
Error: rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier: 5ir9QTB67mJZesy1bdDhV4AJfvQR7ZX8wig0YaTd7O0=
Subject key identifier: 95:04:AA:6B:6D:DF:FD:4A:70:19:56:C1:4D:9E:BE:D7:78:E4:83:B3
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 057C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number: 056B
Signing time: Mon 02 Nov 2026 03:18:02 +0000
Manifest this update: Mon 02 Nov 2026 03:18:01 +0000
Manifest next update: Wed 04 Nov 2026 03:18:01 +0000
Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: pL2+tJ0oBAv9lrpuVhruO5pfNxWVnQhwmKk0Z7PChow=)
2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
7: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
8: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
9: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (hash: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=)
10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Nov 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Nov 2 03:18:01 2026 GMT
Not After : Nov 4 03:18:01 2026 GMT
Subject: CN=6ae800ea-6ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:f2:8e:1e:89:d3:86:11:21:0f:15:24:50:
78:ce:0b:a5:a0:dd:dd:1d:3a:3a:a1:f0:c4:85:54:
af:b1:a6:ad:84:e1:6e:b8:c5:ef:d4:d2:84:75:6b:
2a:2e:03:3c:47:7e:78:04:a4:5d:60:9e:b7:5e:19:
6f:a8:b7:ed:82:4a:3b:93:a2:4e:e3:6c:c1:87:58:
b8:39:b4:d6:54:b5:07:f9:ec:c5:c6:51:22:11:6c:
6f:6f:1b:f6:cc:2a:25:4f:87:a0:22:6f:ef:34:fa:
52:40:75:92:60:5d:38:03:07:0e:67:3c:90:b2:11:
85:c6:25:bf:44:7e:ac:de:40:d0:71:76:90:97:e8:
34:82:e0:ef:52:12:2e:f9:66:fd:84:2b:fc:3e:db:
b8:ed:1a:c9:4c:7c:7f:c0:f2:7a:2c:cf:aa:c4:3b:
2b:d5:79:87:e8:c2:be:0e:c6:3f:47:5a:63:e6:a8:
74:df:82:71:16:9e:80:c2:c1:39:6c:8b:7e:85:9d:
95:83:ec:33:1a:32:ff:a7:ac:88:f6:ec:3a:1f:b6:
4d:93:17:68:b3:e5:78:ae:75:06:fd:e8:62:71:ad:
56:65:94:ab:36:0b:d6:93:43:e7:9d:27:e6:02:3d:
e4:71:ea:ac:31:4a:b1:6a:0a:ff:12:d3:17:f8:ae:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:04:AA:6B:6D:DF:FD:4A:70:19:56:C1:4D:9E:BE:D7:78:E4:83:B3
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:86:7a:4b:9e:f8:82:d7:14:95:d9:1b:e9:80:82:35:65:2d:
c5:3f:1a:cf:3e:45:57:f0:0e:1b:f2:cc:68:78:2a:6e:f2:26:
e0:d9:4f:e4:47:1e:db:23:cb:6a:a7:29:7e:4a:f9:25:28:ed:
99:d3:39:25:30:3c:8a:3f:e5:86:de:0b:16:17:69:7c:dd:07:
c5:6f:43:62:45:07:09:5f:1a:d2:b7:13:78:0b:ba:7e:fa:ac:
6f:85:a4:9d:0b:cb:cc:13:12:84:10:4a:5a:67:0d:ff:f4:81:
f8:9c:7f:7d:df:94:4e:06:53:96:ed:71:a6:c9:04:a1:b6:be:
e0:8f:f5:6b:13:c4:70:58:43:5a:08:13:9e:de:c5:49:f0:ac:
a3:11:08:4a:2d:96:da:10:cf:c3:38:7a:d1:1d:3b:c9:93:49:
71:0e:0e:c0:a9:71:71:6e:b4:4d:0c:38:e5:f9:06:e0:29:38:
d8:ae:5a:b1:c1:db:a3:0c:aa:e5:0a:4a:b7:00:17:3b:5b:b4:
40:7b:de:2a:60:b9:85:ac:a7:d1:01:b3:de:a9:5c:ad:f9:75:
c4:74:f8:33:b1:55:29:68:db:3d:b5:a5:71:91:53:42:2d:5a:
d6:d4:2a:d3:c8:4d:6a:17:d8:5f:c6:63:b8:52:29:7b:af:73:
da:9d:22:1c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw
MTE3REM1MTkyQzAeFw0yNjExMDIwMzE4MDFaFw0yNjExMDQwMzE4MDFaMBgxFjAU
BgNVBAMTDTZhZTgwMGVhLTZiYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr8PKOHonThhEhDxUkUHjOC6Wg3d0dOjqh8MSFVK+xpq2E4W64xe/U0oR1
ayouAzxHfngEpF1gnrdeGW+ot+2CSjuTok7jbMGHWLg5tNZUtQf57MXGUSIRbG9v
G/bMKiVPh6Aib+80+lJAdZJgXTgDBw5nPJCyEYXGJb9EfqzeQNBxdpCX6DSC4O9S
Ei75Zv2EK/w+27jtGslMfH/A8nosz6rEOyvVeYfowr4Oxj9HWmPmqHTfgnEWnoDC
wTlsi36FnZWD7DMaMv+nrIj27Doftk2TF2iz5XiudQb96GJxrVZllKs2C9aTQ+ed
J+YCPeRx6qwxSrFqCv8S0xf4rmsxAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUlQSq
a23f/UpwGVbBTZ6+13jkg7MwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F
GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy
NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDMyMUEvNDkzRTQ2MkVCQ0RBMTFFREExRkIwRkIwRjEyMjI0
Njgva3o5dzI1Z1h1RWo0d0lZYWdrc1FFWDNGR1N3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnhnpLnviC1xSV2RvpgII1ZS3FPxrPPkVX
8A4b8sxoeCpu8ibg2U/kRx7bI8tqpyl+SvklKO2Z0zklMDyKP+WG3gsWF2l83QfF
b0NiRQcJXxrStxN4C7p++qxvhaSdC8vMExKEEEpaZw3/9IH4nH9935ROBlOW7XGm
yQShtr7gj/VrE8RwWENaCBOe3sVJ8KyjEQhKLZbaEM/DOHrRHTvJk0lxDg7AqXFx
brRNDDjl+QbgKTjYrlqxwdujDKrlCkq3ABc7W7RAe94qYLmFrKfRAbPeqVyt+XXE
dPgzsVUpaNs9taVxkVNCLVrW1CrTyE1qF9hfxmO4Uil7r3PanSIc
-----END CERTIFICATE-----
Generated at Tue Nov 3 01:30:25 2026 by rpki-client