
Error: rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier: 2Zkh6M886L+GoJl/PUWrVJCmHGkB0e7JjbzC8k3mhbA=
Subject key identifier: 7D:48:62:FB:AB:CB:B4:85:12:1D:2D:41:5F:6E:7F:BB:EA:5E:DA:84
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 121C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number: 1143
Signing time: Mon 21 Sep 2026 00:45:34 +0000
Manifest this update: Mon 21 Sep 2026 00:45:31 +0000
Manifest next update: Wed 23 Sep 2026 00:45:31 +0000
Files and hashes: 1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: 2/QIVGLOTm99ZqrvSxcp+bZ4OqgAQ9da0NF+wOaH4as=)
2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7P3OQMXmFsOa8WIMclWcCqGJQ7rr260vhG2nME8veoM=)
3: wDt4YuRBsALhCei7e6wo-u2Xl08.cer (hash: fJBiv8O0wZh6CtZ9/+QS/zyF54vwRtZW6gmFtWifhNA=)
4: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: K04OvzkAolzFq1fT1oiHvi+Mj+v62+EgJUQSVJaFvcM=)
5: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: BZnl11DNpWh5PGLZaaoh4nJoG83nXFKoRkTHjhyWgz4=)
6: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: aSidkzKJveb6i/hBK3iEqraQvUvcPExhwR8JmQ3u8Gs=)
7: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (hash: AfzL1WxSfoLeqoguZfbCpKb9Vic4c/fcP8fXCLcEQQ0=)
8: eW3qOGfLk4c-eX8UKo65xUiMl4A.cer (hash: mqEsTRKJt26AntvB6W5YNW2DnKeV27rd9z+f53GIxo0=)
9: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: V4+FuUEoCZJ6/ClJ+fuUe/iGrC1jBuQuQZHU+7fX8Q0=)
10: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: 7Yf2WnE0MSTH4H3Yv7yD9zrBsRwXsRyyy+8kRrCpH14=)
11: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=)
12: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: Vk6/QhwBtzjIFouUR5GpkXr9wLsJbmz7egRFfNs4fwU=)
13: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: 1f9QrB5GLNacvyX7ryc+rmCF6Rqqj5DBunkE238OAWs=)
14: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=)
15: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: gIOVAzJrB5GBBiknNN57bD8vKs+P+elCD7kOXrr9P7s=)
16: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: ESonQPm1BZCZHT8AmAPn4aB2WMWF4HVW9G/XjdItdL0=)
17: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0=)
18: 00oZ5jEGlkvQLLLYrRgH35prGQE.cer (hash: LKblwX6VPkqX+5B56CEh+E8d26+ROD/d77JKqICYltw=)
19: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: PiWeHC/tbHAm1fE1JWWzKnAwyAo5srtkm1xwcPPCIpA=)
20: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: IrSo9ZLwerj9+uDqOJHKXiYYIV/k0fHU25wPuauz04U=)
21: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 3DtWEKfWel4Ugy9StOMR1yLEPzZCWovefGWBtkcq17E=)
22: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: P1aSzAVDH5tUU9whtzq2lgECjXLQtpROj+qfdFLtGSY=)
23: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: O4IWRrDhqem9+Acu1pAthLUbgTcOC666MpFUC9ANW8k=)
24: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: RjzQhisIV4IZBDv1UUEp/AN146ndNgiP56kIgNc3obM=)
25: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: QBSq1jgFtVJGdhSF3kq8whg65OLr34x7xuXUJhj45n0=)
26: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: hzZBQC0rhVWEHJyovZhr6R4fT883Z/vVYRS/Cu/GUoE=)
27: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: 22IzvwF0ubOVwj7dDZXh+HuKNTWvJ+hh/Ol4mnaHd+g=)
28: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: a1WXPpH5gOhL3PAp6EzAsA/GCV1/LGE+Yg+s5Pl3/yE=)
29: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: DZr1zEYmsmNuEWAIAxR5GzgoUKVNwtM9sbdrMLou0xk=)
30: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: xpydeokQoxNzDVYCyCJS3vRj2ntfmkb6bVOY0XBoBcE=)
31: CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer (hash: YaTTmJfB5qkSFWL9ZYPB5h0TBO5OKdFOj/WIdmLXlIw=)
32: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: 78cXdx8qWdgwku4h6ARLYUeWMxb0UtRpJquZFI9BgCc=)
33: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: nkYQLFEms18aXVHheCfHd/hM6smDyW/5caP1l97myOw=)
34: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: WGAjmXTfCgdokK98XyWtkGwWIlDjE34bEfqdPnKFXNM=)
35: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: UNQ9r+ulyKJMsUSDxRq58fXfkcC8uAzkEQnsJKshYVc=)
36: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: ODPsy/iImVniqak/Pgduwz/zaZKctT401Fyabu3//kE=)
37: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: Q5EknewVPEVZwmglFeD965Bt2h8UU65GklGFGcZ/Alo=)
38: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: 9YlJmkUieHtPlYbBVLn2IEVg1vkosZNLAoAs1YdVgt8=)
39: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: 48HpkA2xVe1po/4zte4zm57TDXGBkFxyvNFS1bmsdbY=)
40: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: WXJbwAZTsEUuaDDDhQ0zysFJXc71VbV+Hx+e9SqnC9Y=)
41: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: 7jk8mJ3rCoxrRFhDFkx2XtYZWHW9cChZc7Me/I5u8+g=)
42: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (hash: 58jHcj/BEAmJsCs+pzCNIv2iJNAegjttXvaY6UAxVFc=)
43: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: IqULL+lG1Z5qhAnwhTtSEmsoGbxU4pT2kMU3GoeUntc=)
44: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: mwUHFb8IaRLlcLhhn/YB6d0ugbt/JKazY6dGaopzai0=)
45: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: Typpk6tXaearLSR7AFkBBrayaSDOI/ZgTs2Fo/8103k=)
46: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: aqPqCmyv7jwaNDhMTitwanekt3dmItYEuK1j6O4NCUU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4636 (0x121c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Sep 21 00:45:31 2026 GMT
Not After : Sep 23 00:45:31 2026 GMT
Subject: CN=6ab07e2c-06e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:49:28:ba:7e:05:50:9a:8b:24:2b:83:c9:
0f:83:bf:c9:d4:bf:fd:9c:67:83:b6:1e:05:13:c6:
c4:06:60:a6:e6:5a:ae:49:e3:09:4f:43:1f:11:7b:
bc:27:96:af:cf:51:b8:b2:b8:27:26:25:17:13:c0:
62:1f:58:34:e4:af:67:a9:ce:8d:ce:9e:f0:0d:d6:
d6:57:14:f8:e4:40:ec:49:6c:25:fa:af:93:ef:2e:
16:c6:86:ed:c9:80:ce:7f:2f:0e:84:3b:30:ff:64:
09:f8:f9:88:f5:af:3a:12:c0:b7:cd:2c:34:e5:f7:
87:90:c0:02:7c:85:63:67:fe:27:d2:ae:fc:1b:05:
9a:1e:b6:b6:b4:f5:dd:f8:e5:dc:ab:19:8b:ec:0c:
5a:b2:24:16:9d:92:15:29:e0:72:06:5a:f8:c2:7a:
2e:66:1c:d4:0e:1a:a7:0c:e6:ad:33:4f:0d:77:de:
20:03:6b:4a:3b:5f:ce:95:96:e1:13:6d:3d:f0:cc:
21:f9:79:6a:4b:27:f0:2c:9d:40:6f:61:53:a7:94:
9a:cf:e4:25:b5:48:4a:f2:80:4d:96:39:06:59:70:
e7:a5:5b:a7:09:29:bd:0e:8c:04:ed:9e:2d:58:b7:
22:e2:30:b7:2b:a2:6c:dc:78:81:5b:56:3e:24:5e:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:62:FB:AB:CB:B4:85:12:1D:2D:41:5F:6E:7F:BB:EA:5E:DA:84
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:07:7c:5f:ab:2c:37:de:12:18:89:13:6c:cd:62:68:3c:37:
21:e6:57:20:44:7f:48:6d:5d:51:96:ab:c4:56:27:36:4f:7d:
06:67:54:44:05:6b:51:f0:bf:ea:9d:f7:01:85:b7:ad:86:24:
ba:f3:e3:1f:4b:74:67:83:14:f0:9d:b6:21:c5:97:56:5c:54:
9e:1f:76:e0:14:eb:e0:4d:82:d5:fd:bd:6b:03:ba:da:42:ad:
f5:2b:23:ed:70:ed:5d:83:0e:59:37:db:aa:c9:de:18:bb:ff:
de:b7:f9:60:8d:85:b3:86:d7:10:60:bb:86:5a:a3:48:c3:b3:
ba:15:34:c0:87:d4:19:4e:7a:3e:5a:15:21:b7:af:a8:87:d5:
54:49:b0:55:85:7d:21:00:8f:4d:5c:80:6c:40:54:47:54:3f:
ba:f1:41:7b:cd:f8:70:4f:13:02:5f:f9:76:ef:5b:00:0d:94:
09:38:6f:dd:84:3b:ba:9d:97:fc:a2:00:ea:71:f1:8a:75:b1:
7b:83:b3:7a:4c:e4:82:15:b7:cc:ef:e8:42:0a:14:bd:09:30:
21:50:96:d6:14:67:f4:ab:38:5c:f3:d9:98:15:a5:13:21:74:
17:87:f9:c0:e3:7c:1e:e1:3a:6a:f9:05:e8:2c:2f:6c:c0:7a:
e7:ae:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:19:39 2026 by rpki-client