
Error: rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File: nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier: 5qJ91CrKA+Or4Ybu5atkvjOF3D2QVm/aJNf1OG3yE6g=
Subject key identifier: D1:88:80:5E:FE:15:80:04:20:A7:C2:6B:09:8A:FD:6E:46:05:3E:FB
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 1055
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number: 103E
Signing time: Wed 07 Oct 2026 00:55:30 +0000
Manifest this update: Wed 07 Oct 2026 00:55:29 +0000
Manifest next update: Fri 09 Oct 2026 00:55:29 +0000
Files and hashes: 1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: Yfc3hwurBqP1QqoeXo5FITnXC6qtrURoF6gDvACadXo=)
2: 65B8CDA0902211F1ADB723D1CE1D38B0.roa (hash: Xim1UGEgD9YF60xXopB/o337VqTBiStau5CZPIWZdWo=)
3: 39A15096902411F1B016B3D9CE1D38B0.roa (hash: jJJbAx5djHh+tei5Tazc3X/5MjMzwGLT3ZzM0dUmwmE=)
4: 7C3E55B4902111F19C3D6FC9CE1D38B0.roa (hash: 3YAgaNCMWja+XqVqVSO6d1a05F3nuNn9YgnY9uBJFx0=)
5: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
6: 058F87F0901F11F1B4372CBDCE1D38B0.roa (hash: rPHef9QQYZd+LvUX8tkf0SC7wdAVqHDLQMDNntxfd2o=)
7: 63911742901F11F18E1340BDCE1D38B0.roa (hash: VoYbPhNHZSIv7q3e/cQMepOJ/LmJ7pp8vT7io8/IP9M=)
8: 4B47C07C902511F1855BC0E1CE1D38B0.roa (hash: LMHsEgxxHhrC80yn+QmfSbx1JlHBlW1LGksapRgWHNU=)
9: D050B396902011F1BEB96DC5CE1D38B0.roa (hash: DBovRPK1Tx1TXVFD1e46J7QxRI4i4W1he+qGL0PV53k=)
10: 94C0EE66902211F1BE0B89D1CE1D38B0.roa (hash: H2VqM3Al4tnne65f7bzWE3hlso64x9ApyHj1wPBG8sA=)
11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
12: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 Oct 2026 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Oct 7 00:55:29 2026 GMT
Not After : Oct 9 00:55:29 2026 GMT
Subject: CN=6ac59882-a756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:19:19:0c:d1:c8:00:e2:ae:50:f0:ed:b0:
82:23:f2:45:34:88:57:cd:09:94:d0:ba:55:31:5a:
2c:12:f0:86:9c:54:f4:ec:03:8f:f4:cf:89:36:76:
81:44:cf:7d:f0:d3:13:6e:87:6b:ad:f8:57:a9:76:
ce:0c:2b:a8:cc:4a:66:5d:6c:cd:a5:39:e7:00:53:
f9:79:19:0e:d0:ba:a5:0c:28:58:88:17:86:36:2d:
51:2d:1f:b8:c0:d7:2a:da:22:d9:26:c3:a7:7a:68:
3b:6e:38:be:bc:a0:5c:fb:18:9d:21:28:2b:92:02:
06:a2:82:60:06:94:5f:5b:d1:44:4c:d3:1f:cd:1d:
9e:d5:7d:15:68:6b:37:71:3e:d2:80:9e:79:53:0c:
9d:78:ca:c3:5f:10:27:66:37:35:fd:61:0c:e3:3d:
50:7d:4e:cf:44:50:67:91:50:d0:a3:e9:ae:e0:c3:
42:b5:23:e3:c4:e7:40:fb:dc:47:bf:e0:b9:67:f0:
7d:87:d8:83:3d:c0:d7:09:aa:15:a8:be:31:08:70:
ed:cd:28:63:86:6f:9f:55:6e:22:80:6f:59:05:b0:
cf:e0:67:3b:69:0b:4a:9e:d7:a3:38:62:49:5b:ab:
56:c2:cf:f2:0d:c7:70:de:68:15:79:42:ea:25:4b:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:80:5E:FE:15:80:04:20:A7:C2:6B:09:8A:FD:6E:46:05:3E:FB
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:66:4e:73:11:db:2e:7b:81:23:72:28:b3:3a:19:ce:36:06:
ef:92:40:eb:f7:e1:73:79:15:7c:44:c1:0a:c8:d4:c0:bd:de:
47:43:00:ee:3b:93:a9:31:f5:13:b3:65:5e:5f:7a:fa:bd:8f:
4b:0b:14:3c:da:37:92:77:f3:2b:ac:d9:b6:bf:5a:a8:32:9c:
68:19:da:1a:89:a6:43:6d:a9:13:5b:4c:3b:1b:14:e9:e5:eb:
fe:c6:22:5d:56:26:45:25:84:aa:4a:b0:ce:e3:fb:44:e7:e8:
6e:e4:b9:1b:d2:07:68:f0:96:96:1f:47:0f:48:6c:ef:ce:7b:
ce:e8:d5:1d:25:5a:2a:f6:6c:8e:d4:45:b9:77:d0:99:4e:79:
76:7a:f4:51:98:03:f1:d8:c1:16:df:37:41:18:ac:e4:b6:1c:
88:64:da:b6:ee:79:8b:0d:d8:6f:51:e9:08:bf:0c:78:df:6d:
0f:38:8b:8a:b2:6d:35:ae:f2:6f:1b:ca:e7:7b:84:76:fd:3a:
65:cf:66:4f:91:58:60:2e:3e:4f:c1:46:d7:69:76:86:77:1f:
ae:32:61:97:96:d6:cc:1d:a8:d3:71:13:33:cd:d7:1e:5a:d1:
aa:7f:ee:3e:f1:da:44:b7:bc:0a:01:24:42:5c:2b:a1:3e:31:
04:e1:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:28:06 2026 by rpki-client