
Error: rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File: MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier: 2tncuueg2QzTwA+qT+Uqph+UIt1+5R/2Qkzv12WEEEY=
Subject key identifier: F9:56:9E:84:7C:97:EC:F0:26:BE:83:CD:46:32:4C:42:32:F8:1E:55
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer: /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial: 0586
Authority info access: rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number: 0582
Signing time: Tue 27 Oct 2026 03:11:16 +0000
Manifest this update: Tue 27 Oct 2026 03:11:15 +0000
Manifest next update: Thu 29 Oct 2026 03:11:15 +0000
Files and hashes: 1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: Mmet33HfEGF5a6KpkwxacLM+iHdBMrlFKsVp9Dvvxfg=)
2: C8482A8890A511F09A249AC2DAE4EC9C.roa (hash: YU+s4UvMmcAg4MELqrvjtd9+g7rExQPJik+26Y7x314=)
3: 7AA044D690A611F0986ABFC6DAE4EC9C.roa (hash: /le7lzuRW1i4hL+MhKBxtXg6Ksje+Y1b6XKnVcdIPSQ=)
4: 407424D090A611F0A752BAC4DAE4EC9C.roa (hash: TH3/4mixLvf8p6rQJ/buDVDbyHxIQcv4IonGYryiTFc=)
5: A58DD09690A611F0BAABE5C8DAE4EC9C.roa (hash: WRkcJOJs2/U9E6K9MGQG8K0I2p0FY0LDJQ9GxZH1JLE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Validity
Not Before: Oct 27 03:11:15 2026 GMT
Not After : Oct 29 03:11:15 2026 GMT
Subject: CN=6ae01654-61d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:de:27:83:1e:e5:f8:23:d1:66:74:c0:1e:
c1:e3:08:e9:53:fe:1b:69:41:63:80:8e:16:79:52:
10:cf:f0:d2:50:f2:46:55:18:5e:dd:be:4e:e0:af:
59:75:75:d7:84:10:9e:74:c6:48:0a:be:e4:14:4a:
f4:f9:35:cd:fb:8c:bc:51:53:d6:2d:be:64:91:49:
31:8f:ea:75:f3:20:45:a1:8b:85:4d:61:a0:15:e9:
4e:e5:8a:1e:fd:f9:53:27:df:43:02:12:08:41:e0:
59:0d:d0:53:4a:8b:9f:33:bb:10:ad:87:0b:a2:24:
00:15:f2:2c:51:73:db:c7:6f:cc:f0:57:47:6f:6e:
b7:99:4a:02:24:1c:94:38:82:bb:4d:a8:51:b5:16:
54:1e:6b:4a:bc:73:8e:73:97:aa:74:52:71:e0:ce:
51:66:59:59:e3:00:e3:aa:f6:80:81:52:bc:99:12:
3b:6d:90:0f:96:71:de:94:8b:f5:ad:91:31:d1:2d:
9b:8c:ad:0d:05:94:b4:9a:aa:1e:70:73:d9:04:ac:
c7:49:18:73:4d:63:f6:75:92:bc:aa:f9:89:cd:2c:
f2:9d:6b:7c:07:ae:6d:09:46:c0:84:2e:fc:23:e7:
40:45:1e:be:a8:2a:ec:de:15:88:da:ea:a2:df:c1:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:9E:84:7C:97:EC:F0:26:BE:83:CD:46:32:4C:42:32:F8:1E:55
X509v3 Authority Key Identifier:
keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:c2:09:e5:c9:70:43:56:20:91:da:99:45:0b:14:49:db:
5a:ab:9c:61:03:f4:36:50:ef:fb:d8:49:28:ae:30:e6:0b:9f:
70:41:63:3b:ac:75:69:a8:b3:e5:39:d5:d3:30:8d:fd:45:25:
12:30:c3:fc:94:06:57:20:28:0f:53:3c:59:2d:fb:bd:fc:0c:
fd:b5:de:5b:f1:5c:32:0b:3d:78:d0:79:c5:5e:a5:ff:b3:e6:
01:3c:63:58:68:8b:f4:bd:a0:b0:ec:0f:20:f1:50:02:53:5b:
e0:3a:e7:63:41:33:fb:7e:66:eb:d5:9d:5f:99:e8:8d:b6:6b:
8e:73:74:7c:84:6e:4c:d1:e8:56:a7:45:62:a6:00:95:13:2a:
06:71:29:3f:6c:a7:d9:35:d3:9a:f1:3f:16:40:90:b0:f8:29:
07:3a:ff:b1:09:eb:0f:c3:08:1e:88:18:f6:76:11:40:c3:71:
8c:0e:39:e5:32:4c:90:72:96:78:ef:46:5a:f3:d0:13:a7:a5:
6e:1f:6c:4c:fe:15:64:3d:51:b0:cd:b7:04:86:54:1e:22:b1:
21:ea:15:9f:0e:c4:3d:e9:cd:d8:ca:21:1e:db:4f:55:50:f7:
30:3c:1e:27:54:35:b5:0e:1e:7f:a8:96:30:ed:a6:8d:3e:03:
95:63:57:2d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBUjExMC8GA1UEBRMoMzMzNDFEQ0ExNjE4NzNBRTdGM0E0NEIzNkUxQ0RC
MzlCNUMwQTA5QTAeFw0yNjEwMjcwMzExMTVaFw0yNjEwMjkwMzExMTVaMBgxFjAU
BgNVBAMTDTZhZTAxNjU0LTYxZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUAd4ngx7l+CPRZnTAHsHjCOlT/htpQWOAjhZ5UhDP8NJQ8kZVGF7dvk7g
r1l1ddeEEJ50xkgKvuQUSvT5Nc37jLxRU9YtvmSRSTGP6nXzIEWhi4VNYaAV6U7l
ih79+VMn30MCEghB4FkN0FNKi58zuxCthwuiJAAV8ixRc9vHb8zwV0dvbreZSgIk
HJQ4grtNqFG1FlQea0q8c45zl6p0UnHgzlFmWVnjAOOq9oCBUryZEjttkA+Wcd6U
i/WtkTHRLZuMrQ0FlLSaqh5wc9kErMdJGHNNY/Z1kryq+YnNLPKda3wHrm0JRsCE
Lvwj50BFHr6oKuzeFYja6qLfwQJbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU+Vae
hHyX7PAmvoPNRjJMQjL4HlUwHwYDVR0jBBgwFoAUMzQdyhYYc65/OkSzbhzbObXA
oJowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzJCQ0Y2MjQ4OUQyODExRURCOEY5MjU4QkYxMjIyNDY4L016UWR5
aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L016UWR5aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjIxMjMvMkJDRjYyNDg5RDI4MTFFREI4RjkyNThCRjEyMjI0
NjgvTXpRZHloWVljNjVfT2tTemJoemJPYlhBb0pvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcyMIJ5clwQ1YgkdqZRQsUSdtaq5xhA/Q2
UO/72EkorjDmC59wQWM7rHVpqLPlOdXTMI39RSUSMMP8lAZXICgPUzxZLfu9/Az9
td5b8VwyCz140HnFXqX/s+YBPGNYaIv0vaCw7A8g8VACU1vgOudjQTP7fmbr1Z1f
meiNtmuOc3R8hG5M0ehWp0VipgCVEyoGcSk/bKfZNdOa8T8WQJCw+CkHOv+xCesP
wwgeiBj2dhFAw3GMDjnlMkyQcpZ470Za89ATp6VuH2xM/hVkPVGwzbcEhlQeIrEh
6hWfDsQ96c3YyiEe209VUPcwPB4nVDW1Dh5/qJYw7aaNPgOVY1ct
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:37 2026 by rpki-client