
Error: rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
File: WpihEwK6HEmqvGDVAst1DFmRB8M.mft (raw, json)
Hash identifier: RIFDW7s+bUvpOgjTR+WXiQuYc/8Ho7k8qh87e5X+uts=
Subject key identifier: A5:11:80:1E:30:47:D0:BF:C6:49:DE:2A:96:BD:EC:34:30:A0:FF:A0
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 06AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
Manifest number: 0692
Signing time: Sun 25 Oct 2026 02:45:09 +0000
Manifest this update: Sun 25 Oct 2026 02:45:08 +0000
Manifest next update: Tue 27 Oct 2026 02:45:08 +0000
Files and hashes: 1: WpihEwK6HEmqvGDVAst1DFmRB8M.crl (hash: jNHNHXjUQbUCY5r2icgryw6EaH4rGOUVkoA9DuCd2r8=)
2: 7D22477A8A8511F1A99EB9A2CE1D38B0.roa (hash: ZbW6dhsJ+JcM68l7CncdThQ0Y6a4BW/oPDMIrWsfNYg=)
3: B416D1808A8811F19276B6B5CE1D38B0.roa (hash: JqKNVi9sDF1Z+WHUQyqHM6n1mTv2PxK9bP8CLP/bWwk=)
4: 88C66DCE8A8811F1BF25A0B5CE1D38B0.roa (hash: 96MKY1wJO/ICMedmLmNPvybRZlM1IF+zskjNS4Rtcww=)
5: D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa (hash: gIg3T2F/mwJCGEuy84LwGKs/3oucbWWtsGagWAxJIUY=)
6: ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa (hash: dQe5lRR7iao+0bCygYFKDltIR9cZUc4q0UgQnVeBYqQ=)
7: F6F325F28A8911F1A00931BECE1D38B0.roa (hash: QOywer1maX7JFzM7VXF+eYTxPwTpFNOhN7NdrlCiO6U=)
8: 811A91A88A8911F19C1109BACE1D38B0.roa (hash: +yh89vy2fW/3hE8Sge1pTUKlI0uDEepcLMMEQ2oFtBs=)
9: 2519D8328A8911F1AD7DCDB9CE1D38B0.roa (hash: 8sQ3yTWm9ppQfsnveXYgDm7NMabPIZo2cwXeQRYMKOc=)
10: 56517DE68A8511F1A425C9A0CE1D38B0.roa (hash: x4/A0cOgEYz9UndmhI0YJkTiRJBKIEjyt8dqU/caCzI=)
11: F72372568A8511F19EE831A5CE1D38B0.roa (hash: Sj2GyCXVEGFZVUcPAApgFeaomJhf8dPrNUJd6K7oshI=)
12: 14D24A3A8A8A11F1810E49BECE1D38B0.roa (hash: 8ecNmNwPrHhtMp6pToYlrrAanzmGNuIqFDd82GDZ8l4=)
13: 96B3A2488A8411F1930A171BCF1D38B0.roa (hash: 9vh192EXAyU2s2NhCiFjEOTyBt89+8e3W3X3Xn0uFFY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Oct 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Oct 25 02:45:08 2026 GMT
Not After : Oct 27 02:45:08 2026 GMT
Subject: CN=6add6d35-5c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:53:18:5d:b8:6b:56:c8:9b:50:0c:7e:4d:
49:0b:42:0f:6f:95:a3:20:92:0f:e8:6b:87:6c:56:
6b:ad:cd:40:1b:5a:4f:c8:a3:a7:9c:19:92:22:8f:
40:ec:b9:c3:90:77:64:df:b6:98:72:e1:38:40:98:
3b:a0:3f:5b:11:71:97:76:e9:11:9d:cd:0d:e5:54:
8f:a8:f7:a9:f7:fb:ef:8f:df:b6:e1:36:03:e7:94:
48:e2:d3:2a:16:d3:f7:0c:ae:35:b6:b1:48:e7:b9:
30:a2:0d:42:b5:a3:2c:1e:5d:49:aa:b7:72:4b:43:
29:fb:1b:fb:a5:23:bb:0f:4f:c4:e1:95:b3:83:75:
8d:6c:59:69:57:8e:bb:a2:8d:88:51:31:d0:19:21:
e0:e2:1a:20:3b:1f:3a:10:bd:4f:ee:42:df:c3:7c:
61:35:e7:6a:71:b5:31:1a:0d:a2:95:ae:25:81:19:
59:10:60:f2:04:4a:51:1d:9b:2c:a0:f7:e8:39:14:
1b:20:53:5e:8d:c2:69:b8:17:d4:fd:e1:f4:9b:4e:
d2:2e:5a:7e:8f:6f:10:15:5d:2e:18:6d:e9:33:55:
f0:96:e4:91:a7:b6:69:2a:d6:07:00:97:5d:d5:a0:
57:88:cb:b5:48:e0:b6:f1:8c:08:50:02:83:5a:8c:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:80:1E:30:47:D0:BF:C6:49:DE:2A:96:BD:EC:34:30:A0:FF:A0
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:ca:d0:91:95:e7:5e:dc:48:d2:7d:46:91:e7:20:20:13:26:
82:81:9e:cf:4b:93:62:d1:9b:01:fd:ba:9b:b0:7b:83:4d:8d:
90:f8:c0:24:6a:92:30:fe:d1:3d:d9:c1:6f:3b:63:e0:d3:e4:
e8:27:74:a8:cc:5f:d2:53:85:d1:f9:ab:e2:96:eb:5a:40:7b:
87:f9:57:eb:47:eb:9e:d7:c9:fc:fb:a3:88:34:1a:53:01:09:
60:6c:6c:7e:40:7e:66:56:98:47:63:50:48:f8:87:be:75:d8:
0d:73:7f:0f:a8:b8:34:f8:ee:3d:1e:1c:15:74:28:7b:57:1b:
b6:e1:23:23:24:4c:c3:f4:1e:62:80:97:dd:ef:e1:36:87:d7:
13:be:fd:5d:a6:82:0e:98:3f:22:51:7e:8a:b5:4a:33:a9:a1:
ad:a6:c7:27:c9:de:4b:be:76:30:05:3b:f9:f1:12:5b:d1:61:
15:e9:eb:6c:c9:5e:40:9d:79:2a:44:f7:eb:65:d0:3b:89:26:
b2:49:29:a6:55:28:fd:0b:b7:e3:6a:af:fd:13:90:3f:42:f8:
5c:67:4d:1b:db:c4:e1:99:b6:08:fa:ab:ed:a0:ce:db:c3:62:
08:85:3f:0f:83:d3:a5:19:de:0b:b9:45:aa:b6:11:92:c6:41:
55:2f:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:11 2026 by rpki-client