
Error: rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: a1KkXwI13UaYxZkrGgJMuG5eaUZTJHQYn/sCVdKx+KY=
Subject key identifier: 5C:4F:1A:38:05:EF:8D:D9:5E:56:41:FF:B0:63:8D:A7:6A:D9:BB:B6
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 068E
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 0616
Signing time: Tue 25 Aug 2026 03:06:37 +0000
Manifest this update: Tue 25 Aug 2026 03:06:36 +0000
Manifest next update: Thu 27 Aug 2026 03:06:36 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: rvVLQOFAzkureK0Wi6gRjElC23Vq3uACKlfPEVH+bW0=)
2: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (hash: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=)
3: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (hash: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=)
4: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (hash: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=)
5: 326EDB067E2F11F1B541811CCF1D38B0.roa (hash: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=)
6: FA491FB47E2B11F1AA23710BCF1D38B0.roa (hash: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=)
7: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (hash: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=)
8: E684858E414211F1A3CDCEB6CE1D38B0.roa (hash: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=)
9: C90158C27E3011F1A42C28AACE1D38B0.roa (hash: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=)
10: D919A6407E2D11F1A051C317CF1D38B0.roa (hash: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=)
11: 4849F37E7E2B11F1AE846107CF1D38B0.roa (hash: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=)
12: 3943014C7E2E11F1B899F517CF1D38B0.roa (hash: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=)
13: 488CA7267E3211F1B91182B2CE1D38B0.roa (hash: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=)
14: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (hash: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=)
15: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (hash: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=)
16: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (hash: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=)
17: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (hash: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=)
18: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (hash: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=)
19: C2F4A7D87E2E11F19604F41BCF1D38B0.roa (hash: cs/k7hseOXiz7ZW07irORKXogIQDAeN4IB3fj0rnKto=)
20: A6E945927E3011F1831F23AACE1D38B0.roa (hash: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=)
21: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (hash: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=)
22: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (hash: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=)
23: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (hash: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=)
24: 4772158C414311F1B6D401B9CE1D38B0.roa (hash: 2QkUZI76kgSfjHqaizbFIrW983lIVl7zlWeJR1DkrZc=)
25: ECE516527E3011F190D646AACE1D38B0.roa (hash: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=)
26: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (hash: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=)
27: 12CF5EF67E2F11F18370421CCF1D38B0.roa (hash: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=)
28: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (hash: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=)
29: 312940B47E3011F199C902A6CE1D38B0.roa (hash: vag9WcuAOrF3+1EYVtHiJogvCIGwdfxrLrNAvVorVHQ=)
30: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (hash: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=)
31: 7F089C627E3011F191A271A6CE1D38B0.roa (hash: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=)
32: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (hash: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=)
33: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (hash: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 27 Aug 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Aug 25 03:06:36 2026 GMT
Not After : Aug 27 03:06:36 2026 GMT
Subject: CN=6a8d06bd-307d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:d3:5a:eb:77:30:be:05:ac:1e:4a:88:95:
6a:a4:68:06:3f:a1:ac:a4:7c:75:1b:4b:3e:68:5a:
b0:2f:01:e8:8d:24:fa:0c:56:be:3c:52:1b:8a:01:
d1:12:cf:88:e1:b5:a5:4f:2f:15:de:7a:25:41:51:
50:00:54:ad:45:85:43:71:e5:f9:cc:91:4b:e4:71:
63:a1:78:6e:56:00:c9:f3:2f:7a:36:d6:7b:a4:0c:
15:fc:ee:df:30:26:72:be:8f:e5:af:5f:0a:4b:4f:
d4:e2:a7:dc:d1:e6:a9:1b:5b:49:99:c9:cb:c0:b8:
e0:ca:b9:f9:28:49:04:66:c5:41:34:aa:b2:d7:7f:
1f:d4:2b:9f:e7:32:ab:8d:3e:f2:4a:52:e3:a0:bb:
4c:c3:3e:ee:31:f3:e9:94:37:d7:57:ba:38:66:6a:
87:c1:26:bd:77:be:b3:29:b8:60:c3:69:8c:1a:33:
e7:ba:eb:28:ee:4b:75:a1:4f:60:e5:99:5c:2d:89:
53:03:fb:69:c5:34:56:17:5d:fc:d8:80:51:bd:82:
4b:ef:f6:72:fd:95:9e:d9:04:4b:1b:9e:33:05:e2:
d8:56:6b:f3:60:d3:75:16:0f:25:5e:a1:a5:e5:a1:
2f:a7:b1:ce:65:bc:a9:a5:8c:19:92:44:74:33:f3:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:1A:38:05:EF:8D:D9:5E:56:41:FF:B0:63:8D:A7:6A:D9:BB:B6
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d6:dc:59:a5:a7:d8:64:ee:72:1c:49:46:5c:24:6f:f1:4f:
75:56:36:d2:a2:21:ca:fd:d8:48:29:b2:a5:30:25:84:43:35:
3a:8e:82:f5:85:4d:3d:c0:0d:e9:33:d7:00:f8:40:38:b0:f5:
f1:2c:e6:e7:57:7e:97:5d:a9:26:c8:a4:cf:3c:62:6f:13:83:
63:95:2a:8e:a9:86:dc:46:c1:bf:98:53:76:28:d4:95:96:aa:
4a:9b:dc:50:34:79:4f:65:ac:eb:3a:8f:6b:35:72:16:0b:6a:
34:ba:a4:1a:7c:ae:c8:21:92:cd:ff:9f:12:11:b6:a1:6a:02:
8f:b3:bd:19:d8:35:e9:0f:8c:4f:36:94:c1:a9:ec:a6:61:87:
46:15:38:23:4b:6b:0a:3b:00:f0:4e:b0:1e:2e:d1:59:1d:8d:
9e:b8:70:90:ec:1d:fe:a4:4d:d6:6e:1d:10:a9:cf:0c:60:c8:
95:0a:08:3a:4e:1e:b2:49:91:e3:d2:55:a3:c5:be:0f:23:77:
ca:f2:5f:ae:f2:a1:4c:f6:17:62:a3:77:d6:86:08:c2:d8:e3:
e5:b6:84:4e:36:b3:d5:bc:4b:42:37:5d:e1:58:4a:b7:7e:51:
92:81:1b:7d:c3:57:a2:89:38:5b:ac:d1:1e:5f:5d:b9:4a:7c:
bd:08:fb:f0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNjA4MjUwMzA2MzZaFw0yNjA4MjcwMzA2MzZaMBgxFjAU
BgNVBAMTDTZhOGQwNmJkLTMwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxctNa63cwvgWsHkqIlWqkaAY/oaykfHUbSz5oWrAvAeiNJPoMVr48UhuK
AdESz4jhtaVPLxXeeiVBUVAAVK1FhUNx5fnMkUvkcWOheG5WAMnzL3o21nukDBX8
7t8wJnK+j+WvXwpLT9Tip9zR5qkbW0mZycvAuODKufkoSQRmxUE0qrLXfx/UK5/n
MquNPvJKUuOgu0zDPu4x8+mUN9dXujhmaofBJr13vrMpuGDDaYwaM+e66yjuS3Wh
T2DlmVwtiVMD+2nFNFYXXfzYgFG9gkvv9nL9lZ7ZBEsbnjMF4thWa/Ng03UWDyVe
oaXloS+nsc5lvKmljBmSRHQz828TAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXE8a
OAXvjdleVkH/sGONp2rZu7YwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvQ2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDZ1txZpafYZO5yHElGXCRv8U91VjbSoiHK
/dhIKbKlMCWEQzU6joL1hU09wA3pM9cA+EA4sPXxLObnV36XXakmyKTPPGJvE4Nj
lSqOqYbcRsG/mFN2KNSVlqpKm9xQNHlPZazrOo9rNXIWC2o0uqQafK7IIZLN/58S
EbahagKPs70Z2DXpD4xPNpTBqeymYYdGFTgjS2sKOwDwTrAeLtFZHY2euHCQ7B3+
pE3Wbh0Qqc8MYMiVCgg6Th6ySZHj0lWjxb4PI3fK8l+u8qFM9hdio3fWhgjC2OPl
toRONrPVvEtCN13hWEq3flGSgRt9w1eiiThbrNEeX125Sny9CPvw
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:09:10 2026 by rpki-client