
Error: rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier: ZMDGqfa8NhTsAtbq3EemJQ6YylMkYbE0shE+ToT4L7c=
Subject key identifier: 79:9D:B2:EA:29:9A:1D:B3:07:9B:82:97:6C:9B:94:B5:92:11:F9:0F
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 01BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number: 02AD
Signing time: Thu 10 Sep 2026 05:11:58 +0000
Manifest this update: Thu 10 Sep 2026 05:11:58 +0000
Manifest next update: Sat 12 Sep 2026 05:11:58 +0000
Files and hashes: 1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: hSJaz4mGq142+DpGeg3odcqAV3wpqdCdOj5hW2Kxrkk=)
2: 2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (hash: czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=)
3: AC1A84E2E64411F0BDAD2EECDAE4EC9C.roa (hash: aooplZQG6H5mHbyoOfRiSF6JsTIckWEr5yhG8Qttn8g=)
4: 19F984E6E64411F0A9D7D7E9DAE4EC9C.roa (hash: 9VxkkCn8NhYiyI/rZSGcTqIm2TXbsoc4ZBAeWC+Q88g=)
5: A78B1D62E03411F0BA23EC96DAE4EC9C.roa (hash: V4HZuRFchda4PCAZ+TqnCyZuRh7EDqhJply4K7eJCrk=)
6: 7DA56C80E64411F0B1CFF2EBDAE4EC9C.roa (hash: S9zi6LYdyNKNbV1IF5Woapx9qQLKuRkn4Pc0vvMefxY=)
7: 2A7F58C0E64111F084C774D7DAE4EC9C.roa (hash: CRFSAdvu7nT9K3BwjIvIKrNt1IE5IvnknvLaaNH+GVc=)
8: BA239C48E64611F0BCD6127ADAE4EC9C.roa (hash: pDUAqES4iR6kKHfb4Y65EyLXHCIq/3T7FgQfhEgu34w=)
9: 2BC0A8ACE02D11F0AA32FCE6DAE4EC9C.roa (hash: mp4PGUM44RsT5fvnE9G8Wfl4a9lsO8E65quGReQYOP8=)
10: 6A5EB832E64611F0BA498779DAE4EC9C.roa (hash: /Ja9NZA3PT3nMROcxNf0Cf+BLQcwrkhjsgvSsjw/GNo=)
11: ED024972E64411F09005C0EFDAE4EC9C.roa (hash: XoWr8DFFLHUUI1hS2Hcc+slXh5tzxzat68HJvhpcBCU=)
12: 4B4A8E74E64311F099A1D2E3DAE4EC9C.roa (hash: uqUiBa58m/oC+y5I8h0R2p0L6qWhQAxyUOIwGnr8g7E=)
13: 6D9EDE72E64211F099CA79DFDAE4EC9C.roa (hash: LFsqBA4grm6BGuu+IAtbdpdGd09wU0OI5vP1TJGKJGQ=)
14: CF332320E02D11F0BFEC9DE9DAE4EC9C.roa (hash: q9858WneVonKMS8ZfqhbKQq6JJrU4YMstg+M/qIgKgs=)
15: 8D48783CE4B711F08DDC53E3DAE4EC9C.roa (hash: B/ONb1nsnGd5bWbPsAXhf3fmCZlHMi+RdyKVaSXoO3w=)
16: 21633E18E64711F09267137EDAE4EC9C.roa (hash: eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=)
17: 84060446E64311F09C4464E7DAE4EC9C.roa (hash: waitUYNkQPyRyYT1K9QTpRE9p4ghHIMSe8TwdycItWM=)
18: 0476E0ECE64311F0AEA94AE3DAE4EC9C.roa (hash: gJqY8hbUmXFsQqTPCTHgTkcC0h4IBxALOcQy7DKycfE=)
19: 18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (hash: HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=)
20: 7F683120E03011F0A9A3447DDAE4EC9C.roa (hash: 1ofRyLtLCgUjtyjNbcKKGyaLNuljpNLZF/Da0DLXy4M=)
21: 9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa (hash: 9fFA5F6vS2Uzoj6zR6HF3FdhmSp+E3nknPXSOdym9E8=)
22: 4AB7FB10E03311F09521888EDAE4EC9C.roa (hash: irh6AQCCs0+wQOoQ6OfFdE3/Slfmb4g/hhWQX1yIJJo=)
23: 3E04A562E64611F098C343F6DAE4EC9C.roa (hash: nAeuC2hLRdg6vXbdusEEb2xJLgS40FzgoKMg75pO9y8=)
24: 8F4481FAE03211F0AA022B8ADAE4EC9C.roa (hash: Ausb+q37534pYlI8/IZKaw5119dV1q+N5AujavUroYE=)
25: 41B501CEE64211F0B81528DFDAE4EC9C.roa (hash: Iddf6PXYBVJILz/SeKyZ0ezmBFU0u8wv1/n3HA9IRhY=)
26: BCFF79EAE64211F0A9887CE1DAE4EC9C.roa (hash: n4W44lkOz9zDgunOmEFE9ifkh0K1X90d0DaTgdPVXLs=)
27: DFC57B3EE64511F0880A3BF4DAE4EC9C.roa (hash: QUcAXH6eBDcHLO7OTf8jf8YtX4XaBoqh4tCsAIXOlfA=)
28: ED533020E03211F0ACC31F8CDAE4EC9C.roa (hash: fCuvOeeua2UEWc+GJAZ1o37pU/fgiocR0PlJYdUski4=)
29: 23722C36E03511F0B6921B99DAE4EC9C.roa (hash: WRAjjrpZYpNcF9po1aGn/Ii+2cKmFEDJ+A9Q0pdBqR0=)
30: E0C19BF4E4B911F0AC7AE4EFDAE4EC9C.roa (hash: 0uI4WyyyVggMiE9YfvPVTXuKZFhM2OQidE/EfrcubxY=)
31: BC91A40EE65311F0908ABDCADAE4EC9C.roa (hash: VJ4tEGO/lKPbCH4khoVBPlLUyO5FnhtR7hnaBGZuDog=)
32: 27D2C2D4E03211F08A7EC587DAE4EC9C.roa (hash: Y+oQ/SVDi7ToYkC/R8JaxmCr/Q9OiGSwt61GPykd+rg=)
33: FD6A2FC6E03311F09F27C092DAE4EC9C.roa (hash: X+2ma4rUdX20xim7i8E3RdkGIOC6nD+e2aVzXB4FFDo=)
34: 9617586EE65311F09345B1CADAE4EC9C.roa (hash: YTKfsfc+uNFPFqXmbc4tutzypg97/WagZDG/Snyx9nc=)
35: 65C9748EE64511F0B27815F2DAE4EC9C.roa (hash: Yez31KL1i1V990iqH57h6ulqHwmmM4OLYItRBUzFURY=)
36: 0CEAEE0AE64611F0871671F4DAE4EC9C.roa (hash: 5xW3AY+AI1m98uAIMdUQcGDUJHs1ajRXwY7eRe3tQMw=)
37: 9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa (hash: pXs0IUGkAP6lzSFilYD3ZhWaFNX+8DRTkKn+r7yjKys=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 05:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Sep 10 05:11:58 2026 GMT
Not After : Sep 12 05:11:58 2026 GMT
Subject: CN=6aa23c1e-7f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:89:14:08:19:16:82:73:87:1d:65:61:5a:
d7:dd:f9:1e:e0:03:4a:91:f8:5f:a6:1c:d5:c3:58:
d1:f5:8b:0b:78:a9:71:ba:fc:3b:4f:f5:03:17:95:
fa:0b:30:aa:16:56:9a:43:17:b7:e7:58:5f:27:42:
8e:26:d5:b2:bb:51:8a:fc:bc:b9:ee:ae:f3:f9:99:
be:d2:f1:14:5c:39:c5:57:54:c4:1c:17:ff:05:73:
2f:d6:a8:33:e9:55:d1:0c:e1:81:af:14:db:41:5c:
af:94:0f:ac:28:92:ee:d7:7d:98:45:6d:ad:1c:0e:
5e:c2:1a:18:4d:00:92:57:46:8f:08:f4:f7:9f:60:
c2:fc:8b:d5:b4:ff:8b:2c:44:e4:ed:b4:a8:c0:76:
ef:17:7f:2e:3c:7b:70:6f:55:37:7f:7c:c7:33:c3:
f3:bd:e4:c7:13:05:39:01:dd:9b:4a:36:9a:ad:2c:
23:8e:26:85:cf:8b:03:3e:1c:b6:ff:14:28:1e:0f:
1e:a0:72:0a:9d:32:00:e1:5a:89:2c:df:9b:9f:5f:
ca:f8:18:14:1d:77:c4:04:82:27:a3:71:51:e7:61:
52:0f:64:af:68:b4:b9:a2:af:fc:e2:29:f4:94:94:
37:2a:80:87:c8:5d:59:45:88:02:b9:8b:56:d2:78:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:B2:EA:29:9A:1D:B3:07:9B:82:97:6C:9B:94:B5:92:11:F9:0F
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:a7:ae:10:b5:41:bc:87:cd:c9:9d:53:51:01:e6:a2:dc:e4:
51:55:76:ed:02:0b:8c:0c:ae:8e:6a:31:1c:88:22:ef:b3:6c:
0d:d7:38:b4:ab:43:f2:67:cf:a5:49:79:fe:51:2d:1c:62:01:
21:17:2f:38:cd:b7:f3:42:fe:4e:83:9d:94:0f:ee:c6:44:d6:
42:9c:10:a4:16:c3:41:74:01:e3:fd:f2:4c:37:3c:60:79:33:
ce:22:ac:56:08:86:10:2d:d4:4f:b3:6e:4f:71:60:f3:b6:e9:
8b:f4:30:44:10:66:12:5d:ff:63:57:a9:22:ba:12:1c:9f:75:
c0:c8:33:2f:bc:b2:b6:34:d0:73:73:41:96:e3:80:a6:ad:de:
33:61:92:3b:36:16:be:8a:f9:ba:ac:eb:07:05:2f:f1:91:30:
86:c2:8e:97:45:a1:97:63:44:e3:b9:d2:55:53:16:d6:05:8b:
35:98:e9:85:b6:14:e6:ae:87:93:e0:7b:45:5e:13:53:89:0a:
45:80:c7:da:51:df:a0:bd:0b:fd:1a:e9:01:9f:a0:3f:cc:dd:
24:b8:c1:aa:32:e7:fc:dc:d7:fb:a9:de:0f:65:03:f5:53:f0:
b0:69:96:d0:63:d5:8c:6e:95:cf:07:c6:ea:61:7f:4e:fc:4e:
18:e3:fa:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjVEN0JBRjExMC8GA1UEBRMoRTJGRTU2QUZFNjZBQjBERjNFMzk1RUREQjQxODkz
RTAwREY2QUVGNzAeFw0yNjA5MTAwNTExNThaFw0yNjA5MTIwNTExNThaMBgxFjAU
BgNVBAMTDTZhYTIzYzFlLTdmMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHlIkUCBkWgnOHHWVhWtfd+R7gA0qR+F+mHNXDWNH1iwt4qXG6/DtP9QMX
lfoLMKoWVppDF7fnWF8nQo4m1bK7UYr8vLnurvP5mb7S8RRcOcVXVMQcF/8Fcy/W
qDPpVdEM4YGvFNtBXK+UD6woku7XfZhFba0cDl7CGhhNAJJXRo8I9PefYML8i9W0
/4ssROTttKjAdu8Xfy48e3BvVTd/fMczw/O95McTBTkB3ZtKNpqtLCOOJoXPiwM+
HLb/FCgeDx6gcgqdMgDhWoks35ufX8r4GBQdd8QEgiejcVHnYVIPZK9otLmir/zi
KfSUlDcqgIfIXVlFiAK5i1bSeA79AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeZ2y
6imaHbMHm4KXbJuUtZIR+Q8wHwYDVR0jBBgwFoAU4v5Wr+ZqsN8+OV7dtBiT4A32
rvcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURBRTRFQzlDLzR2NVdy
LVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzR2NVdyLVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFF
NEVDOUMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1p64QtUG8h83JnVNRAeai3ORRVXbt
AguMDK6OajEciCLvs2wN1zi0q0PyZ8+lSXn+US0cYgEhFy84zbfzQv5Og52UD+7G
RNZCnBCkFsNBdAHj/fJMNzxgeTPOIqxWCIYQLdRPs25PcWDztumL9DBEEGYSXf9j
V6kiuhIcn3XAyDMvvLK2NNBzc0GW44Cmrd4zYZI7Nha+ivm6rOsHBS/xkTCGwo6X
RaGXY0TjudJVUxbWBYs1mOmFthTmroeT4HtFXhNTiQpFgMfaUd+gvQv9GukBn6A/
zN0kuMGqMuf83Nf7qd4PZQP1U/CwaZbQY9WMbpXPB8bqYX9O/E4Y4/qk
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:34 2026 by rpki-client