
Error: rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
File: 47B7udCVd0n_5Ix-cyWp4RtBark.mft (raw, json)
Hash identifier: ULYYCOK5GoWDhXe/jC2ZkB/bWV2r5YrDXY+Wch7SUqE=
Subject key identifier: 8C:13:47:0F:7F:49:9D:56:CD:97:33:71:1D:3C:A8:0D:56:C6:94:27
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 05CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
Manifest number: 05B9
Signing time: Sun 04 Oct 2026 03:05:34 +0000
Manifest this update: Sun 04 Oct 2026 03:05:34 +0000
Manifest next update: Tue 06 Oct 2026 03:05:34 +0000
Files and hashes: 1: 47B7udCVd0n_5Ix-cyWp4RtBark.crl (hash: GEVRNpQV/m9jdVO4HbN1KDhysjVKLgbFx3N9wu7W2DM=)
2: 3DB6256EF80C11EFBCDFA247762E951A.roa (hash: 1MJQsEu3MtkwAZkp/UQ3hGrxa4qXYrkMkXdBA/w9NYE=)
3: 8DD1E8A28D8011F1872795DECE1D38B0.roa (hash: AuG7o8U9JTA7hBUkkkhtnhH4htjoCHWQPqg12mvfVJM=)
4: D8BF08468D7F11F1BF6671DACE1D38B0.roa (hash: ZOfn2W3js3WfcuCV4Hm+XVb7XYhXh9TvM9OxM56E5d4=)
5: A9B39EA48D7F11F198E60BDACE1D38B0.roa (hash: GexUwewXFwIgcK2EC7XmhRa1RpB4eqf6pDb3pMOsQNg=)
6: 539E5CC2F81411EFBDDFCB7C762E951A.roa (hash: ATiggh+vNVuMqXawpwCemlyRXEd1oK0f4La6CW2y5Xw=)
7: FF60F386F81311EFA12B167C762E951A.roa (hash: E6AA/MQ35BNobVmf7gM/3zri44Qh8PJyk5Jml651Nx8=)
8: 4DD725E4F80F11EF86D22A5C762E951A.roa (hash: /ugyz6PR8i04hr2ae3kp6xDqUB/TUr9B+hb22NVvtNo=)
9: D8FBD076F81311EF989FC47B762E951A.roa (hash: 5ZM7FZdyHJ3h1kABK4Wd0X2vl/nK0g1+cnj1dsOe5qI=)
10: 63D1057E8D8011F1844C38DECE1D38B0.roa (hash: FdYgjyY4n2W5SNqldyqQPTcqZ1ZUm54sdDLKKYWmvDk=)
11: 1CCE2C1EF81311EFB753FE76762E951A.roa (hash: s6VENZXD1xBLDNkwrezGHkWnpkVaPcwUtHMwOrh8cVE=)
12: 0B2BDC008D8011F187AF7DDACE1D38B0.roa (hash: hvVvqgd3J6HugAOQ2xZMf4rYH2ZaGbqj41jpcp8CqDs=)
13: 366F83268D8011F1830198DACE1D38B0.roa (hash: d+4Imc72ML8FNafY13Sy87POx3jwfWKVT0mYE8Pd+Vs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 03:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1483 (0x5cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Oct 4 03:05:34 2026 GMT
Not After : Oct 6 03:05:34 2026 GMT
Subject: CN=6ac1c27e-3e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:aa:ef:08:9f:d2:59:10:3d:5a:ff:b8:8f:
e8:e6:5a:d7:c7:43:55:da:f5:42:be:24:35:ca:b0:
78:05:23:b1:0f:d1:57:cf:d5:bd:0a:62:de:e4:ec:
5f:ab:0f:28:88:56:24:bb:10:0a:74:3a:9d:eb:ab:
d1:7d:fb:de:2d:c6:02:ee:18:8f:07:c2:d0:17:bc:
cf:c0:3d:1d:10:84:58:59:49:f3:4d:4d:1c:1e:f4:
79:44:e2:99:c4:e1:2f:52:3f:ee:9a:c7:e7:8b:a1:
e9:42:9b:08:14:3f:f9:87:63:47:80:b2:97:13:4e:
85:4f:a3:e6:ee:60:05:e6:b9:18:16:5c:c2:29:1f:
79:e5:32:f2:bb:09:a0:1c:05:12:6e:bf:8d:e0:3b:
ff:43:a2:b4:7a:0e:e4:4a:9b:f8:39:f2:58:25:7f:
a4:a5:e9:3e:9b:df:6e:3e:8b:80:a7:70:f3:6c:00:
6e:a3:e8:59:cb:93:83:42:96:ea:65:fa:8f:91:d0:
fb:78:81:5a:cb:82:49:b6:62:e3:0b:39:f3:74:d7:
2c:46:4c:1e:75:24:99:fe:27:38:25:0d:21:a2:71:
f6:16:0b:99:5c:e2:66:c5:65:8d:63:b6:a2:c5:6e:
84:35:5b:f6:2b:12:27:d6:60:52:f7:3f:6f:e5:22:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:47:0F:7F:49:9D:56:CD:97:33:71:1D:3C:A8:0D:56:C6:94:27
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:6b:44:05:e4:b9:46:f2:b4:58:2d:68:8d:2e:60:03:a3:
d5:72:11:fa:bb:2d:63:20:8c:21:99:32:8e:04:77:c3:f1:af:
38:8d:77:64:f1:83:5a:43:7a:f5:3d:b1:c4:30:2d:c7:fb:03:
d7:ba:cf:7d:f9:8d:00:90:4a:b8:cf:85:99:1d:88:22:82:96:
c4:42:81:f3:3a:f9:54:cc:f9:63:1c:d2:1c:a3:c2:86:20:5a:
e2:da:d8:6a:ee:67:24:fb:b6:5f:c7:a4:93:1b:7f:e9:30:04:
bc:d9:d1:a4:8f:00:e0:1c:b0:db:33:4f:82:ea:cd:4a:13:72:
5c:3d:b2:1e:a2:e5:da:24:bb:f0:ab:6e:69:8f:f4:de:e7:6b:
d3:c6:8d:88:c5:c3:9f:68:52:9a:22:43:8c:a2:8d:10:e7:bd:
ec:46:fa:9c:8a:ea:67:c3:b9:5d:1d:1a:d2:82:f3:f1:f1:da:
04:1c:bc:f5:19:41:a8:a7:b9:c3:60:c5:f5:89:43:81:20:e0:
9b:83:93:b5:ff:d3:fa:e8:58:ea:1b:1c:38:62:c1:14:94:9f:
85:90:f5:fb:94:6e:b9:40:f6:e6:f5:72:be:28:b2:4c:d6:f2:
c8:b3:24:0d:36:7e:bd:53:6f:45:76:4b:2f:61:3e:d5:c5:e0:
ea:e1:4f:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0MwMzVBRjExMC8GA1UEBRMoRTNCMDdCQjlEMDk1Nzc0OUZGRTQ4QzdFNzMyNUE5
RTExQjQxNkFCOTAeFw0yNjEwMDQwMzA1MzRaFw0yNjEwMDYwMzA1MzRaMBgxFjAU
BgNVBAMTDTZhYzFjMjdlLTNlNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCti6rvCJ/SWRA9Wv+4j+jmWtfHQ1Xa9UK+JDXKsHgFI7EP0VfP1b0KYt7k
7F+rDyiIViS7EAp0Op3rq9F9+94txgLuGI8HwtAXvM/APR0QhFhZSfNNTRwe9HlE
4pnE4S9SP+6ax+eLoelCmwgUP/mHY0eAspcTToVPo+buYAXmuRgWXMIpH3nlMvK7
CaAcBRJuv43gO/9DorR6DuRKm/g58lglf6Sl6T6b324+i4CncPNsAG6j6FnLk4NC
lupl+o+R0Pt4gVrLgkm2YuMLOfN01yxGTB51JJn+JzglDSGicfYWC5lc4mbFZY1j
tqLFboQ1W/YrEifWYFL3P2/lIqk5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjBNH
D39JnVbNlzNxHTyoDVbGlCcwHwYDVR0jBBgwFoAU47B7udCVd0n/5Ix+cyWp4RtB
arkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNDMDM1LzcxRjY5OTY4NzE1ODExRUQ4QjE5MzM5RkYxMjIyNDY4LzQ3Qjd1
ZENWZDBuXzVJeC1jeVdwNFJ0QmFyay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzQ3Qjd1ZENWZDBuXzVJeC1jeVdwNFJ0QmFyay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0MwMzUvNzFGNjk5Njg3MTU4MTFFRDhCMTkzMzlGRjEy
MjI0NjgvNDdCN3VkQ1ZkMG5fNUl4LWN5V3A0UnRCYXJrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2HmtEBeS5RvK0WC1ojS5gA6PVchH6
uy1jIIwhmTKOBHfD8a84jXdk8YNaQ3r1PbHEMC3H+wPXus99+Y0AkEq4z4WZHYgi
gpbEQoHzOvlUzPljHNIco8KGIFri2thq7mck+7Zfx6STG3/pMAS82dGkjwDgHLDb
M0+C6s1KE3JcPbIeouXaJLvwq25pj/Te52vTxo2IxcOfaFKaIkOMoo0Q573sRvqc
iupnw7ldHRrSgvPx8doEHLz1GUGop7nDYMX1iUOBIOCbg5O1/9P66FjqGxw4YsEU
lJ+FkPX7lG65QPbm9XK+KLJM1vLIsyQNNn69U29FdksvYT7VxeDq4U8F
-----END CERTIFICATE-----
Generated at Mon Oct 5 00:58:52 2026 by rpki-client