
Error: rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: J55FTgOkkopcoocObKQB9kYbXF3gO9PlAyMU5SPqzfU=
Subject key identifier: A6:B2:FE:39:E2:3C:8F:F0:98:06:78:1F:3A:A9:4D:74:FF:32:C4:F2
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 06BC
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 0644
Signing time: Sat 10 Oct 2026 03:06:07 +0000
Manifest this update: Sat 10 Oct 2026 03:06:07 +0000
Manifest next update: Mon 12 Oct 2026 03:06:07 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: r+v/eda3Q2baC8T61V/ys/FTGfugx8iBXpr0tpToA5M=)
2: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (hash: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=)
3: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (hash: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=)
4: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (hash: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=)
5: 326EDB067E2F11F1B541811CCF1D38B0.roa (hash: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=)
6: FA491FB47E2B11F1AA23710BCF1D38B0.roa (hash: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=)
7: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (hash: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=)
8: E684858E414211F1A3CDCEB6CE1D38B0.roa (hash: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=)
9: C90158C27E3011F1A42C28AACE1D38B0.roa (hash: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=)
10: D919A6407E2D11F1A051C317CF1D38B0.roa (hash: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=)
11: 4849F37E7E2B11F1AE846107CF1D38B0.roa (hash: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=)
12: 3943014C7E2E11F1B899F517CF1D38B0.roa (hash: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=)
13: 488CA7267E3211F1B91182B2CE1D38B0.roa (hash: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=)
14: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (hash: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=)
15: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (hash: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=)
16: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (hash: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=)
17: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (hash: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=)
18: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (hash: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=)
19: C2F4A7D87E2E11F19604F41BCF1D38B0.roa (hash: cs/k7hseOXiz7ZW07irORKXogIQDAeN4IB3fj0rnKto=)
20: A6E945927E3011F1831F23AACE1D38B0.roa (hash: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=)
21: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (hash: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=)
22: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (hash: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=)
23: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (hash: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=)
24: 4772158C414311F1B6D401B9CE1D38B0.roa (hash: 2QkUZI76kgSfjHqaizbFIrW983lIVl7zlWeJR1DkrZc=)
25: ECE516527E3011F190D646AACE1D38B0.roa (hash: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=)
26: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (hash: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=)
27: 12CF5EF67E2F11F18370421CCF1D38B0.roa (hash: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=)
28: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (hash: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=)
29: 312940B47E3011F199C902A6CE1D38B0.roa (hash: vag9WcuAOrF3+1EYVtHiJogvCIGwdfxrLrNAvVorVHQ=)
30: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (hash: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=)
31: 7F089C627E3011F191A271A6CE1D38B0.roa (hash: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=)
32: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (hash: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=)
33: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (hash: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 Oct 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Oct 10 03:06:07 2026 GMT
Not After : Oct 12 03:06:07 2026 GMT
Subject: CN=6ac9ab9f-1404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:56:f5:fe:7d:70:7d:7c:15:93:58:4f:d7:
bd:65:43:d6:e1:bb:35:21:bc:4f:47:48:76:19:b2:
c4:73:b1:38:0c:a4:22:79:61:de:8c:4d:b8:b0:24:
14:15:a7:f0:c9:b3:73:57:38:79:98:c1:26:84:8d:
31:37:98:96:36:c1:2b:7e:5a:cd:9a:ca:91:12:c1:
23:d1:b9:1b:2e:e2:ac:47:e7:9b:35:ca:e4:cf:b0:
7d:73:4c:d9:bd:6b:2c:62:07:c9:0f:f1:46:e8:ec:
ce:c4:d1:6f:db:10:14:30:be:82:67:75:78:c1:a8:
4f:38:64:1a:92:b9:c8:de:16:42:68:01:55:85:a4:
33:31:14:08:cb:b4:01:86:1d:e9:cd:1b:8d:01:d1:
cf:5f:97:43:22:8f:e0:1b:c2:a7:77:33:2c:36:24:
7c:0e:2a:75:5d:06:d9:23:1a:94:cb:3b:eb:a3:49:
4d:f3:5f:f2:43:de:42:aa:b3:cd:58:ed:a2:b7:32:
14:3c:55:4b:b6:8f:85:7d:4d:7d:08:22:22:6c:b7:
f8:51:3c:17:88:19:fd:23:34:e7:30:db:35:99:06:
8c:e7:e2:dc:20:9b:9f:7d:51:f9:5e:64:83:72:fd:
af:20:e3:bc:1c:bc:65:b2:92:b1:c4:9f:ff:17:63:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:FE:39:E2:3C:8F:F0:98:06:78:1F:3A:A9:4D:74:FF:32:C4:F2
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:5b:95:f6:b5:46:74:fe:2a:2b:28:f3:8d:a9:95:b1:83:
19:e1:e3:7b:35:eb:67:57:03:19:e7:98:7f:fe:31:59:ca:d4:
f3:4a:fb:d3:51:0f:49:31:be:71:0b:62:4f:d0:6d:5f:1e:d5:
dd:97:5d:e0:c2:7e:71:3c:e3:f4:59:77:76:56:0f:1a:75:af:
1c:59:26:01:22:f5:90:74:3b:e4:e2:c0:06:c4:2e:36:98:36:
56:92:1d:89:1e:12:e4:1d:65:36:14:e0:24:5c:50:d3:2e:b4:
80:c3:7c:9b:74:d4:90:78:16:06:90:8f:bf:03:6b:96:a7:4c:
d1:33:7a:6c:81:17:f2:a5:c1:94:cb:c0:b5:97:9c:a3:7e:65:
7e:55:04:d2:89:49:d0:e9:34:3f:d8:ce:f8:ce:a9:bb:11:84:
f6:7e:79:57:4f:34:08:d5:16:f7:cd:ea:aa:63:26:6f:78:72:
63:60:e1:e3:0b:51:44:e3:22:6b:c1:54:6d:80:14:4a:69:0a:
92:d8:f9:c3:fb:62:23:ce:60:53:d7:bf:3e:0f:04:cd:6d:85:
bd:5e:b0:4c:19:2d:c4:fd:2d:12:75:ba:cf:a0:bb:53:2c:ad:
87:c7:b9:f2:a7:e3:c4:7b:a7:a4:f7:48:94:55:b8:ec:b5:25:
37:80:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:16:47 2026 by rpki-client