
Error: rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
File: lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft (raw, json)
Hash identifier: za0Nz2uuNVTNdrOksker93kvUOk7BeRUFEz+RxKpRE0=
Subject key identifier: 6E:50:C5:40:B5:3B:B0:2A:CA:34:6F:3F:50:09:77:60:D5:C3:73:1C
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Certificate issuer: /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial: 13
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
Manifest number: 0F
Signing time: Fri 18 Sep 2026 05:54:07 +0000
Manifest this update: Fri 18 Sep 2026 05:54:06 +0000
Manifest next update: Sun 20 Sep 2026 05:54:06 +0000
Files and hashes: 1: lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl (hash: O3TOOK2XRC0HsLLLNUZSlO9KrcqAmRy/CZ12EsYyFS8=)
2: 283FBF48ABE711F19A2237C3CE1D38B0.roa (hash: qlXe9ToMMBUPUD4aHrT0VkPmkGJ+IKxVVrZ+TC2S6oE=)
3: B150BA40ABE611F1A282F4C0CE1D38B0.roa (hash: N+dAXbLJBG8rn1KXTP6prlFDogrJTuX/AgdM1sWu2Xs=)
4: 5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa (hash: M8OhoCRyxezZkdhtLD8T2oEZ3sfrS8/jU8st2mVSqts=)
5: F2AD0818ABE611F191B005C1CE1D38B0.roa (hash: 8dZYLt8eP39M8BLG9aZ5YDmDaOwnDTF/lzL80thb30g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Validity
Not Before: Sep 18 05:54:06 2026 GMT
Not After : Sep 20 05:54:06 2026 GMT
Subject: CN=6aacd1ff-d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:7a:6e:1c:8e:05:a5:86:da:2a:6a:50:40:
52:5a:4e:ba:b5:ff:4d:af:ff:e7:0e:ee:19:51:a2:
f3:36:72:36:61:cb:2e:41:83:0b:51:d2:49:2b:f1:
d1:5f:b6:91:45:10:5a:5a:74:0c:dc:33:c2:b8:f7:
c0:50:dd:4d:36:a0:e4:af:25:b2:d4:94:16:3b:5e:
29:a6:71:8c:8c:97:25:94:29:79:61:11:b3:60:5e:
63:61:79:0b:ee:46:94:e2:02:1a:96:3d:b8:24:a3:
60:16:f0:87:70:d6:b2:5a:08:cf:15:cb:d7:eb:4a:
48:ac:63:f4:5b:22:91:b1:89:4e:89:67:29:6e:64:
56:50:c1:76:6d:da:35:65:eb:36:30:8f:9a:54:f2:
9b:7c:0b:40:8b:1e:84:2b:c6:8d:8a:7f:97:ca:79:
9a:c4:58:1e:0a:16:ed:ab:0c:9f:3d:b7:3f:56:ac:
6b:31:e9:95:14:4c:95:1b:f5:ec:64:de:4a:b5:0d:
d1:aa:2c:8b:1f:20:03:74:df:3b:69:6b:40:07:98:
7d:8f:c1:cf:e6:68:62:2f:dc:5d:3d:66:67:40:70:
c0:b6:6a:e5:cd:a4:21:2d:80:a4:74:2a:bb:5a:c7:
38:ca:d9:d1:ec:39:0d:31:1a:27:1e:95:9c:c1:68:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:C5:40:B5:3B:B0:2A:CA:34:6F:3F:50:09:77:60:D5:C3:73:1C
X509v3 Authority Key Identifier:
keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e1:c0:0b:20:4e:b1:55:a3:b2:da:53:d3:c8:8d:1f:2a:fb:
24:3b:fc:af:c5:39:18:62:66:95:23:cf:e4:f9:a3:5d:bd:88:
81:68:27:f7:e8:16:e4:b5:ed:cc:2a:c1:df:7f:97:ac:dd:b6:
5a:ac:6a:36:c3:23:78:60:c9:43:6d:67:17:44:bd:7e:7d:ef:
39:be:f8:67:cf:45:5f:10:fe:14:b4:1d:21:3c:46:94:a4:e5:
36:4f:db:8e:83:94:88:a6:78:2c:b1:15:17:ff:e2:60:b9:55:
98:fa:61:2e:a8:fa:d6:49:ef:30:e8:7c:29:44:ed:63:bb:dc:
c8:f9:67:a4:80:da:a4:f9:4d:12:09:41:0c:84:9a:3f:ca:54:
88:e4:4c:a0:a7:97:52:1f:a1:2f:7f:fb:9f:82:8a:3a:0d:21:
71:e4:79:82:00:f5:7d:20:a8:d6:df:09:89:b4:ec:f0:2e:92:
43:b5:2c:16:6b:c8:e1:d2:97:01:02:d3:10:c1:d0:13:75:6c:
20:b4:8e:a2:bb:07:50:40:30:31:f3:d4:78:e3:ee:fb:eb:65:
4f:d5:83:6d:68:6b:c2:c6:72:46:53:f0:93:7f:5c:f3:84:c8:
18:8d:0e:20:48:26:7b:8c:bd:57:61:3c:91:62:81:11:7b:fc:
a7:35:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:18 2026 by rpki-client