
Error: rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft (raw, json)
Hash identifier: bD7w030YiVmHwnHMR8HtKrgFEyi9quKXoUh5/OPIgY0=
Subject key identifier: 2A:02:FB:3F:86:19:65:A3:3A:C1:4F:78:81:DF:80:83:FD:42:B8:EE
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 0569
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
Manifest number: 0556
Signing time: Sat 10 Oct 2026 03:20:00 +0000
Manifest this update: Sat 10 Oct 2026 03:20:00 +0000
Manifest next update: Mon 12 Oct 2026 03:20:00 +0000
Files and hashes: 1: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl (hash: Ca2qtZGymjKPK4cSsjPSgyTjVfdbo5Pp+QuvWID94ZM=)
2: 82219ECEA8E511F097F863D3DAE4EC9C.roa (hash: bcPInogd3xIR0s3sTN2It6IQWCB3KAgCeLuGiSvLwas=)
3: FEDC02C25C0711F0B890E9F0DAE4EC9C.roa (hash: qe7/Ho3hjXx1p+1X+gIsJxiQFYRX/3+okpR+BwibaKg=)
4: E3C267F25E4F11F0940EFC9BDAE4EC9C.roa (hash: /diZHt8dfDU8ymyLaJDOGusaWBebTUtvPjH5WbW4syU=)
5: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (hash: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=)
6: 99141D08576111F080D583A2DAE4EC9C.roa (hash: cQTA6aPVu1R9IwPCQ/9eGLXpsOsSHn6GFJCWQdw5Yp0=)
7: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (hash: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=)
8: A8DB4ACE60DD11F0914539B9DAE4EC9C.roa (hash: Si/TX7Gk5wKi7Q8cmheHqqKR3iXrshzEj+Q8MY2UZ+M=)
9: 072D1082576311F088413DABDAE4EC9C.roa (hash: kdbBEJRsB56bxxE6rksSixZh/DLbv8XJMoYIBLPc8/g=)
10: A3FEFCB0577A11F0A98CD3C1DAE4EC9C.roa (hash: qgOiHPxC/Z9pgaIJ8OipsoRNTQGJykYjhiWofc3it3c=)
11: EA8394FEA84011F0A123C6ADDAE4EC9C.roa (hash: BlN6ZCd0jXJwuiZMNu47rtCr+FOtsw3oe++3RgGL1q4=)
12: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (hash: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=)
13: FE51ED62582911F0BD53CEBBDAE4EC9C.roa (hash: KhWFDo0vWu06AyFmvRpE1g14Vu+Rmq4RukcLEVcErN4=)
14: D69EE072B2FB11F0B7B245B7DAE4EC9C.roa (hash: qpCOGOVOdGPaWFwLUvwVE5eduGEP3cZDJGPFiGA53VI=)
15: BC741E48575B11F09D18457FDAE4EC9C.roa (hash: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Oct 10 03:20:00 2026 GMT
Not After : Oct 12 03:20:00 2026 GMT
Subject: CN=6ac9aee0-d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:98:4b:49:89:9a:21:ac:bf:e4:47:ab:d0:
e7:3e:95:57:a2:b8:a9:96:1e:8d:81:c2:b1:d9:56:
0e:bd:47:56:d0:83:44:8e:36:a1:14:35:e3:07:b7:
3e:4c:42:f3:6b:f3:fe:84:74:7c:9e:88:e0:94:08:
6b:80:fa:fc:bf:e4:d0:82:fd:9d:d9:1a:db:c2:33:
01:c3:4d:8d:ca:2c:f1:fe:95:5e:0e:76:47:a8:c1:
84:de:07:83:76:b1:62:55:8f:e9:39:84:09:2d:32:
d1:19:fd:3e:ce:14:06:07:45:91:da:24:6a:36:6e:
f1:f4:9d:ba:05:54:44:bd:ea:99:0b:c3:90:60:6b:
a5:52:ef:d0:7f:01:09:5d:12:2b:16:39:9e:95:1b:
92:43:79:32:f7:d1:ce:fd:25:c6:9d:f3:3a:1b:23:
01:a6:41:fb:61:11:02:c9:09:46:7b:1d:4d:7c:30:
e7:e5:7e:43:de:2e:36:94:ed:1a:5c:17:37:b4:72:
6c:6f:47:58:23:4d:9e:4f:a9:43:0c:70:89:f1:ca:
19:45:3e:a9:32:c0:a1:8d:b8:9e:25:0e:72:3c:6e:
1f:99:45:8c:77:9b:9b:19:46:d2:89:3d:19:23:33:
a0:14:da:9b:7a:fe:13:95:9c:57:14:7e:c8:bc:cc:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:FB:3F:86:19:65:A3:3A:C1:4F:78:81:DF:80:83:FD:42:B8:EE
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:68:b9:4c:d5:25:e0:b2:49:23:72:7f:38:13:cf:02:a8:ed:
de:54:d5:7e:f1:86:76:8b:13:2b:42:2e:7c:92:21:14:0c:de:
c8:37:5b:ee:51:b8:59:e0:0a:c1:1a:68:8e:f0:9c:b2:33:01:
50:c7:e5:db:97:de:35:18:12:27:8e:69:a3:70:35:66:2a:f9:
35:17:cb:ab:71:70:c2:e6:05:07:9c:93:3b:80:82:ca:5e:f5:
73:b7:0b:07:49:3b:31:67:ed:6b:e5:8f:96:8f:e4:1c:6f:58:
5f:85:34:7e:40:c6:8a:18:f7:88:a1:f5:f9:82:f6:c7:7d:a5:
2d:73:db:c7:e1:c8:3e:12:f5:6c:4e:f8:ca:04:f5:10:c2:f0:
3b:73:b2:54:2e:4d:bf:f6:a4:4b:6c:12:f6:b9:d3:e8:e6:a1:
60:49:d6:06:9f:e7:64:71:85:a2:2c:8f:d2:cc:53:a2:b3:97:
42:cb:09:fa:b6:a0:51:ed:af:08:39:c9:13:9e:e5:d4:33:03:
07:70:2e:e7:2d:0d:4e:42:9d:1b:ff:77:b8:9b:97:6d:3d:f8:
27:bb:e7:58:54:cf:7f:af:11:91:21:6c:43:95:7f:e7:1e:f9:
e5:6c:54:9b:a1:46:05:3e:dc:7e:de:b7:23:67:b7:05:97:2f:
28:73:aa:3b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yNjEwMTAwMzIwMDBaFw0yNjEwMTIwMzIwMDBaMBgxFjAU
BgNVBAMTDTZhYzlhZWUwLWQ4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs5ZhLSYmaIay/5Eer0Oc+lVeiuKmWHo2BwrHZVg69R1bQg0SONqEUNeMH
tz5MQvNr8/6EdHyeiOCUCGuA+vy/5NCC/Z3ZGtvCMwHDTY3KLPH+lV4OdkeowYTe
B4N2sWJVj+k5hAktMtEZ/T7OFAYHRZHaJGo2bvH0nboFVES96pkLw5Bga6VS79B/
AQldEisWOZ6VG5JDeTL30c79Jcad8zobIwGmQfthEQLJCUZ7HU18MOflfkPeLjaU
7RpcFze0cmxvR1gjTZ5PqUMMcInxyhlFPqkywKGNuJ4lDnI8bh+ZRYx3m5sZRtKJ
PRkjM6AU2pt6/hOVnFcUfsi8zP5XAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUKgL7
P4YZZaM6wU94gd+Ag/1CuO4wHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTU5MUMvNjcyMzU3RDRDMjQ3MTFFRDk1OTc5MEEwRjEyMjI0
NjgvM1A2amhIY2kwdjdIb0RucGtEajNVNEpaMERFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgaLlM1SXgskkjcn84E88CqO3eVNV+8YZ2
ixMrQi58kiEUDN7IN1vuUbhZ4ArBGmiO8JyyMwFQx+Xbl941GBInjmmjcDVmKvk1
F8urcXDC5gUHnJM7gILKXvVztwsHSTsxZ+1r5Y+Wj+Qcb1hfhTR+QMaKGPeIofX5
gvbHfaUtc9vH4cg+EvVsTvjKBPUQwvA7c7JULk2/9qRLbBL2udPo5qFgSdYGn+dk
cYWiLI/SzFOis5dCywn6tqBR7a8IOckTnuXUMwMHcC7nLQ1OQp0b/3e4m5dtPfgn
u+dYVM9/rxGRIWxDlX/nHvnlbFSboUYFPtx+3rcjZ7cFly8oc6o7
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:20:06 2026 by rpki-client