
Error: rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File: T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier: mmLngY8mfD5VfC7Yuln973EMin2wDaXXq2tmphTXzrU=
Subject key identifier: F3:39:19:46:2B:27:9D:74:41:26:D1:51:92:83:A7:A8:F4:DC:E8:07
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 03CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number: 03B3
Signing time: Thu 10 Sep 2026 04:04:58 +0000
Manifest this update: Thu 10 Sep 2026 04:04:57 +0000
Manifest next update: Sat 12 Sep 2026 04:04:57 +0000
Files and hashes: 1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: gxWQ5p8fmt8YdwyTWh1LtQ5MOtM4jgZPkDvadPnblh4=)
2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
11: 156898525F5911F1BE0CD5B2CE1D38B0.roa (hash: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=)
12: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
14: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 04:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Sep 10 04:04:57 2026 GMT
Not After : Sep 12 04:04:57 2026 GMT
Subject: CN=6aa22c6a-4ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:c8:d3:06:b2:10:06:4a:85:26:38:63:9a:
46:a6:df:d3:7f:43:b5:fd:35:77:d5:bb:4d:94:c2:
9d:40:b3:cf:70:cd:ad:6a:a3:48:b5:9d:ca:81:b2:
0b:07:41:a8:60:92:43:df:c2:ad:61:72:92:37:cd:
aa:40:24:c0:04:5c:76:94:01:db:05:61:ff:c5:9b:
83:f5:ba:bd:e4:04:8e:32:1c:3b:3a:d1:62:e3:83:
75:1a:63:9a:fb:bc:d2:4c:5f:fb:e2:c0:ed:de:02:
51:4a:93:75:f4:28:ec:06:e1:3a:7a:03:15:3f:c1:
82:36:76:86:84:59:4f:ea:f3:3c:fb:3f:b9:9a:87:
a2:ad:ea:25:37:89:09:d3:6d:9e:29:dd:31:35:74:
51:de:ea:8a:05:a0:b9:8b:07:b9:e9:0e:0e:19:c0:
ab:a9:2e:65:9d:6d:3a:08:3b:b1:a9:df:67:98:65:
f1:be:d1:a7:1f:88:14:6a:dc:68:92:39:9e:f9:ae:
13:30:3a:c7:48:58:3e:79:d3:9c:22:a7:56:08:e4:
bc:de:8e:dc:ba:6a:a9:d4:07:c4:22:a9:3d:ec:9f:
14:6f:c0:ab:8c:fb:e4:98:9c:01:87:df:02:e5:3f:
0f:35:11:89:67:98:17:ee:19:8c:4b:8a:b6:fa:41:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:19:46:2B:27:9D:74:41:26:D1:51:92:83:A7:A8:F4:DC:E8:07
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:46:a8:e8:03:2e:42:3c:c4:6c:3c:9b:64:22:64:5d:26:e9:
e1:10:b7:3a:8b:2a:bb:cb:16:12:50:63:55:a4:04:00:cb:e0:
95:22:fc:5a:5e:8e:4a:9a:db:59:b9:3c:9c:44:fe:e1:fe:6c:
a0:25:2f:43:5a:b9:e4:f8:4c:2e:b4:40:b5:64:62:a6:e0:f7:
f9:70:60:5c:26:0b:6d:b5:52:f5:b9:1c:48:10:45:05:52:a3:
d7:c3:74:3e:e1:da:12:3a:74:59:0a:c5:92:b4:87:69:22:38:
e7:de:8e:cb:1a:a5:da:21:91:ae:35:49:a9:97:1c:e7:8d:84:
c4:f9:f2:fd:19:9a:1f:9f:0f:26:da:1c:b5:70:2a:68:bd:ec:
6b:eb:36:66:6b:e6:42:01:3e:4c:4e:6c:f0:9d:94:c4:e5:bc:
1b:4e:e3:6b:e0:2f:8a:1b:49:4e:9e:15:75:5a:7d:4c:c4:0b:
f0:d9:33:fe:f1:1c:f3:3a:d7:46:b4:fe:e2:b5:96:8c:a5:8d:
ba:71:df:0a:e4:9c:e9:c3:ad:35:e1:2f:e4:af:20:f4:09:8a:
12:67:6b:b6:ce:86:92:e2:4c:cc:3a:3b:73:d4:43:5d:36:f9:
82:da:85:73:47:9a:e5:61:ea:48:bb:bd:37:1b:45:e8:9b:55:
e0:b7:91:fe
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA8owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0JBNkFBRjExMC8GA1UEBRMoNEY0OEU3RUEzMEM5ODlCMTVEMzYzOTM3NzYzNTUz
QTA3RTE2Q0Q4RTAeFw0yNjA5MTAwNDA0NTdaFw0yNjA5MTIwNDA0NTdaMBgxFjAU
BgNVBAMTDTZhYTIyYzZhLTRlYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuucjTBrIQBkqFJjhjmkam39N/Q7X9NXfVu02Uwp1As89wza1qo0i1ncqB
sgsHQahgkkPfwq1hcpI3zapAJMAEXHaUAdsFYf/Fm4P1ur3kBI4yHDs60WLjg3Ua
Y5r7vNJMX/viwO3eAlFKk3X0KOwG4Tp6AxU/wYI2doaEWU/q8zz7P7mah6Kt6iU3
iQnTbZ4p3TE1dFHe6ooFoLmLB7npDg4ZwKupLmWdbToIO7Gp32eYZfG+0acfiBRq
3GiSOZ75rhMwOsdIWD5505wip1YI5Lzejty6aqnUB8QiqT3snxRvwKuM++SYnAGH
3wLlPw81EYlnmBfuGYxLirb6QaWzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8zkZ
RisnnXRBJtFRkoOnqPTc6AcwHwYDVR0jBBgwFoAUT0jn6jDJibFdNjk3djVToH4W
zY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCQTZBLzBGNEEzN0Y0RUNEOTExRUU5RjczMkM2Nzc3NTQxMkU2L1Qwam42
akRKaWJGZE5qazNkalZUb0g0V3pZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Qwam42akRKaWJGZE5qazNkalZUb0g0V3pZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0JBNkEvMEY0QTM3RjRFQ0Q5MTFFRTlGNzMyQzY3Nzc1
NDEyRTYvVDBqbjZqREppYkZkTmprM2RqVlRvSDRXelk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfRqjoAy5CPMRsPJtkImRdJunhELc6
iyq7yxYSUGNVpAQAy+CVIvxaXo5KmttZuTycRP7h/mygJS9DWrnk+EwutEC1ZGKm
4Pf5cGBcJgtttVL1uRxIEEUFUqPXw3Q+4doSOnRZCsWStIdpIjjn3o7LGqXaIZGu
NUmplxznjYTE+fL9GZofnw8m2hy1cCpovexr6zZma+ZCAT5MTmzwnZTE5bwbTuNr
4C+KG0lOnhV1Wn1MxAvw2TP+8RzzOtdGtP7itZaMpY26cd8K5Jzpw6014S/kryD0
CYoSZ2u2zoaS4kzMOjtz1ENdNvmC2oVzR5rlYepIu703G0Xom1Xgt5H+
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:22 2026 by rpki-client