
Error: rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File: kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier: Y9+Z7aSUwfvjeTrWN0fyJOhOfcaUCwwgFu+/eO+13CU=
Subject key identifier: 1F:A0:CC:54:E8:4C:EF:56:AD:BB:AE:CE:1E:79:D0:82:06:27:4D:13
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: 013D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number: 0132
Signing time: Wed 23 Sep 2026 05:18:18 +0000
Manifest this update: Wed 23 Sep 2026 05:18:17 +0000
Manifest next update: Fri 25 Sep 2026 05:18:17 +0000
Files and hashes: 1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: oGDckNbdfwpZ5EUYhq56XhQo+DmgfOUN5JdAmFSk9PI=)
2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 05:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Sep 23 05:18:17 2026 GMT
Not After : Sep 25 05:18:17 2026 GMT
Subject: CN=6ab36119-e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:d2:7b:fe:49:64:8f:d5:0f:91:9d:3a:63:
f8:7f:d0:8b:2a:2f:12:6d:16:aa:f1:91:23:a6:8b:
65:d4:51:38:e8:f1:8c:67:e1:a7:0c:21:70:3f:71:
5a:99:fe:92:e4:05:6e:e7:be:10:13:c9:9b:fa:55:
eb:c7:27:1a:08:69:f5:2c:83:df:11:e2:4c:a4:d0:
fb:29:08:c3:02:09:18:3a:49:ab:65:1c:37:be:aa:
15:0a:d4:84:d6:49:a0:67:a9:2e:a3:a4:ec:c8:8a:
f3:80:75:a6:28:d7:db:91:50:b3:9f:82:f4:22:74:
cf:99:b5:9a:bc:30:c6:9f:78:ac:28:90:e0:d1:4a:
e7:30:15:03:2d:69:5a:fa:13:a7:94:7c:a1:cf:6c:
27:d9:6d:bc:63:c2:8f:fc:45:cb:4b:66:3b:a7:90:
cf:79:98:38:44:e3:93:a7:a5:36:ca:09:a5:7f:ee:
fc:94:99:85:8c:8f:4b:aa:a9:77:28:41:0c:24:57:
82:dc:e1:d8:0f:5e:ad:4e:f4:32:ab:37:9e:fd:42:
cb:89:90:72:8d:6d:2a:d4:af:88:cd:c8:74:67:14:
a5:fd:e2:d0:f4:39:e5:95:49:da:6c:e9:f1:bf:66:
83:62:7a:bd:4a:ef:3c:4f:37:19:71:9b:7a:20:2e:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:CC:54:E8:4C:EF:56:AD:BB:AE:CE:1E:79:D0:82:06:27:4D:13
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:6a:41:03:00:42:c7:27:45:ae:46:1c:24:09:3e:b5:be:24:
aa:7d:9e:94:c2:04:e4:1b:36:35:8d:05:6a:7f:e8:2a:d3:1b:
ff:ed:a5:72:95:27:82:03:23:a2:87:56:6c:14:b6:c1:56:1e:
ed:e0:4a:0a:e9:d2:61:8b:11:83:bc:05:ea:a6:70:64:55:e8:
e0:0a:8d:14:07:ce:07:e4:c7:53:2f:8c:07:7b:9c:0c:d7:d9:
69:d7:3e:b1:d4:be:c1:70:07:2b:80:d5:5e:c8:0c:57:0a:5c:
79:e7:75:41:f8:c6:8b:09:46:56:c2:1e:2b:dd:79:57:97:76:
7a:38:b8:7f:db:a5:a0:ec:d9:dd:0f:c2:c8:0f:72:af:19:a3:
b3:d3:8e:e0:73:da:d5:c5:21:8c:e0:5b:83:3b:f4:dc:4f:33:
82:2f:f4:6c:6d:e8:af:99:e2:7d:e6:37:2c:88:92:c1:32:26:
e2:1f:eb:cf:84:87:b1:06:85:d4:d1:f6:e3:2b:80:bb:f5:12:
3b:3e:a9:36:cd:9b:ef:48:16:a4:f5:5f:30:f4:f8:27:5f:28:
d1:7e:0e:57:90:64:43:7a:0b:2d:7d:a7:64:30:55:16:6b:c4:
29:05:c7:15:be:60:8e:cc:53:3b:b5:1c:d0:55:28:23:11:90:
3b:7f:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:37 2026 by rpki-client