
Error: rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File: qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier: +9YpZnm6hkyl49UYfKVAjn/LSkDL1e0tuqssIN8akQ0=
Subject key identifier: 0C:E9:CD:03:98:43:4B:89:C3:61:D5:02:91:40:5D:10:98:FA:CD:9D
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer: /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial: 04D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number: 04C0
Signing time: Thu 15 Oct 2026 03:38:02 +0000
Manifest this update: Thu 15 Oct 2026 03:38:01 +0000
Manifest next update: Sat 17 Oct 2026 03:38:01 +0000
Files and hashes: 1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: zrj/dWzut/WCQzuNjTBdJ1Iz5Ra/qwFyS4VW+Ll/3bo=)
2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 Oct 2026 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Validity
Not Before: Oct 15 03:38:01 2026 GMT
Not After : Oct 17 03:38:01 2026 GMT
Subject: CN=6ad04a9a-3f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:6b:a7:4b:d5:b4:cf:0e:8f:b8:6e:4b:44:
dd:9c:70:de:50:d5:63:f8:e3:b1:b6:6a:38:ac:a2:
5b:71:03:1e:6f:f4:a5:f3:c6:58:40:62:98:48:06:
48:32:59:28:a0:30:52:f7:08:a0:f0:a2:18:0d:d1:
4d:15:ba:db:2e:df:93:75:7f:4b:26:7e:13:ea:a6:
f8:86:3e:a9:65:7a:fb:1b:72:f3:fa:d0:5b:4b:b5:
8c:c9:1e:5a:36:d1:d6:34:80:22:d8:a2:a7:cb:a9:
96:f0:10:6a:1e:29:c3:75:b8:6c:f5:8a:5a:0c:16:
98:8d:dc:27:75:b4:97:e5:7d:46:f5:33:76:d7:3a:
fe:b4:55:8b:ce:7e:92:0e:c9:41:1b:99:00:d3:81:
59:b9:e3:9a:fc:ee:1b:a0:c5:3a:1b:2f:5d:a4:b7:
da:3a:0b:c6:3f:8c:94:0e:66:ac:86:5a:92:ad:f3:
b8:1a:ac:65:96:c9:83:6b:85:a4:10:db:7b:ba:5c:
1b:19:23:cc:7d:3d:a4:70:02:c2:2f:77:a1:3d:87:
f9:cf:45:25:a4:23:32:35:67:0b:dd:26:c9:b5:73:
de:91:86:fa:99:dd:15:14:2b:53:bb:a3:41:74:37:
b4:7a:21:7f:d4:d9:62:fa:66:6e:d5:38:6a:58:d7:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:CD:03:98:43:4B:89:C3:61:D5:02:91:40:5D:10:98:FA:CD:9D
X509v3 Authority Key Identifier:
keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:43:f4:cd:41:f6:3a:74:09:d7:f4:c1:bf:92:ea:b4:91:
d2:ac:f7:c8:82:cb:1e:14:58:0d:07:85:ee:25:b5:23:84:7d:
a3:6d:74:af:2d:46:42:63:fb:56:c0:45:10:34:f4:97:78:0a:
e0:f8:db:61:43:e7:e6:3f:f5:b6:50:59:44:5e:24:71:4c:99:
b4:60:71:ab:e4:1f:52:6d:37:1a:8b:62:b2:59:97:16:80:b0:
8a:98:0f:98:88:26:2c:75:8f:26:5a:db:a4:4a:71:63:60:d5:
26:73:3c:6f:87:2e:e8:c0:a7:da:be:8b:2a:d1:e8:b8:6c:f9:
6a:a1:b3:a6:69:fc:2b:b4:1b:05:59:12:6b:99:4b:ea:0b:83:
fb:de:4d:e4:8d:ff:36:ea:98:77:98:6c:bb:e8:33:d2:cf:70:
63:65:f4:7b:06:a0:c9:53:45:04:4e:90:e3:58:a9:49:23:38:
3c:33:19:2b:48:8e:35:6e:f2:37:1d:00:b8:a6:90:dc:48:66:
6d:d2:1a:04:ea:f6:8e:8b:d2:8f:28:b0:87:c5:fe:41:cf:0a:
96:c9:55:c4:aa:90:8b:8f:b5:11:52:bd:60:00:fc:1f:7e:92:
c2:9a:6b:67:93:7d:83:e7:09:f1:47:02:ac:90:0e:8c:5a:eb:
85:2b:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:13:33 2026 by rpki-client