
Error: rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier: E6aRY9I8QQvhVfnwj2u6/89J18bYPeCYOys8qBgk2sk=
Subject key identifier: B6:71:8A:B9:DE:22:CD:A5:8C:FC:A0:C1:7F:ED:64:B4:F4:A8:45:6B
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 0568
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number: 0557
Signing time: Tue 13 Oct 2026 03:18:08 +0000
Manifest this update: Tue 13 Oct 2026 03:18:08 +0000
Manifest next update: Thu 15 Oct 2026 03:18:08 +0000
Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: Ef7TL+b8Gg7MdyRtYercIEtwbu0A+zrjLafyegkB3/8=)
2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
7: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
8: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
9: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (hash: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=)
10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1384 (0x568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Oct 13 03:18:08 2026 GMT
Not After : Oct 15 03:18:08 2026 GMT
Subject: CN=6acda2f0-cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:84:e4:cf:5f:ba:4e:c8:46:86:ea:87:92:
1d:f1:09:1d:51:cb:8a:7b:ac:8b:af:8a:5c:21:1a:
0a:d6:4f:e4:53:90:04:82:d7:d5:f6:85:81:14:4d:
56:a3:66:cd:5e:c7:6b:c4:b2:30:be:75:01:a2:28:
2f:7c:83:b6:19:4c:79:06:59:ea:60:d8:20:bc:4d:
a9:f6:13:39:8b:70:e2:ec:67:23:0b:33:bb:c4:61:
2a:11:d9:d7:5f:a6:4a:3c:e0:28:13:85:75:11:a2:
0d:e8:44:74:74:08:b3:5b:1a:a6:b9:30:90:8b:7e:
23:91:94:60:ce:00:d5:f8:65:5c:8b:10:b4:0a:56:
a1:17:df:e3:3f:ee:b1:35:18:28:c4:4b:a1:20:8f:
b5:4f:81:3e:6a:fc:26:4e:2e:a9:97:f8:64:88:b8:
05:8b:e3:51:15:28:33:6b:95:eb:37:d3:88:e2:6d:
06:79:58:b7:88:df:64:0d:fb:f8:4a:e6:f9:aa:73:
5f:9a:6a:01:38:19:bd:ea:d8:40:87:29:ec:09:7a:
00:d3:7e:6e:29:e0:55:8d:c6:80:f8:f2:6f:de:1e:
82:78:fc:be:ab:0c:9b:04:d7:96:91:6f:37:b0:15:
1f:a2:9b:7c:24:d3:ba:ab:1b:3a:3c:a7:4b:82:94:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:8A:B9:DE:22:CD:A5:8C:FC:A0:C1:7F:ED:64:B4:F4:A8:45:6B
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:a1:4d:83:5e:4a:30:83:0c:42:db:c9:98:37:51:dc:fc:
03:bb:dc:3b:f7:18:ee:17:03:54:2f:5f:39:3a:16:4a:b2:18:
61:11:a2:e6:4c:66:0a:f2:a4:d4:26:29:6e:67:a6:84:e7:10:
bc:6c:67:e3:33:f9:1f:97:4b:dd:a9:9a:72:3d:61:89:30:33:
74:34:2b:0a:b3:ac:6a:1d:bd:7e:ae:9a:00:14:48:36:49:35:
66:80:02:4f:9b:12:f2:6c:2b:01:a4:c2:49:c9:73:55:a0:66:
43:07:9a:82:ce:04:c1:11:5c:40:cc:4a:1b:ae:44:7c:d8:43:
8e:b0:75:68:9b:54:2d:f1:c6:a5:ac:dd:4d:46:fb:14:3b:e0:
09:5c:33:58:ac:a5:92:ee:0f:53:a1:21:62:97:62:9c:84:2c:
f9:00:c4:2d:70:30:1c:f2:9b:a1:4f:8d:cd:24:e1:95:a0:6a:
a0:2c:3a:96:97:1f:69:18:cf:f6:46:aa:e6:ae:7d:f2:13:8f:
25:f5:1c:1b:d5:b1:ad:01:7b:4c:9d:53:63:d7:e9:cd:2a:52:
aa:47:f0:27:f3:a4:f1:f2:72:5a:38:a1:bb:2e:32:c8:55:fd:
bc:71:ef:7d:c6:0f:34:15:6c:81:cd:6c:20:e5:7d:27:72:28:
a7:b8:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:13:31 2026 by rpki-client