
Error: rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
File: llyMNbDxD46l29pUTykbbKkoO10.mft (raw, json)
Hash identifier: VJBb1dCAvbVaRUm+wJWWNaVLjyOpnHLF85M9h2H9Wzs=
Subject key identifier: C2:AA:E0:45:DA:66:83:D7:D1:96:71:3C:3E:55:C9:EA:60:74:01:EA
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0A19
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
Manifest number: 09F6
Signing time: Mon 28 Sep 2026 01:41:27 +0000
Manifest this update: Mon 28 Sep 2026 01:41:26 +0000
Manifest next update: Wed 30 Sep 2026 01:41:26 +0000
Files and hashes: 1: llyMNbDxD46l29pUTykbbKkoO10.crl (hash: sDv4nb5OlfbUrneyGgvmQEae7tKTbGcS8F76Zn+uV14=)
2: CD539CA4195F11F1A93F757FDAE4EC9C.roa (hash: 72eww79c1LhxX88JJHRLGmkQ6SgWbuwwLn91Yhwl3OM=)
3: 71049C4A4FFE11EFB49E615C762E951A.roa (hash: jbW+6AKtEoSOyZoaKGmM/zW6o3okDriAIOGo+daJIco=)
4: EE939480196111F1B93A308CDAE4EC9C.roa (hash: bk0vsHax/qp4UlIJSg2DL8tth/n6/mOBtDc39qKX8fs=)
5: 579583E2195F11F1B991657DDAE4EC9C.roa (hash: SF0hDp8Zk9dynSHbdMmIgYSWC7ijmylDn1pyd15RvQY=)
6: 47B929708A6A11F19AE386FCCE1D38B0.roa (hash: +PURW9h8fC6QCQjo5DYWqsOQMj1WuGyTtah+FIejrAc=)
7: 28C356B4196111F184DBF487DAE4EC9C.roa (hash: aSzuJgc4hXP1yI45B2SkSx8ZkUWaYTT+OBaaHmbOFSc=)
8: 21C1E2568A6B11F1AA1ECD02CF1D38B0.roa (hash: 3IW2hG4U1ExpcZubWiJJn8Gv7hZRkdjDAkFy5BeMkGs=)
9: 923C5AF2195F11F1A3BEA27DDAE4EC9C.roa (hash: XHVjQ0BnSbhqTQoC6M8bTABJ3YO/Bp0yh7KCDo0mYuo=)
10: CF1CD3564FFE11EFBC6B5560762E951A.roa (hash: rKE0aTq1xK/d7TP0Mi/oZzn9/eW8mKHviKpsNrNh4jQ=)
11: 363906AE8A6D11F1A73E2E0FCF1D38B0.roa (hash: HuoTVuH2wLkOrx2U374b3Tje/aCCSu66XS48cTDH4ro=)
12: 086691B6196011F1AA8AAF81DAE4EC9C.roa (hash: IM9+GWZbmnwdn08EHStSdHEHqEJhliwSrh+UsfiVB7M=)
13: F3312BC0196011F1BD761A86DAE4EC9C.roa (hash: ibkIYsf/GzzdmpJ0e4OsQNVAHYchdgJBYBy4m/psamQ=)
14: 670BE738196111F1A493168ADAE4EC9C.roa (hash: 89il+swCnx0o5ne+xSUMBKX+ebYKwDzvuxUzUv1wXZ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Sep 2026 00:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Sep 28 01:41:26 2026 GMT
Not After : Sep 30 01:41:26 2026 GMT
Subject: CN=6ab9c5c7-09f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:07:a9:89:66:a2:bb:84:b8:b5:ce:1f:c6:
3d:98:54:e5:77:74:a4:60:81:58:c9:10:7a:43:53:
4b:a1:9b:3f:c7:38:43:e1:2d:22:b7:a9:1f:e5:2a:
eb:9b:55:25:a2:02:3f:f8:68:8e:9e:34:8e:ab:9d:
0a:54:d2:93:2c:b1:fc:a1:72:f1:ad:ba:41:36:86:
41:e8:ed:ef:fe:78:13:50:e2:e7:1a:43:0e:4e:1f:
bd:a1:a0:ec:23:4a:e2:14:e3:62:e0:64:c0:56:4a:
3f:a4:49:16:a5:8d:c8:c4:9d:68:85:2a:35:d2:a0:
8e:ba:86:0d:8f:45:dd:6a:4f:d0:09:ca:f7:ad:70:
0c:e9:d5:58:3c:9f:04:a3:3f:c1:86:fc:53:73:13:
3d:f4:d8:78:e3:60:12:c5:ab:14:f2:65:47:45:d0:
45:39:cb:1b:06:bb:d4:14:2f:ac:c1:12:3f:ea:19:
3a:59:b0:ae:30:62:57:09:05:2e:ef:2c:b8:27:42:
71:5a:07:92:16:2d:ba:ad:b6:40:02:c7:2e:8b:52:
ec:11:f0:c2:8c:f1:28:12:60:19:a5:02:5b:01:51:
16:8f:80:53:9e:f4:1b:04:d5:9c:99:f8:66:fd:68:
bd:f5:4e:94:95:b0:20:7e:8c:bf:4e:5c:03:cb:b4:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AA:E0:45:DA:66:83:D7:D1:96:71:3C:3E:55:C9:EA:60:74:01:EA
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:3f:d3:8b:14:71:0d:47:ff:27:2e:2a:b9:ee:6e:d9:fb:
7e:9f:89:4e:57:a6:3c:8a:25:7a:4d:b1:69:bb:d4:c6:73:43:
e1:04:74:1b:3e:65:5a:7c:84:29:f0:49:60:48:6c:eb:49:99:
98:c3:25:ad:41:f4:f3:c5:ad:9d:5d:30:76:ec:2d:36:95:cb:
fc:c8:bd:8a:da:aa:f9:c1:6b:d1:59:52:45:20:1a:76:bd:eb:
e7:fe:64:66:29:a1:d2:3a:a9:05:d8:8a:9a:e8:fb:20:4d:86:
11:fe:e3:44:3f:f4:f8:0d:aa:5a:b0:a6:4c:1a:3b:75:27:b2:
83:fe:e6:84:07:e9:da:7d:1d:f6:d0:fc:f0:48:45:e7:a6:95:
81:d5:7a:b5:7f:6b:c8:cd:b6:52:0f:e5:08:59:75:cb:ad:2a:
67:2d:be:8e:dd:b9:5a:1e:c0:63:59:91:31:fe:75:75:61:04:
14:10:64:a7:d3:26:0a:0a:21:93:28:d2:a8:10:87:8d:69:47:
fa:28:e3:cf:38:b2:79:e3:47:5b:2a:08:8b:7c:b8:4d:37:18:
16:3c:d7:da:92:cb:fb:90:41:3c:61:90:bf:ce:2c:0f:0d:5d:
61:ad:d7:88:3a:26:b9:5f:ef:26:9c:a6:62:b1:67:26:e4:48:
c9:03:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:10:41 2026 by rpki-client