
Error: rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
File: rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json)
Hash identifier: 2v5eL/NA/RdbRQYeXXdE+piD/kIsy7XO1a1mfstMU4o=
Subject key identifier: 5D:40:5E:1E:C9:18:3E:2A:FE:51:5E:CB:51:9E:DF:E2:62:AB:7D:4B
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Certificate issuer: /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial: 09DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
Manifest number: 09CB
Signing time: Sun 25 Oct 2026 01:43:02 +0000
Manifest this update: Sun 25 Oct 2026 01:43:01 +0000
Manifest next update: Tue 27 Oct 2026 01:43:01 +0000
Files and hashes: 1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: wRHTUuFB76f5UTF1Rl2wykJ+v9CPUYfiq4yC2vvUyXk=)
2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=)
3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=)
4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=)
5: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=)
6: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=)
7: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=)
8: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=)
9: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=)
10: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=)
11: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=)
12: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=)
13: 7209CACE8DA611F19808DFBFCE1D38B0.roa (hash: TiQ0DTo83UHcuXxj5lRgHJU9J7T+GuSv6q0DBMkC+Xk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Validity
Not Before: Oct 25 01:43:01 2026 GMT
Not After : Oct 27 01:43:01 2026 GMT
Subject: CN=6add5ea6-1876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:da:c6:5c:12:e2:65:c0:e0:6b:9b:83:cf:
ad:ea:87:4e:13:f2:66:ae:07:3f:99:c1:2a:e9:df:
09:a5:2e:25:0e:c6:f0:d5:44:d3:d2:7a:b2:43:2f:
cd:90:e1:34:8d:ed:17:12:7b:10:1c:5b:e4:fd:1d:
77:bf:d6:c3:ba:68:8f:32:67:aa:9c:90:8f:26:6e:
01:22:fc:7b:a0:97:ac:77:7c:f3:a5:e5:1b:a0:60:
09:34:c3:63:2e:5b:c1:21:d0:67:0f:59:5a:30:f7:
a9:b2:af:9d:5b:a0:a4:78:de:62:11:2b:8e:57:e9:
0c:74:c9:83:a4:93:f9:47:24:1d:22:bb:62:90:40:
ff:26:c4:94:36:40:0e:0a:96:3b:7f:c0:55:dd:a2:
03:eb:2c:cd:53:22:ee:5c:7e:77:64:07:75:df:58:
1d:ea:ae:f9:53:d5:3e:b8:9b:6b:69:1f:c1:51:90:
29:a9:18:44:63:66:16:f1:28:4b:45:c8:8d:eb:e6:
58:6c:93:dd:c9:08:07:c6:3e:b1:10:35:bf:82:9c:
1a:85:35:ad:ce:c7:58:0e:89:cb:a0:19:4f:1c:c0:
77:24:dc:8c:ab:30:cf:00:f5:c0:2a:9b:c7:c2:9d:
de:8a:32:62:ca:4d:87:14:cf:6b:8b:20:2a:96:33:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:40:5E:1E:C9:18:3E:2A:FE:51:5E:CB:51:9E:DF:E2:62:AB:7D:4B
X509v3 Authority Key Identifier:
keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:a0:17:48:51:fa:97:a2:23:55:14:0c:77:a4:c8:b2:db:8b:
03:9a:db:29:28:7c:a4:c8:0f:c3:54:f6:3d:00:00:af:3e:31:
27:2d:05:b3:88:86:42:05:16:74:70:46:64:3f:9f:ae:8a:72:
81:78:70:4f:d4:72:00:13:ca:97:b6:3b:ad:fe:5a:0a:cc:db:
a7:bf:d4:1a:b9:86:df:86:f7:74:f6:fa:12:c2:69:87:e9:dc:
3d:f2:c9:63:87:c5:1e:7e:52:2e:a4:53:77:36:3b:d6:2d:22:
70:45:14:16:4e:c9:ed:29:c6:3c:c4:e1:7a:a3:09:56:0c:91:
cf:78:b0:05:57:6e:b4:3c:2f:9a:73:23:02:cf:3b:a9:27:e7:
07:cc:e3:c8:b8:c8:1b:68:b3:44:33:0f:54:cf:f3:33:56:f5:
ea:39:80:dc:45:5e:5d:9c:c8:52:9c:14:7c:5b:bc:53:b3:2e:
06:21:07:66:5e:3b:5f:81:a5:c3:4c:d8:ac:20:d1:3f:d1:9e:
76:76:ca:b9:07:c5:eb:93:3a:9a:6c:68:15:e8:89:52:a4:a7:
c7:10:8e:b8:d4:b0:44:2e:1c:a7:92:19:8c:25:28:f2:e0:c9:
cf:4e:06:11:5b:87:97:30:35:27:58:b7:0d:fa:38:2d:60:6e:
8c:66:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:46 2026 by rpki-client