
Error: rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json)
Hash identifier: sYztQOdDWYqdE/8b5NeV0Dj5JK+C02TgXPxQd5xyqdo=
Subject key identifier: B4:A4:66:0C:57:6C:75:C8:45:8B:63:F3:28:E9:D0:CC:7E:6D:C6:82
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 09C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
Manifest number: 09B0
Signing time: Mon 28 Sep 2026 01:43:05 +0000
Manifest this update: Mon 28 Sep 2026 01:43:04 +0000
Manifest next update: Wed 30 Sep 2026 01:43:04 +0000
Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: 9LgbIh/hHmWpVfWF2B+Zl/+uOs6Q+LN6AIjzl/zhZWQ=)
2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=)
3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=)
4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=)
5: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=)
6: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=)
7: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=)
8: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=)
9: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=)
10: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=)
11: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=)
12: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=)
13: 7209CACE8DA611F19808DFBFCE1D38B0.roa (hash: TiQ0DTo83UHcuXxj5lRgHJU9J7T+GuSv6q0DBMkC+Xk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: Sep 28 01:43:04 2026 GMT
Not After : Sep 30 01:43:04 2026 GMT
Subject: CN=6ab9c628-3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:8a:de:78:37:ac:c3:0d:9b:bf:11:9e:c3:
19:0b:15:0e:b0:d7:a8:09:39:56:1b:f6:da:5a:9e:
0f:dc:26:f3:55:35:36:37:63:0b:f3:af:5b:03:86:
2c:d5:33:0c:f0:22:f4:78:9a:7f:24:35:d7:9b:f7:
71:ac:9f:1c:0c:1a:0d:43:a3:64:a5:8d:ff:38:de:
f1:c6:20:5b:0d:d9:56:83:4e:35:6b:25:90:36:28:
18:4a:5a:7d:5d:17:34:45:5e:84:ce:b0:2b:39:f8:
f0:8a:45:50:4f:98:b2:e8:fa:7e:65:f5:c1:30:c0:
14:95:66:49:bb:b3:dc:f7:69:e3:bf:b7:a6:3c:5f:
48:2a:bf:23:84:54:36:1c:65:69:0e:40:cc:90:86:
60:e9:4c:a2:36:21:17:3d:9b:a3:99:ee:8c:2e:09:
1b:81:23:f3:5e:ef:c1:f5:e5:4a:9f:ac:40:7f:8d:
2f:58:3e:0f:4a:7a:7f:e1:fb:a6:26:3f:3e:9e:50:
a0:29:a0:ba:39:c9:59:f6:95:3b:14:ac:14:ce:07:
b8:45:0f:44:c9:f7:81:05:e8:a3:0c:f4:6c:d6:25:
d2:53:12:35:f4:46:ee:1d:ad:3e:c3:db:fd:ec:84:
ae:dd:8b:d3:13:0e:33:62:12:48:6d:22:0b:a7:e9:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:66:0C:57:6C:75:C8:45:8B:63:F3:28:E9:D0:CC:7E:6D:C6:82
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:32:28:ca:99:56:07:e8:e3:bc:43:d2:3b:42:8d:b5:af:4f:
05:fb:48:95:b3:f0:4e:4a:a1:60:d9:b4:7d:db:d7:64:65:84:
56:9e:93:7e:49:11:1f:9d:7e:61:80:db:bd:df:e9:3d:a3:ff:
01:ac:7c:1a:8d:3d:e5:db:bc:14:f4:a6:ee:6b:8c:8d:8c:c0:
93:fd:69:70:24:f8:27:bf:85:2d:92:fd:67:bd:ae:9e:29:67:
51:83:d0:eb:c8:d4:7e:56:15:3f:5c:c2:f0:bb:3d:b1:ff:9a:
bd:b9:49:b2:bf:c9:7b:aa:bb:fb:14:4c:74:05:15:1b:d7:64:
15:d7:ac:0c:94:e6:a3:ac:cc:78:88:d7:62:34:bb:86:c5:66:
38:fc:96:24:6c:ac:25:05:9d:9f:bc:24:14:06:58:83:6f:51:
d1:26:be:67:e4:31:2f:39:1c:00:0a:6d:dd:99:8f:98:0f:7d:
30:01:b7:1d:31:81:ee:69:a5:8e:7c:c1:c6:8a:f1:f0:14:ec:
36:52:e3:e9:31:9c:85:35:1e:6a:e0:08:ec:b6:f6:9f:88:c1:
d4:11:b3:63:df:01:d3:e8:97:7f:90:19:19:be:71:fc:a9:c5:
b1:d9:ee:43:a8:0b:06:f2:07:90:68:ce:a6:61:6e:75:f3:e5:
a5:14:d1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:16:22 2026 by rpki-client