
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File: L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier: JWkixBa06YFuNYj7NaC3NGpI1qN3/mTw9WShxR7p0Ew=
Subject key identifier: 9A:6B:A9:FD:88:E7:DF:6A:B8:7C:AB:2F:60:F2:05:A0:E6:61:E1:CC
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer: /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial: 04E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number: 04DB
Signing time: Thu 29 Oct 2026 03:33:10 +0000
Manifest this update: Thu 29 Oct 2026 03:33:09 +0000
Manifest next update: Sat 31 Oct 2026 03:33:09 +0000
Files and hashes: 1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: grRCgwzSogoqoTXXDWI6pQneEN29ASsZ4lwodF9d9hs=)
2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 31 Oct 2026 00:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Validity
Not Before: Oct 29 03:33:09 2026 GMT
Not After : Oct 31 03:33:09 2026 GMT
Subject: CN=6ae2be76-c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:54:d1:4b:cf:7a:a7:92:ef:06:32:3e:60:
73:9f:50:2d:5b:27:27:8a:e7:38:d0:91:e5:59:65:
f5:cb:fc:2b:9e:97:f4:d9:cb:f3:b1:13:26:f3:21:
93:31:73:9b:7e:c6:1e:45:29:df:a5:cb:a1:ec:dd:
6b:35:06:a9:3a:bb:8a:21:53:1b:b9:c6:a0:4a:ce:
48:4a:91:d4:30:06:55:25:7d:6b:ec:89:69:22:09:
20:1c:05:ed:d6:42:f9:6d:4e:5b:55:c7:1a:d6:20:
7c:9f:8d:a5:55:80:73:a6:7e:c8:55:07:00:92:1b:
7a:f6:b4:0e:6d:75:6c:13:b7:d9:0c:90:87:1e:ec:
d5:53:e0:dd:20:de:b9:a4:88:a2:c8:e3:9e:8a:65:
bb:2c:77:3b:3e:1d:cf:cc:a9:5c:04:7d:4c:85:da:
b2:f4:cc:57:c2:0c:ef:3f:d6:6d:f9:3e:3b:6b:3e:
7e:aa:b4:eb:bf:d1:8e:7a:0c:e9:72:23:a8:7b:6f:
83:33:b4:63:f2:a6:37:ca:ae:62:59:7b:92:3a:97:
37:94:91:3c:fa:52:90:22:aa:83:cf:c5:74:25:34:
1d:06:7c:2d:13:7d:6a:63:69:ee:b9:40:da:ce:25:
08:4e:bc:d7:84:8a:35:27:e5:6a:94:04:09:21:25:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:A9:FD:88:E7:DF:6A:B8:7C:AB:2F:60:F2:05:A0:E6:61:E1:CC
X509v3 Authority Key Identifier:
keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:d2:b3:a3:57:54:24:3e:ec:6c:f1:2f:a8:32:88:58:c1:45:
69:97:7e:fe:e4:5e:d3:59:fa:98:89:0f:7c:d5:f1:0e:ef:50:
3d:89:09:2f:e9:a7:fc:c4:96:7e:a2:41:79:e0:31:e3:a1:19:
72:38:13:dd:50:c0:6d:4a:27:fa:65:4b:63:05:27:e0:4f:1a:
b2:0c:5e:6c:e4:d7:02:c5:f4:3f:bd:48:e2:e6:54:99:41:aa:
6c:5d:ca:34:08:43:ee:0f:80:38:60:da:9f:a1:86:f3:87:13:
36:bc:e2:57:22:1f:48:92:99:0a:fb:8c:9a:bd:e1:17:ad:c8:
12:36:19:9f:43:f5:a2:47:8e:c9:1e:2d:1c:ab:2d:65:2c:63:
39:81:8b:e0:06:d6:5c:c0:11:2f:ef:04:af:77:eb:35:a3:54:
52:45:93:f5:56:4d:61:ff:ad:cb:65:2c:81:5c:28:7a:3c:15:
49:79:45:de:c4:75:06:39:0f:7a:90:bb:a2:f2:bd:9f:b9:49:
88:fb:b5:e9:93:bc:a8:96:d2:27:ce:3d:9c:09:06:2c:70:2e:
9c:52:9c:c4:78:db:49:b4:51:b5:99:e6:d5:a6:f0:cd:4d:e2:
0f:34:2d:95:ea:a0:53:78:08:5d:26:02:f8:df:1d:61:b3:24:
9c:a0:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:49 2026 by rpki-client