
Error: rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: EbgW4rykxTxxDniqtZ1p+W59LCPtMcxQmWRuAcwEIKY=
Subject key identifier: 68:AB:EE:B1:A1:3A:E6:98:AE:F9:F1:D8:C9:F0:CE:B3:F5:D1:E5:69
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 1046
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 102F
Signing time: Tue 22 Sep 2026 00:55:29 +0000
Manifest this update: Tue 22 Sep 2026 00:55:28 +0000
Manifest next update: Thu 24 Sep 2026 00:55:28 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: kGxZlE1UzSsNpVRcqQHAG4FuEYalQgWtgyUkh0Z7DGU=)
2: 65B8CDA0902211F1ADB723D1CE1D38B0.roa (hash: Xim1UGEgD9YF60xXopB/o337VqTBiStau5CZPIWZdWo=)
3: 39A15096902411F1B016B3D9CE1D38B0.roa (hash: jJJbAx5djHh+tei5Tazc3X/5MjMzwGLT3ZzM0dUmwmE=)
4: 7C3E55B4902111F19C3D6FC9CE1D38B0.roa (hash: 3YAgaNCMWja+XqVqVSO6d1a05F3nuNn9YgnY9uBJFx0=)
5: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
6: 058F87F0901F11F1B4372CBDCE1D38B0.roa (hash: rPHef9QQYZd+LvUX8tkf0SC7wdAVqHDLQMDNntxfd2o=)
7: 63911742901F11F18E1340BDCE1D38B0.roa (hash: VoYbPhNHZSIv7q3e/cQMepOJ/LmJ7pp8vT7io8/IP9M=)
8: 4B47C07C902511F1855BC0E1CE1D38B0.roa (hash: LMHsEgxxHhrC80yn+QmfSbx1JlHBlW1LGksapRgWHNU=)
9: D050B396902011F1BEB96DC5CE1D38B0.roa (hash: DBovRPK1Tx1TXVFD1e46J7QxRI4i4W1he+qGL0PV53k=)
10: 94C0EE66902211F1BE0B89D1CE1D38B0.roa (hash: H2VqM3Al4tnne65f7bzWE3hlso64x9ApyHj1wPBG8sA=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4166 (0x1046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Sep 22 00:55:28 2026 GMT
Not After : Sep 24 00:55:28 2026 GMT
Subject: CN=6ab1d201-9cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:ef:7e:be:6d:be:48:9c:77:e1:22:9e:90:
32:9a:56:12:f5:9b:6a:fb:87:cd:0c:3d:bd:f3:9a:
a1:bc:36:93:09:0d:f4:c1:25:f9:25:4c:ee:4b:e4:
76:d4:00:d2:08:bc:ac:ec:aa:86:d2:e6:ad:86:21:
03:29:43:27:cc:f8:8d:f2:3f:f0:dd:a2:37:ea:30:
ec:81:ee:5a:45:78:33:57:54:24:42:c8:ce:25:29:
12:ef:20:b1:8e:3a:b4:fd:92:7c:17:2f:c8:c8:7e:
62:2c:60:a2:d1:c9:9b:05:4f:7c:46:f4:fe:af:78:
10:fc:f3:aa:e8:28:01:57:85:06:91:38:e7:88:8a:
f7:0f:4e:d4:ac:77:42:d7:2d:38:9a:ee:fb:6c:95:
5a:d9:ec:6d:42:b8:03:64:51:84:64:52:1c:4b:ba:
25:bd:c0:de:85:a1:cf:f0:98:59:45:93:d4:8d:f2:
b5:96:70:e0:d4:6e:02:b4:49:3c:7c:94:12:95:22:
b1:01:55:c7:b1:e4:b4:e2:db:99:fd:ef:cc:b6:88:
4c:f4:fe:56:f6:0a:12:48:38:51:93:94:60:84:72:
47:fc:7f:65:d7:20:a6:01:af:4b:ad:24:62:b4:19:
89:18:7b:99:98:e5:36:ce:d2:b9:45:d2:f0:5f:f9:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:EE:B1:A1:3A:E6:98:AE:F9:F1:D8:C9:F0:CE:B3:F5:D1:E5:69
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:79:4b:f4:35:9a:92:f4:f2:4a:1e:0b:78:de:01:cb:2a:c2:
ca:88:eb:82:e2:15:01:4e:c3:ad:9e:49:6b:ec:27:5b:97:f2:
f4:4f:a2:14:a2:6f:e1:86:03:c1:65:74:e7:5f:2b:d8:e0:09:
df:01:c3:9b:a9:20:83:57:ac:b2:e7:c0:1b:e3:53:de:e5:a3:
f4:a1:e7:5a:82:ab:67:21:cd:db:87:43:69:57:11:af:5b:31:
5a:59:95:9f:57:d9:e9:19:35:b0:c5:8f:55:6e:24:86:d2:70:
09:f3:f7:83:b6:1c:57:8f:ec:54:f5:d2:46:49:72:c3:d8:f5:
e8:18:41:15:f3:eb:55:93:cb:96:28:26:17:ac:11:4f:d5:ac:
d7:94:a8:46:4d:b2:ac:f3:ad:7e:5f:20:a2:8a:86:21:5b:51:
c6:f3:d1:1b:6c:5c:ef:76:fa:d2:6a:e5:52:06:b0:33:ba:3d:
b2:68:61:5d:6c:53:75:e3:fd:82:b8:91:76:d3:da:95:35:3f:
1e:e1:02:ed:af:12:c7:0c:16:52:13:87:fa:44:d5:a6:e7:15:
9b:c9:f2:a0:16:84:23:9f:ff:ba:2a:e6:74:3c:c0:55:4c:68:
12:d5:4b:38:91:15:22:b7:9f:42:99:e5:42:ce:7c:fb:22:92:
a2:c8:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:11:26 2026 by rpki-client