
Error: rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
File: lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft (raw, json)
Hash identifier: a8LpfJu0AGc77od7iMHSPQDzf0DVmrFVLxWY73vxs68=
Subject key identifier: A6:B5:CE:B0:26:7E:E0:B9:93:A0:14:05:6C:BC:38:13:5B:B3:5C:E4
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Certificate issuer: /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial: 42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
Manifest number: 3E
Signing time: Wed 04 Nov 2026 05:53:02 +0000
Manifest this update: Wed 04 Nov 2026 05:53:02 +0000
Manifest next update: Fri 06 Nov 2026 05:53:02 +0000
Files and hashes: 1: lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl (hash: 7BsAPfUEcRcM42tb6JOC/0sFv2z1SxQjUKWA8BJkaGE=)
2: 283FBF48ABE711F19A2237C3CE1D38B0.roa (hash: qlXe9ToMMBUPUD4aHrT0VkPmkGJ+IKxVVrZ+TC2S6oE=)
3: B150BA40ABE611F1A282F4C0CE1D38B0.roa (hash: N+dAXbLJBG8rn1KXTP6prlFDogrJTuX/AgdM1sWu2Xs=)
4: 5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa (hash: M8OhoCRyxezZkdhtLD8T2oEZ3sfrS8/jU8st2mVSqts=)
5: F2AD0818ABE611F191B005C1CE1D38B0.roa (hash: 8dZYLt8eP39M8BLG9aZ5YDmDaOwnDTF/lzL80thb30g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 05:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Validity
Not Before: Nov 4 05:53:02 2026 GMT
Not After : Nov 6 05:53:02 2026 GMT
Subject: CN=6aeac83e-43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:77:b8:44:47:92:0f:c0:52:16:c2:29:ca:
fc:4c:b5:67:fd:cb:ea:f1:87:6e:07:26:11:ee:5e:
ae:2e:db:98:a5:7b:cf:6f:64:f6:1b:85:74:62:fb:
e7:a9:9c:4e:23:72:b1:d5:42:2a:91:0e:f9:b1:d0:
99:31:26:de:59:94:67:77:b7:45:35:a8:44:1d:9b:
b6:6b:59:cf:45:76:b9:b8:02:06:da:27:55:64:ce:
c3:3b:99:99:f2:27:d7:63:b9:24:3e:d0:7b:a5:d3:
79:a8:43:17:5c:e9:7f:20:ea:70:a4:e0:97:42:8f:
79:27:91:c7:56:27:17:7e:42:8a:31:13:19:4e:04:
1c:9d:3d:99:2f:4f:ca:0a:45:98:c3:08:72:1d:9a:
df:ba:8c:bf:80:0d:b3:f5:5f:80:cb:ae:22:5c:80:
64:8a:1b:6d:65:5a:1a:2f:45:5c:57:98:7d:12:4b:
a4:7c:e1:d8:42:f4:fd:6a:b6:b6:95:3f:f9:f0:1f:
51:9d:02:15:87:2d:55:d2:41:6b:11:5b:09:6d:c3:
f6:bd:45:1c:c9:02:e4:e3:9b:82:22:f6:fa:cf:7f:
62:f7:9a:83:2a:e9:bb:4d:18:f1:26:6a:98:fa:d1:
82:bd:8f:be:fc:cb:57:3c:96:de:bc:ff:ac:17:1e:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:CE:B0:26:7E:E0:B9:93:A0:14:05:6C:BC:38:13:5B:B3:5C:E4
X509v3 Authority Key Identifier:
keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:a6:b6:dd:f9:71:bc:c4:2b:f5:ea:d3:af:6a:c0:15:11:
80:73:d2:a3:a1:6d:43:fa:54:13:1c:3d:44:62:67:81:69:5d:
67:77:7a:b2:49:be:5c:36:df:43:b2:53:f0:cc:0e:c9:f5:fc:
f9:38:a7:be:1b:fb:d2:46:15:ff:f0:cd:2a:a8:7d:e9:0f:4a:
e0:59:fa:13:81:87:8f:10:28:ba:c9:9a:47:2a:d7:bb:cb:64:
0d:91:92:2a:11:7b:b2:73:f9:a7:da:e6:fe:4a:f4:28:04:4f:
67:e3:23:5f:0c:a9:cf:e9:a7:c3:ef:18:8a:63:a8:26:0c:14:
03:02:87:8f:79:6f:d5:2d:74:6a:fa:a0:58:e4:45:b0:14:71:
1e:1e:28:d6:34:74:37:ee:04:50:c7:2e:ca:42:09:c5:45:75:
ea:79:d7:0f:f2:a1:e0:05:ab:3e:d6:92:42:4a:d5:6e:e5:10:
ae:ff:25:9c:62:4c:6e:58:cf:a8:bb:19:a5:75:7b:62:90:ee:
87:80:d7:f7:a8:fe:b0:22:77:c6:0c:64:00:00:6f:a4:81:89:
f4:47:c5:cb:c3:e5:4a:62:bb:75:5d:8f:f7:60:6d:95:03:fa:
bd:87:58:e5:92:95:ac:f1:3c:df:b2:86:e7:29:ab:d6:db:1f:
8c:18:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:26:51 2026 by rpki-client