
Error: rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
File: L9OdkqzapRN7zkgavmyN8dzNDvY.mft (raw, json)
Hash identifier: hFAiHhh6kZwaBSL3HI0jU6h3TEuLpwjdXfSdB3ql1w4=
Subject key identifier: 6C:B2:23:62:44:4A:5B:90:F5:02:AC:20:A8:28:E9:4D:96:D4:84:78
Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Certificate issuer: /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Certificate serial: 04E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
Manifest number: 04DA
Signing time: Wed 28 Oct 2026 03:33:24 +0000
Manifest this update: Wed 28 Oct 2026 03:33:23 +0000
Manifest next update: Fri 30 Oct 2026 03:33:23 +0000
Files and hashes: 1: L9OdkqzapRN7zkgavmyN8dzNDvY.crl (hash: dw4xpojj70YdRHy6htHpJTSCUCTnUjC/b4wZcbgiDac=)
2: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (hash: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg=)
3: 82D2D66E261811EE84FCC57F4AD9E6FC.roa (hash: 8DOR79YopZBDIjmiAAaaEool8LnL3u27308SxIQ3uSY=)
4: E1F87CC6261711EE9112117E4AD9E6FC.roa (hash: L/3Ed8SgC2Eem41w8cHehrxxaShVOqXifUiGhdxr7zk=)
5: DBC4D84EF19F11F0BB0D92C4DAE4EC9C.roa (hash: 0w11dAl0ZHuL4r3C+H0Cy861F6dvJBOgzONU1ELikMM=)
6: 3333CFFEF22C11F0B7B687ABDAE4EC9C.roa (hash: n9BHCAIHciXSckg0OkYupto8mNVTVrnQREgeCL2seHc=)
7: 7977DC10F13E11F08E43847CDAE4EC9C.roa (hash: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI=)
8: 857C6338F13811F08947FFD6DAE4EC9C.roa (hash: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII=)
9: 2BBF61F4261711EEBF1F207C4AD9E6FC.roa (hash: uweMPd3tzGkzK5NAwH3tY1Gjy+sA5uAC5mjmqHriOro=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 30 Oct 2026 03:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6
Validity
Not Before: Oct 28 03:33:23 2026 GMT
Not After : Oct 30 03:33:23 2026 GMT
Subject: CN=6ae16d04-3bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:b2:1d:5d:a2:91:a2:58:30:51:89:e6:b0:
55:b7:5c:c9:6a:82:ca:b1:9f:e9:49:59:57:b0:95:
47:6e:b1:fc:b6:94:ff:ee:e9:dd:1a:1f:26:11:56:
a4:56:a4:f1:1e:26:76:c4:e4:3d:1a:0f:ab:1d:8e:
6a:2c:d6:9d:a9:94:c4:dd:af:3b:4a:ed:f1:72:3e:
75:fe:90:62:3c:cf:0e:22:6c:cb:ba:48:2a:9f:6f:
db:a3:f3:e5:d8:aa:b8:f7:68:29:cb:70:66:23:3e:
75:e8:9b:df:18:44:7e:6b:70:7d:fc:a6:72:89:ba:
13:65:df:6b:34:16:fd:c3:59:31:18:61:b9:f2:13:
99:0b:0e:41:07:88:6f:cf:49:91:7a:98:d8:26:36:
9f:b2:d0:a7:e5:36:08:f0:3f:a4:9a:ae:cd:2b:99:
f7:a2:73:d0:16:96:8a:0d:85:4d:e9:e5:62:14:2d:
90:20:dd:f7:6a:70:9c:3f:14:96:5d:cd:47:cb:6c:
8d:fb:1c:d9:d1:99:7f:db:a5:e5:ec:72:e5:bf:5b:
96:ae:5a:dd:37:a5:0b:94:76:1c:7f:6c:2d:d0:5b:
8e:ce:be:2b:46:0e:e4:47:e2:84:79:c2:5c:67:fc:
34:cc:4f:d0:8e:4d:76:a0:0e:3a:8c:cf:da:f7:4d:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:23:62:44:4A:5B:90:F5:02:AC:20:A8:28:E9:4D:96:D4:84:78
X509v3 Authority Key Identifier:
keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:79:b0:9c:43:e1:fe:12:0b:21:c5:5c:d9:df:66:22:97:
58:e2:65:78:8e:66:f4:b0:47:44:39:91:53:fd:a9:5f:a5:9c:
74:a6:62:da:37:67:d4:f7:d5:a0:b6:e0:9a:ab:22:c3:f3:c0:
00:ce:4e:19:f7:5c:76:c2:91:47:f9:1f:16:4f:5a:cd:e6:f3:
90:98:72:05:fe:c3:5c:da:57:f0:d5:88:94:a4:0d:7a:0a:50:
28:5e:a6:75:4e:e7:c9:04:50:5f:3a:f4:8e:9c:41:9c:6d:6d:
af:a9:12:87:7a:6a:46:85:52:0e:c2:6e:ca:b8:c0:bd:0e:7d:
2b:e2:98:47:59:3f:e0:3e:7d:83:5a:a5:53:70:c9:bc:8e:f2:
68:52:20:48:bd:90:b8:b3:d4:ec:2c:5b:29:c9:c8:1d:1b:fb:
0f:49:37:9c:1b:45:90:aa:a1:87:84:3d:d0:c5:1a:dd:d5:27:
6f:ac:52:46:ef:72:a8:e6:ef:f3:4f:6d:67:f2:9e:d2:49:bb:
74:47:bd:ec:05:e0:06:e9:7c:fd:56:a6:33:d9:5d:1b:bf:1e:
41:fe:8f:2b:4f:83:06:c4:be:c1:a1:02:9a:6e:5d:33:e6:a0:
bd:08:71:db:ca:96:25:f2:8a:80:cf:cb:23:bd:e0:01:4e:ae:
c5:4e:bd:78
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFBRjExMC8GA1UEBRMoMkZEMzlEOTJBQ0RBQTUxMzdCQ0U0ODFBQkU2QzhE
RjFEQ0NEMEVGNjAeFw0yNjEwMjgwMzMzMjNaFw0yNjEwMzAwMzMzMjNaMBgxFjAU
BgNVBAMTDTZhZTE2ZDA0LTNiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiPbIdXaKRolgwUYnmsFW3XMlqgsqxn+lJWVewlUdusfy2lP/u6d0aHyYR
VqRWpPEeJnbE5D0aD6sdjmos1p2plMTdrztK7fFyPnX+kGI8zw4ibMu6SCqfb9uj
8+XYqrj3aCnLcGYjPnXom98YRH5rcH38pnKJuhNl32s0Fv3DWTEYYbnyE5kLDkEH
iG/PSZF6mNgmNp+y0KflNgjwP6Sars0rmfeic9AWlooNhU3p5WIULZAg3fdqcJw/
FJZdzUfLbI37HNnRmX/bpeXscuW/W5auWt03pQuUdhx/bC3QW47OvitGDuRH4oR5
wlxn/DTMT9COTXagDjqMz9r3TQBJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbLIj
YkRKW5D1AqwgqCjpTZbUhHgwHwYDVR0jBBgwFoAUL9OdkqzapRN7zkgavmyN8dzN
DvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRBRDlFNkZDL0w5T2Rr
cXphcFJON3prZ2F2bXlOOGR6TkR2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0w5T2RrcXphcFJON3prZ2F2bXlOOGR6TkR2WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0I4RDEvNTYxRTJGREMyMUYwMTFFRUFDRkMwMTEwNEFE
OUU2RkMvTDlPZGtxemFwUk43emtnYXZteU44ZHpORHZZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8WHmwnEPh/hILIcVc2d9mIpdY4mV4
jmb0sEdEOZFT/alfpZx0pmLaN2fU99WgtuCaqyLD88AAzk4Z91x2wpFH+R8WT1rN
5vOQmHIF/sNc2lfw1YiUpA16ClAoXqZ1TufJBFBfOvSOnEGcbW2vqRKHempGhVIO
wm7KuMC9Dn0r4phHWT/gPn2DWqVTcMm8jvJoUiBIvZC4s9TsLFspycgdG/sPSTec
G0WQqqGHhD3QxRrd1SdvrFJG73Ko5u/zT21n8p7SSbt0R73sBeAG6Xz9VqYz2V0b
vx5B/o8rT4MGxL7BoQKabl0z5qC9CHHbypYl8oqAz8sjveABTq7FTr14
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:17 2026 by rpki-client