1:67:35:74:0c:f7:b8:33:19:5c:6c:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:D1:BE:55:68:30:73:C6:DB:88:51:83:3A:C2:4E:A1:DD:A6:2D
X509v3 Authority Key Identifier:
keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:60:96:19:fe:61:70:26:7b:8b:9a:32:dd:b8:16:ee:92:
ed:2f:cd:29:dc:47:f4:fb:d5:9d:4e:2f:77:f4:f5:2d:2f:e5:
02:7d:ff:4a:b4:10:de:55:d6:3f:b3:fb:3b:24:e9:66:fc:64:
de:97:64:ad:63:8f:2d:35:29:b6:93:19:fb:4d:a1:17:16:42:
fc:45:85:c8:85:26:fc:28:06:bf:4f:01:d0:1c:d2:1c:bd:da:
6f:1f:4b:b1:74:f8:53:be:db:69:c4:53:8c:a3:de:e3:ee:a6:
95:d6:a6:50:4e:0a:5f:11:a2:a3:9e:6b:d8:95:b4:21:41:d1:
88:dc:08:30:0c:32:25:bd:b6:6b:0a:56:00:c0:58:36:68:33:
44:66:0f:f4:51:b1:3f:f6:87:f0:26:8a:b3:71:d5:2a:e0:ed:
2b:81:45:1d:2b:21:71:08:f9:98:d4:38:a7:37:45:48:cf:2f:
ab:2d:6b:d0:f6:9f:ea:31:54:b9:72:9b:cc:3f:f6:49:24:2a:
00:34:09:1a:bb:bd:0a:0d:f4:14:e3:17:da:1b:8f:6f:23:c9:
c0:ec:79:fe:f7:a9:53:0e:4c:1c:18:bc:66:51:ec:19:2d:a0:
18:91:cc:32:63:fa:cb:3e:fc:ab:65:b4:35:d5:11:20:1d:00:
6a:34:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:21:06 2026 by rpki-client