
Error: rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File: H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier: OErzCivF55vitdDgkQWqccMrFNEFXGpD93Z5Vp5XAt4=
Subject key identifier: 60:E1:64:45:AC:62:A6:42:D7:A6:E9:71:5C:21:A0:12:27:0F:6B:40
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 07F2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number: 07CF
Signing time: Tue 13 Oct 2026 02:16:30 +0000
Manifest this update: Tue 13 Oct 2026 02:16:29 +0000
Manifest next update: Thu 15 Oct 2026 02:16:29 +0000
Files and hashes: 1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: 0dJg1q5CZhnk763ZWy5yxc+NsmW4L3emuYnkXNf7uhY=)
2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
6: E858D85C904711F1B938F3ABCE1D38B0.roa (hash: zSnnvar1HyOLT/mehocTlFzWI1zmursKkh4a5Mn0HXc=)
7: 8AA47788900C11F1B81E89CDCE1D38B0.roa (hash: LEzQ2RGqCLWk0wM4+zIb2blrlaEGtRudqDRaXxxn4RE=)
8: D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa (hash: mi8Ptbn8iwhQRbwYylFtD3uAOG7kNqb26/g5AbK5ZUA=)
9: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
10: 2AC4622A904711F1A706B7A7CE1D38B0.roa (hash: p8cJ8n3plQE/oKT1XHeAU7Lr+3F3CdeuvX0Nn42EBzg=)
11: 2E629470C89111F09FB590CBDAE4EC9C.roa (hash: EFh5M3QCNjeimEXA/mXdWrIx1eozgW+kjskB/TPAG8g=)
12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
13: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
14: 343684CC8F0D11F19F57D0CACE1D38B0.roa (hash: huRD7jPyelwc8FHfby6zLL/psAgWGgFE/FU7PHIymFo=)
15: 0FBCEAAEDCB711F09DDEE8BBDAE4EC9C.roa (hash: EmQsAEGTM1w3mZK41HDnUozu8PJBPWVc7GCPvEYJ9Vg=)
16: 51F4E7CEC0BE11F08C39787ADAE4EC9C.roa (hash: 2W4J7B3ID8LDT8DfX7jRxG+YaxSbNbWFCc4sdyZIaUo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Oct 13 02:16:29 2026 GMT
Not After : Oct 15 02:16:29 2026 GMT
Subject: CN=6acd947e-055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:3d:59:25:08:70:b9:56:0a:0c:94:aa:e6:
e2:b0:fa:8c:e7:6e:09:04:12:93:0a:06:54:a5:a6:
6b:bf:02:f3:cf:e6:35:67:80:06:8f:26:e2:46:47:
1e:ac:06:eb:8d:6d:5c:53:83:0d:2a:23:94:44:92:
d2:72:7c:f1:47:2c:d8:28:19:a2:2c:3f:d6:9b:72:
0d:f3:2f:ea:90:90:d8:9e:04:85:01:f1:f0:c1:cb:
7f:56:c3:de:1d:04:0d:7c:e5:9b:73:6b:32:42:ae:
16:f2:0a:2c:2d:2b:f2:c5:fd:8c:43:45:c7:66:40:
3b:4e:e0:5c:7d:8b:97:0a:f3:84:dc:e5:8d:09:73:
6d:19:f1:fb:f2:23:e1:6f:4d:c4:de:25:28:f4:02:
21:0a:13:da:6e:cc:1a:a8:7e:8d:d4:25:4e:0e:3d:
b3:b9:b8:2e:19:ea:2f:ce:31:6c:08:7e:3d:cd:f4:
c9:e6:3e:c2:9e:49:9c:64:cc:50:fe:30:62:92:29:
45:f8:bd:18:af:0c:c2:98:77:f2:53:be:98:33:9c:
42:7e:80:99:bd:2e:8b:0b:a1:2c:ef:2a:06:60:41:
93:14:bf:54:9b:00:3a:60:8f:4d:44:97:ff:e7:8f:
68:a5:b0:30:d4:96:6d:7b:4d:b6:fb:2f:c9:28:9d:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:64:45:AC:62:A6:42:D7:A6:E9:71:5C:21:A0:12:27:0F:6B:40
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2b:15:cd:0d:cf:75:6e:79:fd:03:2f:a2:f4:3b:35:a3:68:
d0:c2:66:56:df:8b:6b:f9:4f:b7:6c:ee:15:05:d0:ed:76:da:
94:7b:4e:e9:17:4b:aa:91:83:38:6b:5f:5f:c6:54:25:f2:f0:
f1:5b:31:e4:13:39:b3:85:f3:f4:c7:9a:b0:42:e8:22:c3:9d:
bf:cb:a1:ee:eb:1b:d8:9a:a7:c3:c7:92:34:a3:d2:59:bc:9e:
a1:51:d8:97:e6:99:b9:3e:89:f7:6a:0b:9d:f0:3c:f8:07:71:
59:15:8f:e2:5a:17:c3:15:17:7e:b8:53:57:ba:92:ad:92:a8:
9f:90:2e:24:09:f9:90:d6:b8:84:0a:fa:6f:32:43:e7:fe:79:
ab:2c:8f:6d:28:d6:11:f1:71:be:60:8b:86:53:51:41:fd:09:
62:6b:4a:14:d7:2d:2e:65:9d:80:48:d5:f7:a6:20:42:8b:77:
c2:8c:e9:a4:a0:dd:e9:d1:d9:7d:b2:0c:9c:92:28:a6:94:8e:
e1:d2:e5:6f:0b:66:f6:9e:a7:95:ea:9f:9d:d8:fe:9f:dc:fb:
11:e5:a7:6a:b5:9e:4a:2f:95:ed:75:65:86:c0:24:75:c1:e5:
f6:32:ae:05:47:b3:6f:d6:47:59:24:5c:b4:2f:11:9d:41:e0:
1d:c1:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:01:58 2026 by rpki-client