
Error: rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier: JtF3BPjrEoGouPb066R97W8ijt6XwMCMTQZ2junboEI=
Subject key identifier: 5C:0C:31:AB:31:8B:4B:67:9C:6B:27:AD:4B:63:24:69:0C:D0:91:18
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0636
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number: 0609
Signing time: Thu 10 Sep 2026 03:01:10 +0000
Manifest this update: Thu 10 Sep 2026 03:01:09 +0000
Manifest next update: Sat 12 Sep 2026 03:01:09 +0000
Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: R4e5Bpzc9i8DnOugnGO3hwxwM3Nk2vRvwjP9f5jXQcM=)
2: 9237A3C0290B11F185700E9BDAE4EC9C.roa (hash: esdrg0wVaagLaogxvCmxp6g0gUWYVNrVTZdy+oZHiLc=)
3: 25E5F58C290B11F190538F9ADAE4EC9C.roa (hash: dRozXwC2j+o8bXMp60CHkYN8CNbyGNQ6PkkQe4Du9yY=)
4: 2267A76E290811F191384489DAE4EC9C.roa (hash: DT6uFqW2qvDckUL7nh0pd1MjMPmthTc+htGKY8GZGUk=)
5: 63CCC8A2290711F1B5019583DAE4EC9C.roa (hash: pxzY6cCzsbz4Ramac+Qbgp41taoadIFqGrSg90joZLg=)
6: 300F5DEC290A11F1843E2C93DAE4EC9C.roa (hash: /mAZ3s7LrwZwUNCrBfvr7rgarWN7k5pNBPQkDQNI1+A=)
7: 9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa (hash: dwAgMYsvPegltyVDepDaI84ctJXl43C2pJVQvRVqXxk=)
8: 8D03DBB6290C11F1876B84A3DAE4EC9C.roa (hash: EHy91oHVnGWJWbwbozIIqxoDhB9NW8XBLn+dOhWue7g=)
9: D6504E68290B11F184129C9FDAE4EC9C.roa (hash: qckDSZpiADz4C0oSDtx3Icnh2HGIkg3DMc6q7pmD1Lg=)
10: 4A379DD0858D11F1A5CF10D3CE1D38B0.roa (hash: 13vlLCIZHxFQ4U3H+nUJ5SuHw58UZObT5Iu6GUXyyUg=)
11: 4B63F362290C11F1B83406A0DAE4EC9C.roa (hash: 1jh7xkNlhH/8ExsM8xdAWCd+AgpQp6yDXhwdw6n3+S4=)
12: A6A7C3E8290711F18B6A1487DAE4EC9C.roa (hash: 1X46Q9LRuoAUZoH96K47k8ULVdllJ4vTY+aoEFl5Yc8=)
13: CBC1F700290911F194A1BB92DAE4EC9C.roa (hash: 4tF6J5vLMi2wRM5FkfLpM8C33Azvdba51pMX+8dpwlQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Sep 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Sep 10 03:01:09 2026 GMT
Not After : Sep 12 03:01:09 2026 GMT
Subject: CN=6aa21d76-02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:ae:53:32:05:dc:d0:18:98:7d:d1:43:ec:
bf:27:82:fa:cd:57:fb:29:6d:54:5b:a2:54:1f:72:
a5:41:a6:c2:4f:89:71:ac:17:79:97:c1:18:3c:1d:
8e:71:08:76:e9:82:e3:e6:04:04:76:5d:71:1a:7a:
40:25:79:58:f7:13:52:6d:b0:a5:61:4e:67:c2:d2:
a6:6f:98:8f:09:52:d8:18:38:ad:ba:f9:1d:0b:3c:
99:3f:84:0c:30:d3:69:fb:41:92:03:1b:16:91:ee:
1c:7c:08:61:2a:20:b2:f5:01:69:52:f3:49:31:f4:
13:16:29:57:f6:a5:59:1e:3e:48:94:0d:69:7d:5c:
0d:1f:aa:bc:91:06:a5:8a:43:dd:2c:4d:04:67:01:
79:49:c0:01:4f:6c:9f:00:9a:c1:46:ab:a4:7f:54:
82:c1:7c:9c:bd:92:98:7f:69:b1:d1:a1:fa:01:21:
5e:93:c8:58:6c:33:35:69:19:4d:d8:11:ab:c5:71:
7c:54:2d:72:e5:8a:c3:48:02:87:f4:35:2b:4a:06:
99:96:0d:cf:86:54:29:23:e8:9c:39:84:c6:20:4c:
9e:0e:f2:6f:58:c7:2e:4d:b6:2a:17:c9:ee:f8:dd:
08:e8:13:e5:7c:99:2e:34:86:cd:2e:24:9e:fa:10:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0C:31:AB:31:8B:4B:67:9C:6B:27:AD:4B:63:24:69:0C:D0:91:18
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:d8:c2:41:f0:05:67:d8:6e:44:1b:db:4e:c7:8c:a0:b2:
bb:a3:a8:da:f6:29:ce:04:96:a0:9f:33:51:86:b6:4d:7e:fb:
61:e3:9c:ff:93:a7:60:60:9c:ed:d9:0d:63:34:2d:cd:c0:7a:
26:82:92:8b:f8:ba:27:8c:7e:d4:94:31:2b:78:5e:fb:8b:de:
13:cc:98:94:a5:01:51:fe:f2:0d:00:2d:d7:dc:d2:bf:b4:24:
98:a2:ec:dc:ef:f3:d0:49:2f:31:9a:2b:49:c8:03:55:17:3b:
57:de:bc:81:23:ba:b1:82:ef:f0:f5:20:53:e1:31:f7:0f:c8:
51:f2:d7:1e:99:61:07:f3:9b:be:d0:20:91:f9:11:e3:51:06:
86:79:96:e3:07:51:0c:bf:3f:bb:05:75:89:8e:4b:50:52:fb:
88:ec:42:62:23:ac:9b:76:a7:38:e4:ca:54:b6:c4:34:45:9a:
72:4c:f8:e1:12:b6:78:b7:99:91:8e:8f:dc:06:1c:a9:47:0a:
39:90:f7:7a:69:db:a0:36:ab:02:92:85:86:ae:13:37:08:17:
81:7a:66:4d:c8:38:2a:a7:cd:67:a2:e8:82:f2:1a:4b:41:dd:
d4:e4:5d:20:55:78:1b:46:23:0d:ed:48:28:90:fa:be:6e:80:
bb:b2:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:51 2026 by rpki-client