
Error: rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File: SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier: qYDkVQKm9pQfDAgIMR1SW0h+3UziGCnLV0XfvfPAw20=
Subject key identifier: EB:23:2E:E9:09:BC:6D:AB:04:CC:CE:E5:E5:31:E4:08:D9:F4:6F:21
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 055E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number: 0548
Signing time: Thu 08 Oct 2026 03:20:12 +0000
Manifest this update: Thu 08 Oct 2026 03:20:11 +0000
Manifest next update: Sat 10 Oct 2026 03:20:11 +0000
Files and hashes: 1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: uzUOUTf6JdEyrHwdj3Wgh3DZk9WaYf9NSbeq6ttwEBE=)
2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
3: 7D97AFC0552311F18C4E5A19CF1D38B0.roa (hash: HPUJELzm6QYKUxc7EThIZngZppM/cTN5/ffnqB4Ryv4=)
4: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
5: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
6: 3090B8681EC611F1BB0A92BDDAE4EC9C.roa (hash: HnTfIVu9muq+g847NRBmW0pVK2J4iJgCN/MFxOihXGI=)
7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
8: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
9: 557D1FE81EC311F1A8C107ABDAE4EC9C.roa (hash: 6E/4b3jG5+WBAhKMmUMbiYpLspky+skYf9xDIZrtcIA=)
10: 840D0A8C1EC111F1A3925CA1DAE4EC9C.roa (hash: FFwjG289Rtmc3S8JKRbxfJUbpIIY+o+EMq5pX7s2ODo=)
11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
13: C1012DD81EC611F18633B7BFDAE4EC9C.roa (hash: AEjIQDoJkuCV2zdXj8TYSJzuJbyASHlYynXe4LN5vrk=)
14: F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa (hash: wNGAjIUP8OIxnYbE9SkgsQ9UkCWPS1lv4jOwO2xoulg=)
15: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
16: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1374 (0x55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Oct 8 03:20:11 2026 GMT
Not After : Oct 10 03:20:11 2026 GMT
Subject: CN=6ac70bec-1391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:2b:db:01:15:c5:1a:7f:f9:7f:28:4c:e6:
28:9f:b4:5e:a7:d9:e1:b4:92:b8:86:c3:3c:e2:af:
e4:f7:d3:06:70:8a:19:b8:64:5c:36:60:e5:7e:e2:
e2:e9:a7:64:47:5b:6e:13:c8:68:a1:d0:68:bb:f5:
f6:12:69:b9:10:6a:e6:4d:50:74:8c:a4:e8:dd:31:
35:8f:8d:ba:8d:a2:5e:19:f6:e5:9a:43:27:1e:10:
ec:24:f0:d1:c8:a4:0f:5c:e5:c5:85:e1:c4:77:01:
30:21:53:85:2e:1f:17:f2:80:32:a6:d4:b0:05:45:
4a:a8:8e:28:a4:d1:e0:b7:5f:01:18:25:b6:4c:73:
01:f7:27:85:b5:eb:06:81:d3:7c:05:d2:bb:3a:c1:
5a:dc:f1:82:45:ef:96:2f:ca:9a:bd:2d:3d:6c:38:
61:fe:bd:f5:ea:89:33:a1:4b:64:4b:c7:da:83:70:
c7:38:91:2b:42:c3:a8:69:af:bc:79:9f:7b:72:e0:
24:c3:62:53:f6:58:b6:05:ea:97:c6:a3:92:90:7a:
b7:e2:dc:3f:13:4a:a4:84:38:89:4a:2e:82:99:45:
1f:57:ef:0c:f1:85:c6:0a:8f:04:65:38:1f:f6:90:
2d:78:01:0e:5e:07:4a:a6:f5:ec:20:c8:9f:25:66:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:2E:E9:09:BC:6D:AB:04:CC:CE:E5:E5:31:E4:08:D9:F4:6F:21
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f7:df:cc:91:11:e9:73:5e:0d:c1:b8:42:d1:ac:78:b0:e1:
33:34:5a:d0:88:30:ec:3d:70:96:a5:c9:3e:51:20:00:3c:4f:
0e:69:2c:c1:37:46:6f:10:90:79:df:b3:79:24:3d:0e:b1:6c:
e1:15:64:95:a3:8b:40:5a:48:db:23:8e:94:53:52:58:c3:b6:
78:16:78:a1:52:42:96:a3:10:a5:ec:8f:e3:d2:af:f5:ea:40:
66:1f:82:2a:13:f9:83:ea:90:49:30:fc:d0:59:12:6b:6e:0d:
3f:16:84:da:93:12:d8:56:17:7a:6d:83:5c:87:2d:95:16:59:
a0:14:ce:28:e1:ad:a8:2f:af:ec:1d:5e:ae:46:d1:47:eb:ef:
3a:11:84:d9:0b:ff:21:dd:9a:16:e6:6c:63:26:95:53:ae:97:
d9:e8:bc:b2:d3:f4:a3:3a:53:4a:f7:bb:79:e1:c5:72:8b:18:
db:0a:0b:1f:61:e9:12:9c:8a:c8:e0:22:aa:31:af:75:5a:e2:
d0:77:ef:5f:a0:0b:db:45:c4:94:6c:51:bc:2a:af:c4:18:4d:
4a:dd:02:00:22:5e:98:52:ea:d7:30:7c:0a:1b:5a:90:7a:77:
79:05:2a:11:9a:3c:c1:5d:7e:8d:1a:32:89:a5:bf:ac:ee:9b:
57:c8:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:51:47 2026 by rpki-client