
Error: rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
File: SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft (raw, json)
Hash identifier: pqUj6MqYhAYXLtQZxXsKdZikWVCMQ2OqpcgJPawFm0A=
Subject key identifier: 4F:8E:2C:EE:78:E6:BD:9C:78:91:ED:E7:53:80:65:CE:B1:D1:49:9B
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 036E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
Manifest number: 0355
Signing time: Thu 10 Sep 2026 04:14:52 +0000
Manifest this update: Thu 10 Sep 2026 04:14:51 +0000
Manifest next update: Sat 12 Sep 2026 04:14:51 +0000
Files and hashes: 1: SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl (hash: FMzrvwlyG5hnpiHAND5dvtpAA+FS9XqQWXGK74qMyI4=)
2: FA56183C4A2E11EF935CD441762E951A.roa (hash: qasmLn0THzKUXPfZdrwuy9yINB8A6qwmZTMMTYcCuGE=)
3: 7A3144EE4A2211EFB67B7D60762E951A.roa (hash: j3JAykS4OQX/hDoFdEl316HNecziqAF0XC9NdGRUFKs=)
4: ACA70A7E4A1F11EFB750724B762E951A.roa (hash: jJTJnCCr3s4j/KC7iphB3k6ogrQ8G2LscLSFEQgVdg0=)
5: 9C73B5384A2611EF8F9A1380762E951A.roa (hash: nRAl69sp6vxHIEfCOCmW9Tz389R1auBc2Q7TENAtRGg=)
6: 148FD532495611EFAF07166C762E951A.roa (hash: ceOINoEGaKZPmp9jQxtF1qPs3DuclWxOvdxTt3Kbm/Q=)
7: B8A021FA4A2211EF8E185461762E951A.roa (hash: REvrDWvDpOLHYskkTXn9T4RA7HGDSP4fR+NvvGDn1uM=)
8: 6C108DB64A3611EF92C1C272762E951A.roa (hash: 3LWWxZduhASOp99bwc0yFeC4A2HSLl0PaRIJhKGmd80=)
9: 3CBFED64495411EFB6814C5D762E951A.roa (hash: rYrqlqO0kH8b1oM3UkYuWQ0BlyjcbnvQAaOtL36BdpY=)
10: 5452C2DA495911EFB60F9885762E951A.roa (hash: jm5I0TsEDHwv7ouFvepzTDlWJcMqPxPV2YIxH7RtI10=)
11: 498D37264A2711EFA1894F85762E951A.roa (hash: VQjB7QxkyWPW6zXkuLfk+fW9phqSykjKICBVdLaBH3M=)
12: BFD83C124A2E11EFB4893BBC762E951A.roa (hash: f5W6wC5Z6Pqj371DpiEXu2jOcFA6/nWQTPbxHnSrCKQ=)
13: A8B9E3A0D23211EFA0D093AD762E951A.roa (hash: TwodjfSPJtOum7H0x8fQ1+YqsoDP0TA/A3LbvBR8fR0=)
14: 0489B53CA44E11F0AC16C09CDAE4EC9C.roa (hash: a2XOlsngKOqqGq1EHjARQHyDrpnuVCxetumHZtqolnw=)
15: B5F67940495A11EFBD9D1F91762E951A.roa (hash: Fxf/e9tt77VXipQwVutTjXDkhsLGh3QnCmbowhMJuac=)
16: 6D2E74EC495A11EF8DD0F68C762E951A.roa (hash: Tx9oqh45dbtkEF/evkOGPsO3I8D+e6jKaajVRCuI6SI=)
17: 36179DCE456511EFB6170CA4762E951A.roa (hash: fW31+smtFp89q7DbRmjBn7koBQzEeA4McjXb/UoaZ+8=)
18: CD63089443D511EFBF754787762E951A.roa (hash: rXdaal/ApEINvTRYPpslBerAIR2l4UEEtidE419g51Q=)
19: 335AE6084A2F11EF9F06A342762E951A.roa (hash: +Jag2XtPaReW28LLYskeApEkdXybNuIZuhATM6amnqA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 04:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Sep 10 04:14:51 2026 GMT
Not After : Sep 12 04:14:51 2026 GMT
Subject: CN=6aa22ebc-fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:e9:2a:dd:14:7b:b3:57:87:4a:be:2f:24:
1a:3d:c1:db:57:b8:36:9e:0a:4e:0d:71:d4:01:e1:
4a:eb:2e:a8:2e:c4:a2:31:81:57:8b:db:3e:32:b5:
fe:51:3b:96:e7:83:1e:46:94:6d:8c:8f:cd:72:d4:
5f:b1:f8:88:94:2d:20:6f:f1:8e:42:69:a3:bd:52:
25:3a:f6:cc:56:fb:19:31:45:67:fd:4f:19:d6:83:
e6:a1:b1:41:09:d8:b7:f1:e6:9e:29:21:6e:dd:3a:
b3:cc:7e:8d:c3:e8:a7:4f:a3:e7:40:e6:6c:92:d8:
91:f4:63:ed:f9:df:0a:12:88:00:7e:88:8b:a9:3a:
86:5e:c3:62:81:a4:a6:23:38:07:98:48:f3:51:8b:
4b:05:b3:90:a1:81:51:34:e2:f7:92:fb:d4:52:98:
ea:73:ba:6c:62:59:75:bf:bc:46:26:66:0e:05:ea:
79:2d:26:0f:4a:a9:62:39:e2:5e:ea:62:58:b9:ee:
cb:a2:06:3b:5d:4a:01:0a:5c:65:47:3f:65:65:a5:
0f:2d:13:52:84:a9:cf:38:d4:8b:f6:75:6f:d1:d2:
36:f2:66:aa:a9:4b:cb:1e:80:8e:a9:db:c3:fa:05:
51:ec:41:bc:ed:95:fa:20:7d:a7:c0:f6:bb:5a:6c:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:2C:EE:78:E6:BD:9C:78:91:ED:E7:53:80:65:CE:B1:D1:49:9B
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:12:a7:06:83:bf:cd:e8:f8:b2:1f:a1:4e:ee:8b:92:01:f1:
9f:06:aa:18:8a:7f:67:84:c4:5f:e1:2e:30:c8:44:e4:92:0f:
f0:8e:e1:a2:0d:03:84:b6:1b:c6:3e:ca:e2:d9:0c:b6:28:13:
24:25:ba:cd:15:48:9b:12:55:3f:0c:ab:27:a2:ba:f6:2c:84:
23:4d:91:d7:b9:60:36:ac:15:a6:00:cc:b0:52:88:4a:e1:0e:
6e:ae:2e:f3:c9:c0:05:75:10:5f:00:45:08:22:17:a9:f0:e8:
de:3f:92:ce:dd:a8:5d:48:51:15:17:17:ee:bd:ee:f6:ed:ce:
14:ff:a6:cc:09:05:05:c6:9d:88:d7:a4:cc:5b:e6:37:59:ff:
e1:39:9e:3c:db:9a:96:4b:54:29:c7:0d:16:e7:58:5b:34:ec:
21:01:3f:43:7a:b7:9f:56:78:68:88:81:1c:96:7a:c7:b7:3c:
13:0c:f3:71:b1:09:2b:8c:79:06:e7:b5:99:b0:7c:9a:eb:02:
fb:0f:77:54:04:a5:73:59:f1:5d:14:7d:f2:7e:a3:3c:61:f6:
17:18:5d:65:d5:0a:e3:79:4a:86:4b:c6:37:c1:78:c4:80:f9:
c5:65:03:1b:8c:d9:23:05:8d:4d:3b:8b:34:1d:80:71:4c:b7:
3f:9f:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:32:49 2026 by rpki-client