
Error: rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
File: aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json)
Hash identifier: /zP7VUr/Z804pmtkeKYJnA7dkUBMIuZOb47KCTkohl4=
Subject key identifier: 79:8C:3F:A2:7F:8E:C7:B9:A0:B2:28:02:21:33:63:29:F8:E8:8D:B3
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Certificate issuer: /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial: 0A93
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
Manifest number: 0A7D
Signing time: Sat 10 Oct 2026 01:36:00 +0000
Manifest this update: Sat 10 Oct 2026 01:36:00 +0000
Manifest next update: Mon 12 Oct 2026 01:36:00 +0000
Files and hashes: 1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: LGb9UB6gOmorH3wcnBhr3PLTrHqIZLGSrRJOo1bPgPk=)
2: 1397539A963311F1A5208F14CF1D38B0.roa (hash: Gbi1goqcteUHX94qentDkP1O0M2WUDxVYrOT+NrVjjw=)
3: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=)
4: 85592F58963311F1B268D616CF1D38B0.roa (hash: Lk9JNobEcQHSRvY8pP8rMGRN1zf55/NF3Nzph9wLwIs=)
5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=)
6: FD29A9F4963311F1B706DB1ACF1D38B0.roa (hash: Z7GYp8epv0CEFILt1d/4UHNDuxGxepIuoxMbBAe1vOQ=)
7: 6BE894F8963511F1AF34D2A4CE1D38B0.roa (hash: anJyhoGPfEPmHSCk6Uj9kNHFO5xjL9ibh1PSnUDx+Rk=)
8: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=)
9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=)
10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=)
11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=)
12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=)
13: 8F0844CA963411F18267A01ECF1D38B0.roa (hash: nXi6wVCyaY1MaG1oBTjHxjTNa553jbzQFSran1dNAs4=)
14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=)
15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Validity
Not Before: Oct 10 01:36:00 2026 GMT
Not After : Oct 12 01:36:00 2026 GMT
Subject: CN=6ac99680-be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:b1:88:f3:3b:a6:c7:e2:03:ed:bd:bb:78:
fc:1d:ba:d8:b4:f5:7c:b0:33:d4:80:18:6f:38:3c:
61:85:22:29:81:3d:24:af:b3:f2:51:4a:4c:be:70:
d7:14:4b:02:ac:8f:0e:60:80:40:66:d8:34:b9:0a:
70:ba:79:ee:fa:ab:25:87:ba:37:6a:5f:e7:0a:16:
58:41:98:f7:2c:c2:f0:e3:00:ee:51:15:85:e0:f2:
ce:57:d7:8a:a5:cf:65:90:9e:89:43:dd:ac:3f:45:
a6:4c:76:b6:82:cc:b7:58:32:c2:14:eb:30:3e:91:
e1:5f:6e:46:5a:92:58:66:15:84:a0:2c:6a:01:4f:
73:aa:ad:ca:ae:dc:5b:3e:56:24:eb:3a:9a:70:ae:
d3:36:dc:47:98:5f:67:b8:06:67:dd:89:5d:c3:de:
a9:dd:72:65:d8:db:5c:11:45:ad:a8:37:3a:e9:de:
5d:fa:41:dc:55:e4:e1:50:79:c7:71:16:a3:d9:40:
0a:7b:a6:58:7c:6f:da:39:a2:b9:79:9b:b9:46:1f:
10:a2:03:08:7d:14:6d:b8:f0:07:87:1e:bc:79:a9:
f3:c2:1f:29:2e:57:d3:47:77:97:31:ea:cc:7b:a4:
05:01:fe:99:60:a2:74:32:47:5f:6e:10:90:b6:86:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:3F:A2:7F:8E:C7:B9:A0:B2:28:02:21:33:63:29:F8:E8:8D:B3
X509v3 Authority Key Identifier:
keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:58:a3:83:37:c3:4b:44:ea:62:63:b9:29:05:65:16:c9:
08:9f:26:e8:d3:41:67:0e:05:5e:d0:23:b5:41:8d:d6:73:e4:
4f:65:e6:62:58:cf:9c:57:58:d6:97:90:23:33:44:24:b3:59:
10:10:4a:68:ee:df:55:cc:34:ec:10:c3:0d:d8:20:bc:08:e0:
ac:a9:76:c1:b6:6d:c6:5c:99:18:13:ac:4e:7e:3d:da:38:0d:
73:1b:7d:24:27:7e:0f:7a:7a:5d:58:de:42:1c:aa:e3:fe:f5:
2a:36:ca:c3:92:9b:31:d4:58:39:60:3f:89:40:02:00:df:a4:
55:91:3e:d5:8b:7a:cc:59:94:a9:ea:8d:40:81:d0:db:20:f2:
21:76:66:aa:5b:50:38:61:b5:df:a9:eb:df:fe:0e:42:d9:79:
cd:10:e2:8a:1b:3e:79:ed:59:45:53:92:c0:19:36:9e:d0:3a:
64:d6:57:4a:b9:03:0f:70:7e:bb:d3:f6:90:c2:de:64:6f:85:
c2:15:df:a0:f8:54:23:58:66:31:59:4f:cc:b2:7a:4e:0f:3b:
fa:5c:b9:3f:39:7f:1e:37:18:66:51:85:36:53:a3:d3:5b:2b:
f1:3b:9e:f3:b4:47:e3:04:11:3f:e2:2e:cc:62:6b:36:a6:8f:
75:e7:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:09 2026 by rpki-client