
Error: rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
File: rF31MEgJu3g-uWISaVigB4bo9nw.mft (raw, json)
Hash identifier: 6mgJA+Z+s8WaGSOwSl+aFnitcN3q5DgIi/94N6zcQlk=
Subject key identifier: 38:F5:83:2E:32:8A:55:F4:C8:94:61:ED:0E:D8:DC:C8:F0:9B:9F:91
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Certificate issuer: /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial: 24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
Manifest number: 19
Signing time: Mon 21 Sep 2026 05:53:09 +0000
Manifest this update: Mon 21 Sep 2026 05:53:08 +0000
Manifest next update: Wed 23 Sep 2026 05:53:08 +0000
Files and hashes: 1: rF31MEgJu3g-uWISaVigB4bo9nw.crl (hash: FNHRkAMcmSOuZ0/Kqw7u3ZzaZ3moCGSYDaveEx1hZl4=)
2: ABD8841AAC0B11F1A45AF6B5CE1D38B0.roa (hash: BdpOc8nXLX9m1U4j6tswz1zCcKWWiptJGewjkWTPIQ0=)
3: A54B6980AC2611F1A91C47D8CE1D38B0.roa (hash: YnX1ovFA/H7yWq5H7yWiVocIUHXSg1/RMNpBweFETtE=)
4: 5AB25916AC1111F195B323DACE1D38B0.roa (hash: +9/jrIbSnE0/2tZF25LOF3ZMEm0UfdRvKf7Wywlyq2g=)
5: E6B34480AC1011F19995DAD5CE1D38B0.roa (hash: llUZzNIWBE4VynEvGF/9Vn7at2bNc1NMrrPXH8KLCoc=)
6: 14CBD4A0AC1511F19A089AEFCE1D38B0.roa (hash: GYErmGR106Td4QoxYkQ5xHxtzrmeHMJ9oUXXpYLNIxk=)
7: 862EF5E4AC3511F19B4EADB1CE1D38B0.roa (hash: SLwUfV27DOpRvDI8RDcb61xEG0xmsMdYPIuES/cOYaQ=)
8: 3185A8CEAC2811F18C8A20E2CE1D38B0.roa (hash: 3tSLh3O+ZBTWpTXs5okXzr+CbPzAXi1uZEmLl9ZmRak=)
9: 02BDACE2AC0C11F18CCB55B6CE1D38B0.roa (hash: ZJxQZhAPpyjE5Cpr5EhF2ZIhWdEWEvyDGLHqbKq4xh4=)
10: DE0EBBA8AB8D11F1878A51B6CE1D38B0.roa (hash: 6ygjfOj8WF0GYnRtchSy4wsmifdU0dx2ofDUK8Jw/q8=)
11: 9F808EA0AC1111F19AD8B1DACE1D38B0.roa (hash: bZGnR4XDOjfzW6mAG8midsORjwq8CK4KJW9R5kCZnwI=)
12: DE2EF662ABA011F19AF8B4A5CE1D38B0.roa (hash: AJt7vIDOyMxhIXoi/drQ0C3lLoTcGlgNcHMGniY8aTg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 05:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Validity
Not Before: Sep 21 05:53:08 2026 GMT
Not After : Sep 23 05:53:08 2026 GMT
Subject: CN=6ab0c644-a4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:16:a9:63:7b:75:5d:f7:89:aa:22:36:97:
bd:8b:13:ec:d4:5a:bc:91:cd:f1:c4:2c:e4:df:98:
ac:92:30:d0:d8:bb:ef:8b:d4:32:b9:10:98:0c:d9:
f0:6e:dc:3c:2c:f9:b0:2b:a6:ce:70:59:9d:24:f3:
e7:a7:61:25:e1:3f:d7:9a:df:c2:e3:03:31:59:64:
f5:12:48:31:4f:cb:b5:da:a5:a4:ea:34:09:e1:65:
b4:53:c6:f6:bb:fc:af:55:e8:f6:64:9b:7b:ab:21:
e0:7c:99:96:0d:1c:70:86:7a:82:7d:c9:9a:6d:1d:
80:f5:9c:e3:8b:f6:5b:c6:52:4d:1b:49:ef:25:3e:
32:cc:38:45:5f:30:f4:ed:fe:8a:78:82:8b:18:44:
d6:f5:63:d8:97:86:48:74:02:0f:0a:6a:3f:66:f3:
03:14:8f:6c:7e:23:24:5b:37:1f:01:03:89:16:21:
00:1a:3e:5f:b1:6b:47:f7:6e:a8:09:01:c0:ab:57:
cf:12:64:10:53:8b:4d:22:f0:49:1e:ef:22:1c:1c:
0b:dc:3e:7c:ef:17:09:b0:76:f1:4e:35:e1:2f:e9:
44:48:ac:0d:b3:ba:52:a6:2c:68:e9:53:2e:d5:0b:
66:18:f0:e9:5e:e3:94:60:e7:47:41:bb:00:e9:63:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:83:2E:32:8A:55:F4:C8:94:61:ED:0E:D8:DC:C8:F0:9B:9F:91
X509v3 Authority Key Identifier:
keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:91:72:39:12:da:c1:a3:cf:10:59:c8:34:d1:2b:98:ef:dd:
e3:f2:d4:b3:f7:b5:29:17:69:25:13:e5:16:a2:98:d0:16:47:
83:7d:30:17:86:ac:cb:a7:ef:2c:b8:35:1a:4c:cf:87:ef:5e:
82:de:39:4b:77:b0:e7:13:1d:99:a1:86:77:ac:dc:f3:63:45:
84:df:56:58:f3:82:f4:6b:35:57:05:2f:1d:f6:e7:b2:17:90:
e2:88:fa:be:4b:3d:30:43:7e:07:0d:e5:3f:6c:bd:29:b8:b2:
00:d6:14:87:52:59:a9:2f:d9:a3:f8:ef:9b:ac:a3:2f:8c:92:
62:1a:d1:a9:37:44:8f:71:75:67:ff:29:d9:dc:9c:0e:48:a7:
dd:11:f1:5e:9e:df:43:0d:dc:ef:03:03:55:88:c1:26:a6:1f:
be:42:a9:08:96:d4:87:bd:30:90:35:bd:63:16:60:3a:ea:b2:
b6:67:8e:53:b6:cd:5e:bb:25:ed:77:04:fe:ac:52:5f:c3:55:
4e:57:31:a1:ff:10:08:b9:fc:19:8c:c4:09:f2:cf:97:a1:9a:
b6:2d:84:04:dd:ce:4f:f0:34:a7:05:64:a0:3d:b0:62:eb:44:
71:cc:b1:31:39:09:a4:5a:53:18:3e:e6:f9:86:9a:10:5c:f7:
11:1d:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:07:14 2026 by rpki-client