
Error: rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File: DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier: R/NuyL8N8ck//fJDFaQ8/Obmc5ySgfb6J6wpcbbKkBQ=
Subject key identifier: 53:77:6C:0A:B6:83:3C:A6:B3:59:FF:9B:0E:CE:1A:3F:F3:D7:A7:38
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer: /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial: 0ACF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number: 0AB6
Signing time: Mon 21 Sep 2026 01:30:39 +0000
Manifest this update: Mon 21 Sep 2026 01:30:39 +0000
Manifest next update: Wed 23 Sep 2026 01:30:39 +0000
Files and hashes: 1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: UYDVmB+Ejt8/eE5usC8QdjVt26Q9hJqo6HWt+3ds60c=)
2: DE9ABBFE963D11F1B08864D6CE1D38B0.roa (hash: LmmF61WGi+c5tx7diHsUKoBkDLwT10AuaotpS4JIsnQ=)
3: 8CD08FF6963D11F1B152F6D3CE1D38B0.roa (hash: LjBqzY7fBybv856/VtVP+nEOO3AmKuFtPd1aUQ0N8HQ=)
4: 4AEF13BE963D11F193B912D2CE1D38B0.roa (hash: Bz08Ul12aPFmnFeKKATupuMupMgsuN47O/3D94SpZWE=)
5: 72BC5C90964111F185D9FBEACE1D38B0.roa (hash: Mxu0IHDBtQ0gMB1uc7mq59dmgNdwE/tx0wzZZlIE8+8=)
6: 32E00976963E11F1BA5349D8CE1D38B0.roa (hash: qsn/ZGUqSLM9gPu3EBVDp2FPQBJAHeUtYE5HvF7jt10=)
7: FA78C2A4963711F189AD42B3CE1D38B0.roa (hash: sqnMHuAuMvtV2NgF64lasqjlK/Azxonx9qZ8oNc6bXc=)
8: 395614AE964211F1BA6029EFCE1D38B0.roa (hash: QyuBb1INrn+/cQ2YciuIzau9AUi/xUasqlCunSIHwdA=)
9: A297428E963E11F1B85B87DACE1D38B0.roa (hash: rwz2mY6LmqgsS1AN3WQHj/GNPsl7soX1ygGDhkn5Bc8=)
10: 3C8D028C963711F191EB1CAFCE1D38B0.roa (hash: /csTm7NNdYNrJIGKEt25hO4hUKRB4n++erm3mKTTkw4=)
11: 4A3694E2963811F1BF267CB5CE1D38B0.roa (hash: rtVS5HOqdqtfYhUrlLaUxNjHLjakyUDG7lf4/fsJQn8=)
12: 173885C6963F11F1B4DE99DECE1D38B0.roa (hash: sljKKRTTajQPxDBI0X/jcTbwc1nGR6g6Fjk6QwtmvBU=)
13: 0B08958C964111F1AC8EC9E8CE1D38B0.roa (hash: ncjb02+UNksMyKo4Uj1M6fyigS9dLGoCVJI4SCyLtLo=)
14: 73CBFB96964011F1848080E6CE1D38B0.roa (hash: aYkoDEflzTDdM24OkR3wpR411xpSYWokIlV8nq/XCgc=)
15: 9A7B53D0963711F1B2A05DB1CE1D38B0.roa (hash: HmyAQJnkkRmlSFFgdyH41p3xz7nklLlBMiyaitvZ59Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 01:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Validity
Not Before: Sep 21 01:30:39 2026 GMT
Not After : Sep 23 01:30:39 2026 GMT
Subject: CN=6ab088bf-d4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:3b:68:56:c5:3a:9d:fc:1d:47:47:c2:6a:
12:c1:7a:b1:e8:fd:be:88:fb:ce:ef:a2:34:27:ef:
43:04:66:90:d9:53:74:e5:c1:50:44:30:07:f2:c8:
e4:4b:ca:d2:c8:42:7a:fe:3a:c3:25:0e:98:59:42:
17:71:99:40:41:70:e2:bb:c9:a6:ea:bc:2f:b1:4a:
d2:a1:92:6e:f2:fb:7d:10:b0:ee:3c:63:25:97:ba:
55:62:64:09:a0:19:21:d1:45:e6:02:55:5d:c5:6b:
7e:ea:cf:c5:e1:43:f2:89:b9:12:96:98:f1:2d:f6:
85:25:60:b7:5b:01:c8:53:82:2b:d0:b0:9e:c7:00:
6d:66:ee:1d:e9:d6:93:aa:8d:e1:20:ba:c5:cc:45:
0a:49:7d:2d:92:59:00:5b:e8:79:50:06:53:0f:0d:
99:db:88:74:db:3b:d9:86:a9:dc:5c:a6:a2:23:81:
1f:41:d0:4d:6a:6f:52:00:9c:10:70:0e:ff:9c:58:
e6:72:2b:63:86:4d:2e:5a:df:86:98:12:89:24:c0:
1a:2b:25:3f:15:eb:83:f5:23:7b:bb:d1:c5:e2:67:
9f:cb:ca:9b:90:c0:31:3d:4c:44:bb:77:c5:77:39:
b0:97:da:2e:9f:35:4a:97:fa:83:76:3d:27:af:a5:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:77:6C:0A:B6:83:3C:A6:B3:59:FF:9B:0E:CE:1A:3F:F3:D7:A7:38
X509v3 Authority Key Identifier:
keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ad:95:1a:64:e7:46:3f:bb:eb:a5:91:6e:c1:88:73:2a:5e:
df:9f:da:8a:83:56:00:e0:bc:07:ca:1c:a4:4a:7f:09:9c:db:
6c:c1:ad:b3:ea:35:e6:5a:85:35:fe:c9:7b:a2:d5:a2:d9:1a:
f7:14:57:79:43:07:5d:54:67:b7:d1:ed:91:1d:22:f7:74:f9:
b9:9e:49:90:ff:8e:d2:8b:35:d0:7d:f3:96:fc:6f:21:eb:0e:
b3:3c:eb:19:0c:1b:b0:f4:44:c9:cc:3b:83:71:67:b3:44:0b:
56:ef:24:f0:4d:2a:70:a9:54:5e:de:03:23:ae:bb:9e:dc:8d:
79:e8:9d:bf:fd:40:f0:ac:7c:18:3d:5c:e8:32:83:a3:4d:f4:
1e:fc:cb:c4:d3:bb:ff:d4:89:5b:42:c0:12:69:d2:8d:0c:76:
9c:d4:89:87:39:c5:0e:25:1c:04:35:2a:53:25:db:42:28:70:
81:fa:97:eb:d4:61:c8:1d:7c:1c:cf:9c:92:16:9b:91:a0:6e:
c8:a1:87:f8:75:13:8d:25:22:c0:fa:91:83:a8:18:0b:39:f7:
da:78:46:ac:20:b1:ab:93:77:c9:e7:81:72:e0:79:03:48:81:
41:4c:f6:cc:4c:08:f6:24:4d:7b:f5:29:04:84:cd:cb:29:97:
2f:2c:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:57:53 2026 by rpki-client