
Error: rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
File: WpihEwK6HEmqvGDVAst1DFmRB8M.mft (raw, json)
Hash identifier: ZF7cfkHnQStkiBUml9Tx0tYFoewIRAag5HXxzzyHNAs=
Subject key identifier: C9:43:91:BB:09:82:F0:08:1C:5A:B6:38:19:3C:A7:0C:8E:F4:07:FF
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 068A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
Manifest number: 0672
Signing time: Wed 23 Sep 2026 02:46:06 +0000
Manifest this update: Wed 23 Sep 2026 02:46:05 +0000
Manifest next update: Fri 25 Sep 2026 02:46:05 +0000
Files and hashes: 1: WpihEwK6HEmqvGDVAst1DFmRB8M.crl (hash: mEG1oE1cwZ4wsKcstBaG/PNbJss08k0D4/wrLmK8e1Q=)
2: 7D22477A8A8511F1A99EB9A2CE1D38B0.roa (hash: ZbW6dhsJ+JcM68l7CncdThQ0Y6a4BW/oPDMIrWsfNYg=)
3: B416D1808A8811F19276B6B5CE1D38B0.roa (hash: JqKNVi9sDF1Z+WHUQyqHM6n1mTv2PxK9bP8CLP/bWwk=)
4: 88C66DCE8A8811F1BF25A0B5CE1D38B0.roa (hash: 96MKY1wJO/ICMedmLmNPvybRZlM1IF+zskjNS4Rtcww=)
5: D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa (hash: gIg3T2F/mwJCGEuy84LwGKs/3oucbWWtsGagWAxJIUY=)
6: ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa (hash: dQe5lRR7iao+0bCygYFKDltIR9cZUc4q0UgQnVeBYqQ=)
7: F6F325F28A8911F1A00931BECE1D38B0.roa (hash: QOywer1maX7JFzM7VXF+eYTxPwTpFNOhN7NdrlCiO6U=)
8: 811A91A88A8911F19C1109BACE1D38B0.roa (hash: +yh89vy2fW/3hE8Sge1pTUKlI0uDEepcLMMEQ2oFtBs=)
9: 2519D8328A8911F1AD7DCDB9CE1D38B0.roa (hash: 8sQ3yTWm9ppQfsnveXYgDm7NMabPIZo2cwXeQRYMKOc=)
10: 56517DE68A8511F1A425C9A0CE1D38B0.roa (hash: x4/A0cOgEYz9UndmhI0YJkTiRJBKIEjyt8dqU/caCzI=)
11: F72372568A8511F19EE831A5CE1D38B0.roa (hash: Sj2GyCXVEGFZVUcPAApgFeaomJhf8dPrNUJd6K7oshI=)
12: 14D24A3A8A8A11F1810E49BECE1D38B0.roa (hash: 8ecNmNwPrHhtMp6pToYlrrAanzmGNuIqFDd82GDZ8l4=)
13: 96B3A2488A8411F1930A171BCF1D38B0.roa (hash: 9vh192EXAyU2s2NhCiFjEOTyBt89+8e3W3X3Xn0uFFY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Sep 2026 02:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Sep 23 02:46:05 2026 GMT
Not After : Sep 25 02:46:05 2026 GMT
Subject: CN=6ab33d6e-f659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:5b:de:78:3f:05:77:f2:0f:5c:d0:05:1c:
9e:7c:40:68:72:72:07:36:86:35:d4:62:db:2c:1b:
1d:0a:3f:8e:0f:45:f1:ea:0e:be:c1:d2:41:46:08:
8e:69:e5:fd:b7:5e:c1:ae:a2:61:00:f4:19:f3:1a:
da:ad:13:c0:73:51:bd:d9:2d:a6:10:35:a0:41:4c:
cf:4c:9f:cc:d9:14:8e:bd:31:e9:48:6c:bc:8b:16:
9b:82:25:1e:bb:cb:9f:d0:08:f8:b8:05:9d:e0:62:
0d:88:f2:b6:04:f0:08:ea:23:5b:2d:3c:8f:3d:cf:
4a:8c:28:e1:f1:04:f7:d7:cf:35:32:3c:97:f2:da:
fc:3f:90:7a:51:42:6f:82:c7:75:60:fc:83:c4:94:
4b:27:57:f8:6a:3a:0a:b9:8c:a9:c3:4a:ed:0e:cc:
ae:f9:86:6a:66:f8:6a:21:f5:b6:d4:1e:0d:06:32:
9f:e1:58:25:78:b0:21:de:e1:f4:4a:ba:9e:ea:15:
0b:21:82:3b:a2:66:33:3a:68:b5:d2:db:21:a3:cd:
f1:7d:64:c8:b9:ef:3a:03:33:6c:05:90:63:9a:17:
73:5b:dc:df:12:d6:4b:c3:03:97:02:92:8c:b2:7c:
f8:59:53:12:39:47:73:b9:a1:52:90:ec:81:3d:13:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:91:BB:09:82:F0:08:1C:5A:B6:38:19:3C:A7:0C:8E:F4:07:FF
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:21:e6:ba:88:9e:66:52:b6:50:06:a7:59:12:29:56:4b:9f:
b7:a7:03:64:af:91:59:56:b8:a8:d2:01:93:96:90:82:dd:53:
8d:ef:1a:76:7a:a9:31:a8:01:55:34:05:68:40:3c:e7:d6:e1:
8a:e8:81:c0:62:b8:f0:84:db:65:e3:54:2f:df:f8:ae:be:4d:
c8:be:88:28:60:89:ed:cb:8f:16:cf:c1:79:59:69:e5:9a:d4:
38:14:fd:93:21:dc:f5:54:2b:2d:7b:39:c5:9b:60:c2:dd:f1:
40:94:fd:d9:b1:d5:be:21:c7:c4:e7:0c:bd:e9:0f:50:c9:0f:
cc:34:6a:3f:97:f9:d5:1d:70:b3:f8:76:58:0a:f2:73:77:aa:
b6:27:1c:57:06:7a:81:3b:cc:1a:11:98:8c:04:42:b6:6b:a8:
7a:dd:54:40:b3:8c:e7:18:54:0e:a6:59:67:18:14:f9:67:40:
51:f0:9d:02:b7:02:8e:0c:c2:08:a8:6b:19:5f:25:c0:c2:85:
bb:1d:ad:01:5b:4b:97:7b:87:9a:14:63:e0:fa:81:35:09:12:
6e:44:fa:f6:74:99:7d:65:35:7c:7a:2f:33:8d:d9:40:e0:5a:
a2:4b:ad:3c:78:73:b8:58:e9:d3:39:a2:6c:31:be:69:cf:bf:
77:ba:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:35:12 2026 by rpki-client