
Error: rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File: mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier: r3dgCK+4hUxe3BHQMWJl2KMllR7ERQf+waXJV4TBJ7c=
Subject key identifier: 77:AF:FC:D3:DC:E1:11:4B:8D:08:B5:AA:48:43:7B:B8:D6:A0:96:83
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer: /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial: 0AB3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number: 0AAC
Signing time: Fri 18 Sep 2026 01:27:08 +0000
Manifest this update: Fri 18 Sep 2026 01:27:08 +0000
Manifest next update: Sun 20 Sep 2026 01:27:08 +0000
Files and hashes: 1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: yr1I7Bkfeikt6ZSFgxX4S/nEjDTbmDDKWkqYm/FR6n4=)
2: A59E099282C411F0B018AEC1DAE4EC9C.roa (hash: okBnUm/NcC2euNDAK0BM3ThQh/20GIpH4iqpfDhnEF8=)
3: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (hash: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=)
4: 6A3D42E489B911F1BE2734BFCE1D38B0.roa (hash: xFggCMOp+wX+72NPjHT5Q9DwGoQjc5rzY3XRbug6TNk=)
5: 193C239E82C411F090E870BDDAE4EC9C.roa (hash: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=)
6: A800754A82C311F09AF518BBDAE4EC9C.roa (hash: SAIigmdTDHDxOusEjUmretqLmVMcAl3gAWgtzTQZPeI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2739 (0xab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Validity
Not Before: Sep 18 01:27:08 2026 GMT
Not After : Sep 20 01:27:08 2026 GMT
Subject: CN=6aac936c-dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:e8:a7:32:a1:da:0b:35:b6:11:b4:f8:9b:
cc:de:fe:64:39:0e:63:c4:02:da:46:ec:ef:a3:c9:
19:76:45:48:6a:33:71:6b:b4:89:11:e6:5c:12:50:
56:5f:60:3a:19:5f:f3:14:02:a4:6e:de:36:43:89:
db:af:06:0c:3c:a7:c9:67:f5:83:24:6e:1d:ba:54:
aa:69:a1:5a:71:52:00:5f:93:7c:74:19:1c:e2:55:
82:8e:50:34:4b:fa:a3:21:7d:b7:18:2a:3b:d0:62:
80:c7:9f:32:29:91:25:54:2a:32:55:6e:64:1c:bf:
c4:e6:56:92:1a:e8:07:32:12:55:bf:aa:77:36:6e:
55:0e:94:76:07:2a:d5:c3:10:6f:36:b2:a1:4a:93:
93:3a:7f:90:42:0b:73:08:8e:7b:01:e0:11:93:42:
f0:f6:fd:d9:31:54:cc:fc:26:f5:ce:21:e4:11:c0:
38:59:6e:ad:d2:29:79:8d:7b:53:7f:8e:57:17:16:
d0:c4:8a:6c:59:1a:a7:a7:6b:79:b6:f1:7a:fb:e7:
92:24:81:87:2c:c4:0a:e2:c1:8e:00:26:90:b7:39:
53:5e:32:4a:6e:9f:da:8a:cd:e7:7e:87:25:45:b6:
06:af:78:18:59:d1:4e:55:9b:d9:c0:7d:59:da:42:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:FC:D3:DC:E1:11:4B:8D:08:B5:AA:48:43:7B:B8:D6:A0:96:83
X509v3 Authority Key Identifier:
keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:df:19:cc:8d:7f:34:64:cf:ac:ba:a6:dc:f8:f5:04:c4:
d1:4a:90:53:c8:a8:e1:50:59:90:df:65:5c:0b:8f:3a:2a:86:
06:d2:b4:f5:37:43:be:67:a5:2d:4a:19:50:ee:fc:e5:39:71:
e5:5d:0f:f6:92:c5:a2:c2:b5:6f:0b:7e:3a:b3:e0:7c:5d:96:
97:3a:43:d6:81:09:77:3f:64:e3:e1:3f:4c:f8:c8:74:00:73:
2b:83:d2:81:5b:e2:eb:fe:66:79:97:75:af:fd:46:96:e3:90:
6f:62:37:1e:a6:10:a9:9a:99:8c:f5:c4:f7:b8:3c:9b:65:68:
98:c3:7a:80:a4:e7:8f:81:35:37:af:b5:3a:0a:ff:82:73:42:
56:05:64:76:dc:85:74:88:67:ec:51:38:12:70:d3:6e:34:b4:
bf:59:dd:70:23:82:9b:a2:77:c3:e5:b0:d0:59:09:a6:38:4c:
1b:66:0d:04:22:fd:2a:5c:bf:16:55:86:be:20:28:d1:41:e2:
66:73:36:b9:ea:aa:1c:35:13:f7:80:4e:a8:0b:16:0d:16:03:
5b:b9:db:3e:90:53:0a:a0:e0:72:d7:78:ac:ae:b7:1a:63:ea:
9f:85:0f:4f:d7:4c:4f:b2:70:56:67:d6:b8:17:f9:f4:86:29:
d1:8b:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:56 2026 by rpki-client