
Error: rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File: QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier: EolslxjkVOa/4pFG9cHpCYziEK7erim5OnJTeVocCR8=
Subject key identifier: 0B:6F:C1:A5:F5:68:69:B2:40:9C:96:65:9A:16:76:45:36:BC:01:67
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer: /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial: 087D
Authority info access: rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number: 087A
Signing time: Mon 12 Oct 2026 02:03:04 +0000
Manifest this update: Mon 12 Oct 2026 02:03:04 +0000
Manifest next update: Wed 14 Oct 2026 02:03:04 +0000
Files and hashes: 1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: AZjh6JbLTutxBkNEnbrrCQiQ97ct6mf7vbYftG0Ckdk=)
2: 3D93A998876811F18427031ECF1D38B0.roa (hash: ED++UQzskmFMrBOiAcPQY8inrGju/ayfk7tJLhTNd6I=)
3: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 Oct 2026 00:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Validity
Not Before: Oct 12 02:03:04 2026 GMT
Not After : Oct 14 02:03:04 2026 GMT
Subject: CN=6acc3fd8-88c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:72:ba:67:d4:e0:8f:75:7e:db:2d:4f:2b:
fc:34:58:d9:87:63:99:88:e8:a6:63:b9:8c:07:c3:
d4:57:a1:24:09:1f:57:ed:ec:37:17:0f:35:4e:5a:
10:1b:5e:6f:69:ab:88:de:c2:bb:6d:46:fe:c8:f1:
44:0f:ea:24:fc:79:22:f4:5d:b3:26:6f:cf:2e:1f:
dd:81:45:9e:81:e7:10:25:14:19:d0:cb:97:6e:9b:
36:04:28:96:26:d1:2e:1c:e4:1d:43:f1:a8:6b:16:
4b:64:f6:a8:0a:6f:ea:2d:bd:0f:d7:8c:a1:7b:ec:
98:8c:24:6e:64:9d:3d:49:8e:23:72:25:6f:58:eb:
17:bc:92:6c:3a:d8:65:4b:2b:d0:5b:0b:16:6a:b7:
65:b3:4b:fe:42:8a:34:20:41:7a:be:a2:19:e1:99:
fe:6f:7d:88:36:ba:06:37:64:4e:2f:da:9b:b0:f2:
24:e6:bc:a7:fe:b0:5b:71:e6:67:ec:08:78:42:7c:
59:f1:e4:34:50:33:a0:01:2d:f8:3f:52:5d:9f:fd:
73:1b:61:b1:87:0f:45:a7:25:37:3f:32:da:d7:50:
e3:ea:a2:2c:c8:aa:dd:a8:3a:94:1f:4c:3a:8d:d3:
b3:3a:fc:9f:e9:70:bb:bc:3b:2f:24:a3:7f:90:99:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:C1:A5:F5:68:69:B2:40:9C:96:65:9A:16:76:45:36:BC:01:67
X509v3 Authority Key Identifier:
keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:e6:4c:ff:05:91:cb:c3:4a:62:c2:b3:8e:d5:ab:36:48:
ad:ee:4a:90:2a:89:27:bd:a8:9e:3b:ae:16:27:87:bd:1c:a6:
7e:b6:23:12:d4:fd:1a:64:da:14:3c:e3:33:f8:bb:f3:2c:7d:
62:c8:11:f5:61:8f:af:4b:87:a4:a1:6c:c3:5a:d7:55:7a:63:
b5:7a:bc:dc:e8:17:8f:1d:70:ab:87:a9:87:9d:8a:86:d2:f8:
62:23:bb:94:d0:40:83:6e:e9:9d:eb:27:a1:d5:11:63:93:7e:
ec:b8:e7:7d:f4:47:a6:96:ec:00:ae:86:b1:5b:a9:09:b4:12:
2a:e6:84:01:d5:f2:d3:00:88:ca:28:2c:97:1b:e1:52:8c:3e:
f3:01:bc:7f:f5:0f:15:4c:f1:28:5d:76:6b:a8:02:7a:a9:60:
08:18:61:68:09:5b:ff:c7:68:d2:5c:1d:09:07:e7:53:b3:fb:
f1:cc:c8:0b:05:d6:e1:67:e7:ee:11:73:4c:ed:5a:9f:b1:9f:
7d:c3:0a:6d:a2:31:f8:05:23:8d:03:e0:42:60:d8:e5:8e:47:
f4:c7:7f:6f:42:34:57:71:d3:a0:05:2a:13:b6:14:9e:45:75:
5c:1b:02:83:83:66:82:65:57:97:ac:39:92:e5:ab:dd:d2:02:
47:2d:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:28:27 2026 by rpki-client