
Error: rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File: P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier: XWBBxlryOopH4G0qhcL2IbKeaDJPbF0/fUisQkZ4hdg=
Subject key identifier: CC:F7:0B:B1:30:E5:08:73:E6:68:B8:CE:83:A2:45:27:58:2B:BB:45
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 0541
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number: 050D
Signing time: Tue 22 Sep 2026 03:31:48 +0000
Manifest this update: Tue 22 Sep 2026 03:31:47 +0000
Manifest next update: Thu 24 Sep 2026 03:31:47 +0000
Files and hashes: 1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: qkcamSySADMDsQc4xtT/jPmeISVeBpb8gJkzHdcRhF4=)
2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
6: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
10: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
11: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
12: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
22: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
24: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
25: C41EE034846D11F1B0082AE7CE1D38B0.roa (hash: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=)
26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Sep 22 03:31:47 2026 GMT
Not After : Sep 24 03:31:47 2026 GMT
Subject: CN=6ab1f6a4-665b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:b8:3c:ef:83:27:2c:e1:e7:6c:5c:ca:49:
13:b8:b5:27:f2:9e:37:80:02:dd:be:44:35:1b:13:
1a:30:49:87:3f:30:2a:0c:a7:fe:c5:7f:ac:10:1d:
c2:65:e4:df:7a:11:b8:98:0f:d3:4b:f6:43:52:8e:
32:db:e9:91:c8:c2:73:02:46:d4:95:f2:65:ec:b7:
17:cc:0b:98:ca:3e:e6:4e:a0:6f:7d:a1:51:55:24:
d6:8b:26:0a:a7:dd:22:a6:9f:3f:2d:68:7a:6b:53:
18:93:de:1d:f6:4b:41:ca:10:37:26:8d:57:ae:4f:
dc:c0:51:12:4c:a7:bd:32:0f:ba:4d:12:61:fe:fa:
61:07:1b:e8:3a:25:b7:10:71:49:0a:30:0f:45:f0:
f6:04:a1:53:79:b1:78:4a:a5:e4:f3:73:d9:4f:8e:
c2:97:06:59:df:6c:73:58:6a:7b:48:c0:34:46:96:
7c:bf:8b:7b:94:33:44:91:01:01:1e:45:f0:4d:5d:
79:f8:48:3d:93:f1:2f:35:7c:eb:1a:07:e0:3f:82:
44:af:87:96:5a:02:0f:00:c4:c3:38:5f:36:fe:78:
7e:d9:aa:b6:86:08:84:29:2e:b2:ac:69:0a:2d:e7:
34:d6:19:38:ce:22:ee:1d:f9:49:ac:3e:4b:9d:47:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:0B:B1:30:E5:08:73:E6:68:B8:CE:83:A2:45:27:58:2B:BB:45
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:69:5a:5e:79:93:f9:4d:7f:db:0b:c6:18:1a:cd:a2:0c:
34:bb:05:1e:19:dd:22:44:c5:8c:0f:3a:e3:41:89:09:4d:28:
66:c0:43:3c:d1:3a:a2:1d:4d:5e:a1:7e:55:b2:2c:7a:d2:2d:
fe:63:47:6d:e5:2a:04:1d:77:9e:7d:eb:c9:49:ad:c7:3c:4e:
98:21:6a:f4:d0:c6:04:24:01:83:c0:15:e0:a3:cc:36:2e:e3:
a3:cf:c8:98:54:7d:31:97:87:4f:e9:e3:ac:f1:f5:d9:f5:e4:
12:54:c8:19:74:0b:76:a3:64:c9:b5:a9:e7:68:29:6c:2e:ac:
3e:e3:16:eb:d3:14:a4:7f:49:a0:4a:bb:c1:8c:6f:ba:bb:e7:
16:59:92:95:c3:4b:9a:6c:5c:da:83:99:e9:12:6d:33:99:72:
cc:3a:ab:f5:5b:31:ee:a8:ac:92:f0:4a:03:ce:af:34:57:3c:
84:32:23:0c:cd:1c:c9:d5:e0:8e:f2:3f:99:7e:a9:68:fd:80:
4b:03:e2:4e:07:a5:45:0c:07:91:55:66:30:6d:fc:c3:53:70:
2b:90:b3:37:9b:ee:2b:fd:35:72:3d:73:dd:ff:c0:47:b5:cb:
6e:00:d7:bb:22:6c:5f:1e:6e:95:d7:c9:6c:f9:38:0e:88:c6:
c1:66:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:17 2026 by rpki-client