
Error: rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
File: tLDS_w9FOrJmI0C4hhTHguv96mQ.mft (raw, json)
Hash identifier: Ne+O7U+kUMUzHF4BRjDtgbmecz5crYSOllG9DQnJGOA=
Subject key identifier: 06:A2:80:1D:66:ED:48:25:F6:76:59:AD:7B:11:A0:20:19:11:AD:C8
Authority key identifier: B4:B0:D2:FF:0F:45:3A:B2:66:23:40:B8:86:14:C7:82:EB:FD:EA:64
Certificate issuer: /CN=F3687730AF/serialNumber=B4B0D2FF0F453AB2662340B88614C782EBFDEA64
Certificate serial: 39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
Manifest number: 38
Signing time: Tue 03 Nov 2026 05:55:30 +0000
Manifest this update: Tue 03 Nov 2026 05:55:29 +0000
Manifest next update: Thu 05 Nov 2026 05:55:29 +0000
Files and hashes: 1: tLDS_w9FOrJmI0C4hhTHguv96mQ.crl (hash: UbPin5LC283HFTptgbDGc5PuIxp16EF+NIbEbzGNJIQ=)
2: 891DDCE0AD0511F18171381CCF1D38B0.roa (hash: C1X/EUSHAmw+QF5YbACcWhSY4k90Z+xRWT63ipsG6eg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687730AF, serialNumber=B4B0D2FF0F453AB2662340B88614C782EBFDEA64
Validity
Not Before: Nov 3 05:55:29 2026 GMT
Not After : Nov 5 05:55:29 2026 GMT
Subject: CN=6ae97752-4a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:9b:6f:60:b3:ce:8d:99:96:33:1d:94:10:
01:b8:10:27:c2:c8:5e:43:8d:5f:17:66:9d:1f:1a:
42:d9:43:15:3d:2c:7d:f0:d5:f2:05:8a:5d:74:1a:
dd:6a:a9:d5:e7:04:17:77:f2:24:43:b9:e1:eb:e1:
26:33:8e:40:23:6e:d8:3d:aa:09:d2:b2:56:bd:b8:
43:2e:2b:ef:ab:b0:aa:31:2d:f8:58:a7:f8:0d:2b:
f7:43:b9:a2:13:55:ad:65:e1:c6:25:ad:92:66:be:
06:2f:4a:7a:74:3a:a3:dd:c8:cd:a5:fb:ef:58:3e:
0b:96:1b:d3:a7:d6:83:68:60:3a:b7:8d:d5:36:07:
94:d1:27:68:bd:95:36:ed:f8:b4:71:04:77:ce:fb:
14:1b:23:22:8f:e3:3a:95:30:73:77:ad:df:c8:70:
d3:69:e2:28:dc:8a:b0:6a:11:1d:66:3f:98:01:21:
99:de:14:42:9c:e6:76:01:c7:de:ff:14:59:af:f5:
e7:90:4a:de:66:6f:0c:a6:b7:c2:6a:b1:0d:d9:8b:
d1:46:98:a3:e2:0b:5d:03:09:41:56:2b:3d:3b:f5:
bb:1f:11:e2:3a:0c:fb:b7:61:b8:19:60:a4:a0:71:
21:d0:7d:91:dd:5e:bf:c2:c9:4f:36:f0:47:68:34:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:80:1D:66:ED:48:25:F6:76:59:AD:7B:11:A0:20:19:11:AD:C8
X509v3 Authority Key Identifier:
keyid:B4:B0:D2:FF:0F:45:3A:B2:66:23:40:B8:86:14:C7:82:EB:FD:EA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tLDS_w9FOrJmI0C4hhTHguv96mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687730/7976C03CAD0411F1916A9A17CF1D38B0/tLDS_w9FOrJmI0C4hhTHguv96mQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:fa:1d:3d:4b:a3:81:f6:fd:a1:87:43:21:bc:da:e0:f5:
fb:31:3f:ab:9b:b1:6e:c3:6c:52:e0:59:69:f8:cd:76:a4:bd:
ca:60:56:13:69:96:f1:8c:a1:03:f3:e0:63:68:23:48:26:0d:
99:ce:ed:b4:27:97:20:89:f8:98:8f:1f:22:5b:76:d0:e8:63:
4e:ed:12:53:b1:de:d1:44:57:ec:86:47:ca:97:b3:2a:bc:df:
9b:54:33:24:c9:73:d5:6c:6e:4b:1f:3a:82:fd:b9:12:43:47:
9e:82:39:80:4c:db:c4:a6:67:23:99:65:5e:74:c8:a4:a4:0f:
fd:c8:a7:e8:95:f0:f0:83:0d:33:40:50:b9:3f:f5:05:4f:39:
ee:18:9e:ba:a5:af:85:08:08:bd:74:26:63:57:53:a4:18:65:
88:7b:33:8c:4b:f9:0e:ed:e2:62:a8:c9:b6:24:3b:cb:b1:c3:
e1:17:02:a6:12:52:44:fa:86:e0:2d:75:ed:75:26:f4:b5:ef:
35:cb:14:67:0c:35:fa:2d:f1:79:e8:b8:e5:5c:25:53:ec:b6:
ac:56:ca:fd:7f:03:a8:f8:b4:22:2b:9a:5d:50:d8:45:0e:6a:
93:7d:c9:a8:cf:43:77:38:fa:6f:77:68:38:44:00:76:62:74:
34:70:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:46:50 2026 by rpki-client