
Error: rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File: LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier: YBxDTpv1yG8T/KCVJTxP7+E/9VOndCAYCwX0fc+wNro=
Subject key identifier: 42:CB:BA:04:D2:4A:4D:60:A8:C1:2F:EE:FE:F8:30:D4:CC:B1:05:48
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 03ED
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number: 03E3
Signing time: Mon 26 Oct 2026 04:06:23 +0000
Manifest this update: Mon 26 Oct 2026 04:06:22 +0000
Manifest next update: Wed 28 Oct 2026 04:06:22 +0000
Files and hashes: 1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: HBBlYhLD8LvTZoXXj2UyHIhAIOg59BvuArSaneV/D1Y=)
2: D7D2E2A452A611F19BD02DF2CE1D38B0.roa (hash: b+2jKegvzCwZfq+fb5FZqDtq1CY8HBge8hnfwp6Km68=)
3: 38B7F27252A611F193771CEECE1D38B0.roa (hash: VujmE/3tHBn8mLb5BtmFjZUZZTvVtkiSObpapiNv1LQ=)
4: 1D81231A52A711F1A84AD4F5CE1D38B0.roa (hash: ZcEp6winc684xewT0hJzkqUYVlWOfnDVdOhpHbygoic=)
5: 48F8F5D652A711F1B352EDF5CE1D38B0.roa (hash: ce02ImdLwo/7RXTluhZpqtmk35loPw9NQKUYoqpIyRA=)
6: 9938B42452A611F1A083D6F1CE1D38B0.roa (hash: a0lXwM6/HyZeCuqShxjjgi5zdBu0nuAUd14gda8F38w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Oct 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Oct 26 04:06:22 2026 GMT
Not After : Oct 28 04:06:22 2026 GMT
Subject: CN=6aded1bf-c1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:e5:20:10:01:a1:23:ab:17:91:ae:a8:3b:
87:ba:2e:c0:bf:90:3e:ba:d1:32:19:ae:58:8c:b3:
23:76:60:84:c5:61:63:3c:30:5d:27:62:16:75:39:
e0:b2:e6:38:13:5a:40:94:c1:e7:1c:52:b0:10:1f:
dc:80:06:dd:16:8e:24:9e:bf:f3:11:80:7d:09:1e:
50:4b:e5:31:95:e8:e7:ff:38:49:c1:86:03:41:04:
10:1d:0f:e2:d0:44:49:0e:73:21:ed:81:ea:16:14:
4b:30:20:43:34:5b:d6:d8:e8:20:30:0a:c1:10:70:
89:ff:e4:e8:5a:0b:f3:0e:d3:e5:a2:0c:a6:46:9d:
b5:05:16:66:c1:c3:99:75:de:8f:88:18:b4:a9:68:
92:92:4e:ec:96:da:3d:d5:e3:b8:b3:22:6d:c4:f7:
29:c6:5b:8d:81:06:95:e8:e8:ed:5a:57:99:31:e3:
df:2a:94:cb:2d:e6:a1:e0:d9:89:cc:62:56:21:3c:
3a:e9:9e:ab:17:3f:d0:9e:bf:76:a5:37:3f:74:37:
00:90:1a:5a:89:55:4b:81:da:65:9d:ea:ab:08:73:
08:3c:6b:b0:7a:c6:5d:73:f8:03:29:ff:c8:95:76:
68:7d:06:fb:64:b5:65:86:5a:15:0d:ab:e9:f4:22:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:BA:04:D2:4A:4D:60:A8:C1:2F:EE:FE:F8:30:D4:CC:B1:05:48
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:d9:2a:8f:c3:77:0c:e7:bd:70:ee:12:3b:8a:41:f7:d1:
6b:33:fb:c0:ce:1b:76:5a:96:bd:d4:6c:70:d9:8d:b3:a5:35:
98:7e:5e:91:c0:70:28:52:88:e0:4d:cc:88:d0:b1:47:7b:7c:
11:cd:2c:2d:7b:e4:ef:56:4a:87:0e:9b:6b:af:d9:09:09:ff:
39:cd:bf:30:dc:99:94:51:56:c3:09:57:01:3b:85:e6:52:43:
68:e2:ea:9b:3b:c2:81:1f:87:32:7b:db:1e:f0:67:ca:68:ab:
fb:99:db:b7:81:65:b9:79:13:fc:d8:5d:d7:89:e9:6b:34:c6:
56:fb:e7:6c:2a:ef:87:a7:03:8b:8f:7a:85:21:d7:c4:d5:e2:
8a:c8:ce:8f:57:4b:9a:e6:3d:af:f3:63:94:51:72:c3:b9:65:
27:6f:6a:1d:9a:af:49:d1:24:2a:dd:02:e1:8c:39:a1:57:ff:
6f:b3:d8:e7:73:d0:76:12:45:62:c6:11:5f:ad:4c:61:b7:ee:
54:63:b7:e5:d0:cb:0b:ad:06:4c:69:9c:a8:87:cc:66:c8:7f:
64:fb:eb:d7:ff:cb:3a:e9:10:b8:cf:d9:8f:0f:6b:85:f9:5e:
8d:ef:ca:cb:8e:c9:e6:5b:02:cb:b8:0b:fe:c1:f9:9f:77:08:
62:d6:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:51:59 2026 by rpki-client