
Error: rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File: LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier: wL1GxXBy9Ll5tU5cgYb2KsTU6LkypaJQwYkQzbKaS3o=
Subject key identifier: 54:1F:E5:0C:F0:AE:2C:20:34:DD:35:46:B3:06:C8:72:0A:F2:17:EA
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer: /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial: 0995
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number: 0995
Signing time: Tue 27 Oct 2026 01:43:38 +0000
Manifest this update: Tue 27 Oct 2026 01:43:37 +0000
Manifest next update: Thu 29 Oct 2026 01:43:37 +0000
Files and hashes: 1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: +5eCtNBzCT3cGF9j2f/VlDED7/AU+/MZE1n+uqaC2TQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 01:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453 (0x995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Validity
Not Before: Oct 27 01:43:37 2026 GMT
Not After : Oct 29 01:43:37 2026 GMT
Subject: CN=6ae001ca-a791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:22:84:ac:4d:27:78:44:dd:98:22:63:cf:
e7:99:82:93:07:f0:30:54:bc:ef:85:1b:da:60:73:
b2:e3:d0:4f:4d:95:72:3d:76:82:5c:2b:d9:71:cc:
fe:7e:28:4d:15:68:46:63:1a:01:86:4f:02:3e:03:
fc:67:b8:84:b6:64:09:44:18:3a:90:89:d0:32:8b:
b0:37:b6:b6:a1:55:5b:3d:10:ec:20:77:13:8d:f3:
25:55:6c:51:57:be:36:ed:25:15:cf:fa:8c:5d:01:
59:a8:20:4e:0e:99:10:13:84:c0:ad:7f:ca:d9:3d:
ca:24:3f:08:3a:ed:cc:da:9e:78:ea:4a:fe:ad:de:
5e:be:75:5b:00:ff:8a:b8:56:e5:3c:41:2e:05:41:
da:27:67:1d:1d:cb:62:6c:83:b5:40:a9:4a:7a:f7:
ff:f8:ec:fd:e8:ac:f5:5c:89:c9:44:35:b8:80:29:
70:5d:e6:d3:70:85:66:d0:16:2d:5f:99:c3:c2:33:
41:7a:79:b7:d7:22:9e:11:03:15:f4:26:f6:0d:f3:
2c:0a:a2:32:f1:7f:de:4e:79:5d:b2:42:da:d7:87:
6c:99:74:79:31:82:75:bd:90:42:ec:c4:43:12:3d:
8e:b4:8f:81:89:cc:cb:8c:65:a9:e5:40:73:57:a6:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1F:E5:0C:F0:AE:2C:20:34:DD:35:46:B3:06:C8:72:0A:F2:17:EA
X509v3 Authority Key Identifier:
keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:50:87:36:55:44:7f:7b:2a:96:c8:8c:77:47:1e:26:87:6b:
9a:5b:53:1d:63:29:d7:10:0d:b4:b4:7c:67:d5:19:10:f0:38:
d1:1b:07:01:61:b6:a4:bb:5d:0a:1d:64:59:05:9c:7d:e7:b4:
b4:0f:9c:7b:26:10:f1:31:90:38:15:77:08:66:71:7e:91:75:
01:88:24:32:b9:f1:0a:a7:62:eb:fb:7c:c1:93:2a:30:88:67:
c0:76:6c:c5:0c:d5:cb:1b:85:3b:8a:ea:44:0c:dc:99:9a:e6:
e4:13:08:64:a6:5f:ad:90:9f:9a:c6:da:ea:49:b7:a6:da:a2:
27:a5:13:2c:07:ba:32:7a:05:69:0c:d5:7a:c8:02:08:f8:51:
d0:b9:c0:a9:20:66:a9:22:c0:2e:88:90:9c:4d:ab:ae:f7:ee:
a9:69:4b:9a:c9:7a:33:19:9b:72:29:fd:7e:cc:b7:b2:e0:5b:
88:9d:37:42:a7:a7:ec:90:58:27:97:e8:17:8f:da:90:13:52:
00:4f:e6:ad:30:04:79:31:0e:ac:4a:e0:76:4b:dc:db:63:9c:
00:d9:9a:33:66:49:e7:b9:e5:7b:d6:84:f2:0e:26:c8:ce:a3:
fe:8c:b9:47:77:2f:e4:7b:c6:87:ef:72:61:d7:74:9e:a8:09:
25:be:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:58:24 2026 by rpki-client