
Error: rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
File: lY7E7TST-AUYn0loFwDHngiOfrI.mft (raw, json)
Hash identifier: FLFoiCdGbXVGDEkwPDh/iTaQop7PNFZebsptu3Jcbhw=
Subject key identifier: A3:14:6B:9D:0C:E8:E5:5C:8B:20:9B:8F:1C:BE:17:24:92:6C:2B:44
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Certificate issuer: /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial: 7C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
Manifest number: 7A
Signing time: Tue 27 Oct 2026 05:41:55 +0000
Manifest this update: Tue 27 Oct 2026 05:41:55 +0000
Manifest next update: Thu 29 Oct 2026 05:41:55 +0000
Files and hashes: 1: lY7E7TST-AUYn0loFwDHngiOfrI.crl (hash: w4i9s7kp03YemziCrNcsMwD8PrHnWVdjZNRjlinwm90=)
2: 4FE947B8748211F1BEF1D21ACF1D38B0.roa (hash: gMf5DUZWS8LRzzUKIgiaI5m52/YhBJXqXPqfDQ4cQck=)
3: 8D2A260C748111F19133C316CF1D38B0.roa (hash: E5OkO0hC2p5sav8EOOxzrRj7hCtcXtLqUMdK/zTMcsQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 05:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Validity
Not Before: Oct 27 05:41:55 2026 GMT
Not After : Oct 29 05:41:55 2026 GMT
Subject: CN=6ae039a3-6037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:71:13:69:b6:6a:3e:4c:c6:c4:86:d9:e8:
e6:84:08:43:51:a6:ce:b2:d8:10:93:06:5c:39:2d:
22:6d:18:42:9a:21:f0:dd:fc:71:78:28:da:d6:58:
9d:a6:f0:1c:db:94:c7:c1:22:76:a2:e3:f7:13:9e:
f2:28:00:10:c5:35:c7:5e:c8:bc:b6:8f:d6:5c:77:
e3:2f:c6:07:97:8f:f7:3d:a7:10:cf:27:b4:a3:15:
b3:d1:7c:33:58:06:30:84:e5:24:6a:07:86:be:bd:
cc:6c:76:77:40:15:69:a7:03:8d:8a:29:be:4d:18:
12:7e:6a:32:c5:9f:46:45:1e:45:e2:88:41:d4:a7:
be:fe:a3:c1:1f:02:e5:14:97:f7:34:20:de:71:c4:
4a:09:07:cf:47:f9:14:32:43:a2:c8:fa:3f:05:60:
b1:d0:18:dd:b4:33:24:68:74:01:55:f2:a4:6a:f4:
62:73:9b:ea:18:0b:8a:44:82:12:58:2b:c4:e6:5b:
91:93:20:d0:ca:28:e5:10:92:c1:2b:cf:ea:58:69:
15:d7:ab:69:e2:4b:7d:52:fa:a8:7f:23:e3:2e:31:
a8:32:1c:23:c4:55:49:1b:04:7c:f0:70:2f:f9:f4:
94:09:c5:ff:04:70:7c:99:b5:1a:a6:7d:b2:bd:d7:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:6B:9D:0C:E8:E5:5C:8B:20:9B:8F:1C:BE:17:24:92:6C:2B:44
X509v3 Authority Key Identifier:
keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:20:7e:02:58:cd:da:5a:48:29:5e:87:11:09:01:61:2c:11:
f1:94:40:f1:d0:2b:ce:cb:9c:59:66:ff:34:d7:87:65:c5:ed:
57:0e:05:45:73:cf:d5:7d:39:18:66:c7:2a:f9:05:80:da:95:
83:62:72:dc:e7:9f:92:f0:d5:a8:09:86:f7:6c:a1:35:a3:56:
a2:ac:04:03:ad:7d:f7:09:24:34:83:f5:10:e1:82:c4:39:7b:
92:df:2a:22:ea:e4:06:31:a3:87:c6:cf:80:8a:0a:7c:83:a1:
ca:07:ec:e8:2a:7e:92:e7:4c:5f:0f:ea:5d:86:91:6e:cc:ab:
c8:10:0e:1c:0b:26:a0:ee:5f:89:7b:45:a8:88:18:6d:13:ef:
42:ef:4e:ae:ac:1e:c3:4f:a5:22:4c:79:24:cc:dc:99:a3:20:
e0:d6:6f:bf:0f:d0:ba:3a:9d:c6:f9:a5:68:a7:25:84:0c:f8:
ca:39:02:f9:7a:84:d6:a0:7e:6c:4b:66:80:36:18:32:57:af:
45:c4:2a:65:23:b9:84:dd:15:c0:fb:11:86:2a:5d:cb:9f:61:
a3:ad:39:31:22:f5:bd:0a:98:15:d1:11:a5:40:97:c6:45:7d:
93:e1:fa:09:02:3b:b6:91:c8:69:83:69:5b:6d:c6:ee:74:28:
f5:1a:8e:30
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBfDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NTA1M0FGMTEwLwYDVQQFEyg5NThFQzRFRDM0OTNGODA1MTg5RjQ5NjgxNzAwQzc5
RTA4OEU3RUIyMB4XDTI2MTAyNzA1NDE1NVoXDTI2MTAyOTA1NDE1NVowGDEWMBQG
A1UEAxMNNmFlMDM5YTMtNjAzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8IcRNptmo+TMbEhtno5oQIQ1GmzrLYEJMGXDktIm0YQpoh8N38cXgo2tZY
nabwHNuUx8EidqLj9xOe8igAEMU1x17IvLaP1lx34y/GB5eP9z2nEM8ntKMVs9F8
M1gGMITlJGoHhr69zGx2d0AVaacDjYopvk0YEn5qMsWfRkUeReKIQdSnvv6jwR8C
5RSX9zQg3nHESgkHz0f5FDJDosj6PwVgsdAY3bQzJGh0AVXypGr0YnOb6hgLikSC
ElgrxOZbkZMg0Moo5RCSwSvP6lhpFderaeJLfVL6qH8j4y4xqDIcI8RVSRsEfPBw
L/n0lAnF/wRwfJm1GqZ9sr3XHB0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBSjFGud
DOjlXIsgm48cvhckkmwrRDAfBgNVHSMEGDAWgBSVjsTtNJP4BRifSWgXAMeeCI5+
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzUwNTMvNjk4NEQ2NkU3NDVCMTFGMUI0MUI2MUI3Q0UxRDM4QjAvbFk3RTdU
U1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFk3RTdUU1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3NTA1My82OTg0RDY2RTc0NUIxMUYxQjQxQjYxQjdDRTFE
MzhCMC9sWTdFN1RTVC1BVVluMGxvRndESG5naU9mckkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGkgfgJYzdpaSClehxEJAWEsEfGUQPHQ
K87LnFlm/zTXh2XF7VcOBUVzz9V9ORhmxyr5BYDalYNictznn5Lw1agJhvdsoTWj
VqKsBAOtffcJJDSD9RDhgsQ5e5LfKiLq5AYxo4fGz4CKCnyDocoH7OgqfpLnTF8P
6l2GkW7Mq8gQDhwLJqDuX4l7RaiIGG0T70LvTq6sHsNPpSJMeSTM3JmjIODWb78P
0Lo6ncb5pWinJYQM+Mo5Avl6hNagfmxLZoA2GDJXr0XEKmUjuYTdFcD7EYYqXcuf
YaOtOTEi9b0KmBXREaVAl8ZFfZPh+gkCO7aRyGmDaVttxu50KPUajjA=
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:06:23 2026 by rpki-client