
Error: rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File: T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier: XtROdf8AObsjDB7znd1OVucDjwiEaaPYlUPpJQAOojw=
Subject key identifier: DA:E1:43:1D:74:0B:5A:96:70:D5:7B:66:CB:AC:2F:69:08:7B:78:02
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 03D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number: 03BF
Signing time: Tue 22 Sep 2026 04:05:07 +0000
Manifest this update: Tue 22 Sep 2026 04:05:06 +0000
Manifest next update: Thu 24 Sep 2026 04:05:06 +0000
Files and hashes: 1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: xLWuNSHUw7vyNYvAwvwHnEfKhhb7P9BVdP8MDVnXMMQ=)
2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
11: 156898525F5911F1BE0CD5B2CE1D38B0.roa (hash: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=)
12: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
14: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Sep 22 04:05:06 2026 GMT
Not After : Sep 24 04:05:06 2026 GMT
Subject: CN=6ab1fe73-8103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:fd:66:ca:98:18:20:13:75:15:bc:d1:e3:
16:02:65:da:05:27:fd:c9:4b:a7:9a:51:75:05:75:
4f:1b:29:0a:87:46:2d:6e:5a:e0:c5:e0:87:c8:db:
fc:96:63:5f:5b:24:80:36:f9:ff:5f:4a:d4:fd:b5:
74:91:27:46:1d:3c:51:c7:67:95:80:de:fa:35:40:
d8:d2:e4:e2:58:32:4e:ac:4e:84:d7:e2:dc:c2:ac:
20:77:10:34:14:6f:2c:7f:77:a5:6e:00:61:49:d5:
39:22:c2:4c:bd:97:5d:a0:ac:fd:a3:83:a7:06:bf:
52:00:74:93:93:64:2c:a7:63:da:f5:4b:61:fb:32:
4b:2a:64:28:5f:55:7c:4c:68:35:bc:0b:84:9b:ab:
a8:8c:04:6d:97:f7:96:12:d5:9a:bc:05:1c:2d:55:
7f:bf:f5:69:bc:1f:79:f3:1e:5c:24:4d:11:68:97:
62:52:04:01:12:64:b9:84:c6:7d:81:aa:52:f6:c3:
c5:60:75:c2:9e:ab:c0:96:ae:ea:d7:95:c9:47:68:
40:9c:64:c1:35:06:79:ea:af:08:23:6f:bd:5b:92:
d4:4b:cc:08:74:d3:38:99:32:8a:e5:c7:a3:90:0f:
03:06:16:9c:a8:d1:62:a2:99:cc:b0:6b:68:35:5a:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E1:43:1D:74:0B:5A:96:70:D5:7B:66:CB:AC:2F:69:08:7B:78:02
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e1:30:d1:65:c5:cc:0b:a0:13:1b:1f:f1:53:b8:d7:37:d5:
d2:5d:d8:26:42:1d:82:bb:9c:25:79:60:27:05:02:9a:0a:84:
49:97:c5:9f:14:63:98:e7:82:a0:09:a9:a7:70:81:27:32:90:
a3:3b:69:5a:f5:b2:25:23:5b:c1:68:b1:38:67:a2:84:49:fe:
65:cd:e5:53:84:59:6d:e8:6e:e9:87:fc:a7:db:21:cc:7c:98:
d9:f4:df:b6:a3:e3:4f:dd:a4:58:b1:0a:6a:24:3f:b4:93:b6:
8b:62:2d:35:60:94:12:d9:79:b4:ed:12:d6:8e:a1:7f:8d:b5:
9c:3c:b6:66:b0:e0:61:74:9a:6f:26:24:36:9c:26:a8:84:5f:
90:a2:4c:24:96:0f:36:b6:0f:11:32:e6:f6:c7:dd:d1:da:60:
81:07:05:0e:0c:5a:ba:78:55:9c:47:70:f2:73:fa:7b:20:86:
75:a0:50:74:55:80:6f:0d:78:52:98:40:aa:ea:a1:99:77:9d:
47:31:62:71:c3:53:78:79:8a:4f:43:1a:f5:0d:6a:28:8b:b1:
7d:ec:da:39:c6:5a:4c:85:cb:69:88:43:39:17:e2:74:ac:bf:
ed:50:58:42:3b:4a:e5:e8:40:e8:7d:d9:30:ad:4f:7e:09:50:
66:c7:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:23:50 2026 by rpki-client