
Error: rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File: 0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier: hzqed3EPRBgUGcsh8UWYgDdTltZxk3fdRGrglwqYi8g=
Subject key identifier: 1A:B5:6F:83:80:F1:07:3C:F4:63:66:DE:6E:47:98:3A:0F:B7:76:2A
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 036C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number: 0360
Signing time: Tue 27 Oct 2026 04:17:14 +0000
Manifest this update: Tue 27 Oct 2026 04:17:13 +0000
Manifest next update: Thu 29 Oct 2026 04:17:13 +0000
Files and hashes: 1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: IiSi4+K/fYZ/+fKY+00T3TcV/zS+5OkH/hQoXqurFIs=)
2: 5D97EC882D1611F19AC068E9DAE4EC9C.roa (hash: Nd824+zIPH9JTtjxmpkoGfMedFkSr7B3dV2aK/j/RZE=)
3: F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa (hash: bDSLtErnrdZFcDBbgffxh/78ctsTZ8XFV1WdiU3csZI=)
4: E5E1D8322D1211F18330CFD4DAE4EC9C.roa (hash: pDD/K1s5jIYNoQOdvaFU2JduYhwGAyTs1meNSV1fFgk=)
5: A6AEED562D1411F182180DDDDAE4EC9C.roa (hash: X98HrtvjqtIk7250C17DJqnpkquwvjxOdANpHQT1YOE=)
6: 005277CA2D1411F19F47E3DADAE4EC9C.roa (hash: hfLkKQB462eRt13ViRiwse3oNTJII/TyMAwJoMbhFu0=)
7: 398848402D1311F1BAA22FD5DAE4EC9C.roa (hash: yP7+AAFHj7Sjoi+sbE5FIStkJLQJ5hzb+Bv5zDj3YPY=)
8: 4E367F362D1411F193F6A2DCDAE4EC9C.roa (hash: Hva6WC1MR0w9fxXELLwTc8wp0/s+of2OUmb/NZl5gnY=)
9: AECB1C142D1711F1B01831F1DAE4EC9C.roa (hash: JQBqoZnnwg76xS1Fp0vIiTMe2ujGiBdmDQrJPFV/kXI=)
10: B6D306CA2D1111F1AF5753CDDAE4EC9C.roa (hash: i7QZyG/nMeWTcoiMA1ETxMPD9HBiOdVz3lcsX0wQVo0=)
11: 27C816362D1711F19E094EEDDAE4EC9C.roa (hash: UVfs81n2SMgjtWjD2FisacME40GhAjNWkbUeCXyweSw=)
12: 658345642D1111F18F99FACCDAE4EC9C.roa (hash: 3IDzrwpzMmpVJX4D/2AwsQinkoMvGk+PnE3f0W1tG9w=)
13: 41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa (hash: xtq/+9B10Xvwdvmepm+gxrmkIEDZCZ6b5ji5Ft9YF0w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 04:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Oct 27 04:17:13 2026 GMT
Not After : Oct 29 04:17:13 2026 GMT
Subject: CN=6ae025ca-57e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:ff:c9:74:60:c3:af:e3:b1:c4:c2:1d:2b:
63:a3:8d:b5:4f:ab:4c:a0:f9:09:b1:60:b2:7e:51:
c3:11:18:07:2b:59:33:de:c2:da:98:67:0a:a7:1c:
b9:62:66:c5:ca:48:f8:01:30:3f:be:40:3f:ee:a0:
6d:d0:33:a1:6b:3e:cd:2d:7b:b0:05:1d:8e:e4:c7:
17:9c:b8:a6:db:e1:29:e7:33:b5:f2:4e:36:81:36:
b0:87:9c:70:52:5c:fb:00:c4:15:7d:88:d3:5c:24:
25:37:38:b3:0c:99:e3:7c:c6:a3:40:3e:4a:a6:23:
a0:fb:96:8d:bb:22:0d:03:f7:13:64:3d:f5:99:26:
e1:14:3f:bf:db:c2:f2:7f:f3:ea:c3:31:fc:30:b3:
49:25:1a:9a:5a:e9:e4:7a:7f:07:18:0e:7a:27:3d:
20:a3:3b:d4:5a:da:de:03:d3:46:de:b1:eb:69:43:
42:2a:2b:d2:52:1c:d0:6b:b7:f3:32:c5:f6:e1:c8:
14:b9:64:ab:72:e4:84:4c:9e:5f:67:bf:39:7d:26:
44:6a:db:d0:7f:23:0a:cd:e4:3c:18:15:e2:11:f0:
6e:10:cf:69:a4:a9:fa:6d:6a:9d:db:f3:61:d0:2a:
6a:6e:44:87:d4:75:27:85:6c:37:a8:e5:0d:af:b3:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:6F:83:80:F1:07:3C:F4:63:66:DE:6E:47:98:3A:0F:B7:76:2A
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:20:26:54:dc:40:85:a3:d7:31:eb:21:65:cb:e2:b7:ea:
63:27:88:64:ef:7c:6e:48:ed:74:ea:ec:fa:b7:2d:e3:9a:0e:
1b:aa:e4:66:66:2b:1d:9c:f6:1f:d9:21:16:91:1c:03:20:02:
4a:08:6d:f8:64:d8:21:15:af:8d:71:70:97:cd:c1:9e:7d:9e:
92:e4:f8:86:3a:e6:fa:21:14:cb:92:be:53:0a:9e:74:8a:5a:
b8:c3:19:c8:f8:30:66:4a:a9:46:ac:d2:8e:b8:2c:14:44:1d:
10:d6:13:a0:e6:fe:04:fc:33:6e:d5:a8:19:38:70:56:a3:e5:
73:e7:2e:7f:9e:ff:59:96:0b:d6:3d:c7:dd:80:a8:3f:9c:0d:
2a:cf:da:54:35:25:d6:a2:2f:20:58:c7:ae:fd:47:f6:01:d2:
2b:e0:f1:5f:2b:2a:42:86:a7:e2:94:ef:b7:22:cf:d4:f2:b5:
cf:04:89:b5:19:03:92:45:17:7b:82:cc:d2:3c:a3:ee:3c:7f:
1b:21:fd:69:4f:c2:97:3a:7d:d3:3a:b4:0d:19:de:cf:a1:ae:
6f:af:df:93:e8:85:64:ad:3d:92:1a:6a:2a:4b:da:f1:53:41:
d2:b4:aa:1e:ed:26:b2:57:c9:9d:67:d0:df:66:1c:02:d6:02:
b7:3f:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:12:12 2026 by rpki-client