
Error: rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft (raw, json)
Hash identifier: c7JCgkoD2mTbuXe4H/XyYsAoRgMtsNbRKJQhLSy1Q/I=
Subject key identifier: 59:D0:9F:85:74:4E:4F:77:1F:8C:CE:D3:65:F6:98:23:DE:29:75:82
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 054B
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
Manifest number: 0538
Signing time: Thu 10 Sep 2026 03:18:40 +0000
Manifest this update: Thu 10 Sep 2026 03:18:40 +0000
Manifest next update: Sat 12 Sep 2026 03:18:40 +0000
Files and hashes: 1: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl (hash: UAr/Sz4ZgESxT0omRB06/uiGvHAiY61baa7Dr6y5huQ=)
2: 82219ECEA8E511F097F863D3DAE4EC9C.roa (hash: bcPInogd3xIR0s3sTN2It6IQWCB3KAgCeLuGiSvLwas=)
3: FEDC02C25C0711F0B890E9F0DAE4EC9C.roa (hash: qe7/Ho3hjXx1p+1X+gIsJxiQFYRX/3+okpR+BwibaKg=)
4: E3C267F25E4F11F0940EFC9BDAE4EC9C.roa (hash: /diZHt8dfDU8ymyLaJDOGusaWBebTUtvPjH5WbW4syU=)
5: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (hash: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=)
6: 99141D08576111F080D583A2DAE4EC9C.roa (hash: cQTA6aPVu1R9IwPCQ/9eGLXpsOsSHn6GFJCWQdw5Yp0=)
7: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (hash: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=)
8: A8DB4ACE60DD11F0914539B9DAE4EC9C.roa (hash: Si/TX7Gk5wKi7Q8cmheHqqKR3iXrshzEj+Q8MY2UZ+M=)
9: 072D1082576311F088413DABDAE4EC9C.roa (hash: kdbBEJRsB56bxxE6rksSixZh/DLbv8XJMoYIBLPc8/g=)
10: A3FEFCB0577A11F0A98CD3C1DAE4EC9C.roa (hash: qgOiHPxC/Z9pgaIJ8OipsoRNTQGJykYjhiWofc3it3c=)
11: EA8394FEA84011F0A123C6ADDAE4EC9C.roa (hash: BlN6ZCd0jXJwuiZMNu47rtCr+FOtsw3oe++3RgGL1q4=)
12: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (hash: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=)
13: FE51ED62582911F0BD53CEBBDAE4EC9C.roa (hash: KhWFDo0vWu06AyFmvRpE1g14Vu+Rmq4RukcLEVcErN4=)
14: D69EE072B2FB11F0B7B245B7DAE4EC9C.roa (hash: qpCOGOVOdGPaWFwLUvwVE5eduGEP3cZDJGPFiGA53VI=)
15: BC741E48575B11F09D18457FDAE4EC9C.roa (hash: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Sep 10 03:18:40 2026 GMT
Not After : Sep 12 03:18:40 2026 GMT
Subject: CN=6aa22190-abab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:f7:f3:d9:d1:ba:13:0b:19:a9:18:b6:c0:
90:33:a6:32:81:20:84:58:ac:ad:28:59:19:7d:74:
d6:ef:e4:8d:21:ff:5a:e3:ea:b3:91:58:05:1a:3c:
3a:86:06:31:fd:91:79:37:96:e7:81:d5:82:e2:ed:
ec:58:3b:32:cc:0a:c1:8b:8a:1e:d6:f8:28:5d:2f:
c7:89:58:3b:bd:e5:c9:fa:a5:36:64:4f:e5:26:a1:
ab:d4:6d:dc:a7:22:f7:72:68:fa:d7:8f:02:11:ce:
48:09:24:a2:84:7e:b5:a8:fb:d0:3b:81:6a:ae:0d:
57:74:b7:e8:63:55:64:1c:8b:10:9d:32:01:02:5c:
a3:c7:9a:bd:a6:17:ae:30:8b:08:14:b1:8f:5d:7e:
1f:b8:11:0c:08:56:89:ab:c9:03:03:9a:b0:54:b2:
32:77:78:df:6c:50:df:df:14:58:26:1c:63:70:7d:
a6:fd:cb:14:57:25:29:85:8b:48:f3:2b:b0:d8:83:
eb:81:ff:a7:5c:f6:a2:b3:3e:1c:30:6c:04:4c:92:
12:68:df:c1:b6:93:ec:3b:ee:e0:70:c2:5e:c8:01:
3c:a7:37:eb:3b:07:2d:d3:f9:f3:21:53:23:a5:b8:
fb:9a:d3:db:96:bd:90:b2:80:72:e8:32:e4:a6:bb:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:9F:85:74:4E:4F:77:1F:8C:CE:D3:65:F6:98:23:DE:29:75:82
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:14:b6:d3:bd:5c:08:bc:d4:f1:64:e3:9f:51:7e:cf:ef:bd:
8e:81:f5:8f:ce:29:57:04:50:cd:87:98:e5:c7:da:da:48:a5:
4e:6b:2c:fd:97:11:ce:4b:35:a5:94:ad:f2:d9:11:cd:72:8e:
a5:d8:9b:92:81:9d:ee:6a:07:a1:7d:ae:bd:08:47:e5:13:a1:
4a:a1:67:d9:e6:f7:8c:75:22:2f:cc:fd:db:6d:06:69:40:d2:
e5:95:cc:1c:ac:60:f1:5c:8f:c9:67:c7:c8:0d:c3:1f:85:50:
57:b3:a3:8b:3b:62:c2:14:4d:30:be:b2:65:9f:8f:1b:18:05:
4e:ea:d1:cb:8d:b5:3e:d2:7f:4a:07:06:e1:1d:b3:e3:97:b0:
f6:80:3c:1b:2b:3f:70:76:de:1b:de:18:22:ec:d4:c4:62:27:
af:4e:6d:61:f7:61:69:1e:7d:37:d2:df:f6:57:10:2b:af:8f:
d9:b9:0b:51:4c:25:a0:4c:fb:ff:b6:9b:98:8d:84:e4:1f:89:
f9:f8:a9:fd:2e:d4:07:55:fb:fc:48:ba:35:60:ad:49:5e:eb:
c5:1b:ce:0a:bc:36:9b:cc:45:af:14:7a:3a:0f:63:45:39:7e:
8f:f2:09:f1:63:98:24:00:22:d3:16:82:ba:b3:a0:94:fb:fe:
03:61:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:39 2026 by rpki-client