
Error: rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File: ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier: rsUhF83Lq8Nl+tRKVyPl4fbAOPCFmzpYoG4xO0hNgzM=
Subject key identifier: 40:5C:E0:EF:F6:41:64:A5:D9:E5:C3:A4:70:6A:6E:32:E9:B7:CE:FF
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 0585
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number: 056E
Signing time: Fri 30 Oct 2026 03:18:07 +0000
Manifest this update: Fri 30 Oct 2026 03:18:06 +0000
Manifest next update: Sun 01 Nov 2026 03:18:06 +0000
Files and hashes: 1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: KPMB+WgpqFUOZgYnaiSGBDjvj4qdyiCHJ2GAQpLKoDo=)
2: 9884A7A6DC1611F08554FAC6DAE4EC9C.roa (hash: gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=)
3: F67B1080078511F1A61271C3DAE4EC9C.roa (hash: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=)
4: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (hash: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=)
5: C8A598A47F3D11F093F96AD7DAE4EC9C.roa (hash: SX7VFRi6fja/lVzFn5u30dJTc0ojT/jkc4MDx+ibGA4=)
6: 317186825E5911F0BF0E56D6DAE4EC9C.roa (hash: 6apzxpSV9toddFW0ywLW65SIvt6/6D8w0xhl0KtVvGE=)
7: 5A6198AED59411F0985D177EDAE4EC9C.roa (hash: PE7nKz1fS34J7ek36L+PYwmWDnMXZGfg9zXwU8sOHbs=)
8: 1FD4E33E881A11F0B7B498A6DAE4EC9C.roa (hash: fsPwiXCwWpyl3VMVIS2dW1m76owZ/IrLRf2lMDpLzbU=)
9: 658663044E9D11F1B9523EEDCE1D38B0.roa (hash: N/DWLujuKv3pb5Dgqai2QU5o1RyKed2CARH+avVSMT8=)
10: 5C48C5E6D59111F0A35986E9DAE4EC9C.roa (hash: Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=)
11: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (hash: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=)
12: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (hash: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=)
13: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (hash: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=)
14: 36EA05F2D59711F0822F868FDAE4EC9C.roa (hash: EojrboZehKIGXK2BaidudpldxYrlMEfVrQIxHcWgYWc=)
15: 002215BE68C711F180D0CEFBCE1D38B0.roa (hash: v5F6X6ITuLHIHFcWFhURETKbMJ28InX1tSbdWhh89yc=)
16: 7023BF7ED59811F0AECA0E99DAE4EC9C.roa (hash: 0M4moWZIc1pWgW115yDoCQcKwuM3v5jTr3xkTdFI04c=)
17: 2CC09D9AF79B11F0B2CC95F0DAE4EC9C.roa (hash: GqpKo6qbPlIx2jVnFfAJCJZciNlgCHzuokWLGajhcgA=)
18: 3F8563360B3011F1952D8DD1DAE4EC9C.roa (hash: ywRwAGyvq53R6hNtJgtpMHcYkRZeZDea56O4hCBnArk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 01 Nov 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Oct 30 03:18:06 2026 GMT
Not After : Nov 1 03:18:06 2026 GMT
Subject: CN=6ae40c6f-597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:6c:96:ee:61:f1:41:e0:68:de:18:28:56:
65:d3:1e:eb:20:9e:be:31:91:58:eb:c4:b4:82:af:
88:73:6f:42:6b:c7:de:d2:d9:2c:dd:f4:aa:47:ca:
d0:1a:db:33:81:cc:08:4b:e5:ca:d0:70:0b:40:65:
52:8b:d3:25:dd:ea:72:65:7f:16:54:46:81:d3:80:
68:41:f9:55:6f:1b:fe:59:33:c4:d2:59:54:31:31:
1e:c0:10:52:36:ca:2e:b1:80:84:13:c5:99:f6:25:
b4:65:e9:37:74:1e:ad:ab:e9:78:1a:9d:31:77:3f:
de:e5:13:17:61:fa:56:bc:8e:cf:23:14:47:ae:c2:
74:99:de:2f:93:96:3a:ba:79:fd:49:ca:d2:d0:74:
c6:6d:d7:36:a5:7a:15:2b:9b:2a:ac:3e:20:c3:95:
a4:5d:38:e3:66:bf:09:7e:87:97:07:3e:22:85:d6:
a8:87:7b:75:16:63:0d:80:aa:b3:65:7d:c2:93:ea:
a4:30:a0:83:a6:a2:2a:35:27:90:88:ef:55:2c:28:
34:c5:c3:45:ed:7b:2e:83:78:17:42:4b:9a:ce:99:
04:7b:f8:45:63:b5:0b:98:bc:1a:d8:d3:56:c8:41:
dd:fc:71:92:6e:6e:9b:c1:dc:df:a2:a8:23:a6:5f:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:E0:EF:F6:41:64:A5:D9:E5:C3:A4:70:6A:6E:32:E9:B7:CE:FF
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:20:65:e6:7b:e6:2a:d9:14:b2:6b:3b:9d:b9:8f:61:ef:84:
ac:f7:da:ba:9d:df:5b:82:94:85:53:09:05:f5:9f:81:c3:76:
2f:bd:6c:79:35:84:82:fd:2a:13:2c:41:c8:ac:0c:6c:42:00:
c3:55:60:bd:39:ab:b6:6f:7c:46:1b:cd:60:3f:13:39:0b:a4:
1b:e1:60:74:82:1c:34:b8:aa:67:41:23:4b:e2:63:95:58:d4:
d6:28:25:3e:ce:4d:5d:c2:d1:8d:9f:56:e0:d9:6c:df:26:f4:
ef:26:77:5b:ab:c3:1b:d6:59:ad:de:a8:bc:7b:a3:50:b0:2d:
64:ad:92:8b:35:2e:c9:a6:5f:5d:4a:82:9f:fc:7b:d1:1c:5b:
37:38:51:29:37:f2:5c:42:44:75:96:79:96:ea:2f:7a:fc:21:
ad:54:5e:d7:68:bd:7c:72:52:1a:37:6b:d6:45:e8:5e:51:c9:
67:93:c0:d1:57:9b:fb:7e:85:28:7f:3b:b9:7f:37:a5:9d:a7:
f2:4d:22:91:f3:fb:5a:e6:17:82:85:c9:65:4a:71:63:02:c0:
5f:2c:ba:33:bc:e6:d4:a0:df:40:16:38:9b:3a:33:fe:d6:a6:
0b:83:27:eb:7f:61:4e:98:35:63:85:84:89:36:34:4c:1f:30:
da:b2:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:21:14 2026 by rpki-client