
Error: rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier: 88r/I5kdKmwDZ0i8aLmDX9PZEng8QKmDtnZGBXFo8Bo=
Subject key identifier: 11:C2:94:DC:3D:91:A4:12:B0:E1:91:54:16:1A:78:46:A7:83:CC:04
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0665
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number: 0638
Signing time: Tue 27 Oct 2026 03:00:19 +0000
Manifest this update: Tue 27 Oct 2026 03:00:18 +0000
Manifest next update: Thu 29 Oct 2026 03:00:18 +0000
Files and hashes: 1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: uRM0ouyHGPFds4ya04QX83OQylTPJKP6M1d78Ysj27c=)
2: 9237A3C0290B11F185700E9BDAE4EC9C.roa (hash: esdrg0wVaagLaogxvCmxp6g0gUWYVNrVTZdy+oZHiLc=)
3: 25E5F58C290B11F190538F9ADAE4EC9C.roa (hash: dRozXwC2j+o8bXMp60CHkYN8CNbyGNQ6PkkQe4Du9yY=)
4: 2267A76E290811F191384489DAE4EC9C.roa (hash: DT6uFqW2qvDckUL7nh0pd1MjMPmthTc+htGKY8GZGUk=)
5: 63CCC8A2290711F1B5019583DAE4EC9C.roa (hash: pxzY6cCzsbz4Ramac+Qbgp41taoadIFqGrSg90joZLg=)
6: 300F5DEC290A11F1843E2C93DAE4EC9C.roa (hash: /mAZ3s7LrwZwUNCrBfvr7rgarWN7k5pNBPQkDQNI1+A=)
7: 9BB3EBB8859311F1BF6CDAF9CE1D38B0.roa (hash: dwAgMYsvPegltyVDepDaI84ctJXl43C2pJVQvRVqXxk=)
8: 8D03DBB6290C11F1876B84A3DAE4EC9C.roa (hash: EHy91oHVnGWJWbwbozIIqxoDhB9NW8XBLn+dOhWue7g=)
9: D6504E68290B11F184129C9FDAE4EC9C.roa (hash: qckDSZpiADz4C0oSDtx3Icnh2HGIkg3DMc6q7pmD1Lg=)
10: 4A379DD0858D11F1A5CF10D3CE1D38B0.roa (hash: 13vlLCIZHxFQ4U3H+nUJ5SuHw58UZObT5Iu6GUXyyUg=)
11: 4B63F362290C11F1B83406A0DAE4EC9C.roa (hash: 1jh7xkNlhH/8ExsM8xdAWCd+AgpQp6yDXhwdw6n3+S4=)
12: A6A7C3E8290711F18B6A1487DAE4EC9C.roa (hash: 1X46Q9LRuoAUZoH96K47k8ULVdllJ4vTY+aoEFl5Yc8=)
13: CBC1F700290911F194A1BB92DAE4EC9C.roa (hash: 4tF6J5vLMi2wRM5FkfLpM8C33Azvdba51pMX+8dpwlQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 00:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Oct 27 03:00:18 2026 GMT
Not After : Oct 29 03:00:18 2026 GMT
Subject: CN=6ae013c3-3b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:a9:42:94:9f:d5:c7:b9:42:56:c0:a8:fe:
8a:ab:3d:5e:05:e3:6b:aa:71:77:b5:68:78:03:83:
5f:d6:62:9e:45:cc:5f:30:fb:88:49:20:6c:7a:eb:
d0:5f:fc:ea:fc:08:2e:bf:87:79:fa:59:5a:fc:11:
91:11:e4:61:57:59:05:96:94:4b:b0:c4:cb:48:56:
26:7c:d8:12:5f:bc:b9:64:68:ce:07:df:ad:27:61:
4b:7c:e0:c0:11:04:6f:94:0c:67:bd:4d:09:f1:f7:
bd:b8:e2:97:1b:d5:4e:fa:0a:e7:ae:da:4a:b4:d0:
a0:b3:c3:4c:44:a1:57:d7:d0:71:42:8d:8b:67:0c:
82:8e:10:98:40:ed:9a:e0:9f:d4:30:d6:d1:0d:2f:
c1:74:34:13:cc:23:78:cd:d9:93:db:c7:2f:ee:72:
0f:0c:e8:5e:67:90:3d:6c:ca:29:f1:97:28:c5:c5:
7a:83:93:5c:c5:5a:7b:08:c8:1f:5c:7b:11:63:0b:
10:54:d3:96:8f:03:a6:b5:20:0c:9f:0f:b2:40:7b:
ee:e7:71:e2:a0:67:d9:f2:15:aa:91:95:a5:c1:70:
43:da:16:ab:a5:d1:70:f0:3c:4c:70:f2:fe:9f:25:
d7:15:9a:12:dc:7c:87:1e:f0:65:66:7c:e5:f0:8f:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:94:DC:3D:91:A4:12:B0:E1:91:54:16:1A:78:46:A7:83:CC:04
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:92:7a:05:5a:92:4d:7a:d2:c3:8f:92:29:36:3e:8b:c1:bc:
64:69:a8:94:45:97:55:30:35:24:40:41:2b:f2:b9:1c:0b:51:
0f:f7:2b:fa:05:88:dd:67:19:3f:cb:d9:3b:0c:bd:23:f0:27:
a0:2f:30:38:2f:10:8c:49:90:4a:06:74:7a:fa:58:b6:f0:35:
a1:72:ca:7c:0f:2e:0a:28:3a:0c:c3:bb:3c:21:0e:81:4f:23:
38:26:a6:7f:b3:2e:ba:a6:5c:a1:43:6c:86:4b:0c:d6:02:3f:
a6:bb:7d:51:87:f8:a9:19:bc:29:7c:07:26:8c:9b:f2:74:33:
e5:bb:b5:e7:78:08:36:43:7b:f1:f1:80:86:2e:60:3b:46:b9:
67:e4:2b:9b:d4:b1:87:3f:d5:28:13:db:64:b2:ab:b8:95:4d:
55:a6:8c:83:18:77:64:df:5b:db:fc:77:3f:67:f9:fc:f0:54:
76:5d:0f:3c:60:1b:2b:01:48:7f:5f:42:03:81:cd:fc:9d:71:
f4:03:77:7e:51:d8:95:97:31:9d:eb:0c:66:ca:b3:97:e5:91:
03:8c:dc:bf:cc:b3:9f:1c:6b:07:44:e9:69:a2:75:1b:bb:b2:
18:b8:75:b0:6f:2d:9f:df:ed:e3:9f:4a:20:96:93:aa:57:c1:
69:82:98:70
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yNjEwMjcwMzAwMThaFw0yNjEwMjkwMzAwMThaMBgxFjAU
BgNVBAMTDTZhZTAxM2MzLTNiOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGnqlClJ/Vx7lCVsCo/oqrPV4F42uqcXe1aHgDg1/WYp5FzF8w+4hJIGx6
69Bf/Or8CC6/h3n6WVr8EZER5GFXWQWWlEuwxMtIViZ82BJfvLlkaM4H360nYUt8
4MARBG+UDGe9TQnx97244pcb1U76Cueu2kq00KCzw0xEoVfX0HFCjYtnDIKOEJhA
7Zrgn9Qw1tENL8F0NBPMI3jN2ZPbxy/ucg8M6F5nkD1syinxlyjFxXqDk1zFWnsI
yB9cexFjCxBU05aPA6a1IAyfD7JAe+7nceKgZ9nyFaqRlaXBcEPaFqul0XDwPExw
8v6fJdcVmhLcfIce8GVmfOXwj8A7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEcKU
3D2RpBKw4ZFUFhp4RqeDzAQwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy
MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfknoFWpJNetLDj5IpNj6LwbxkaaiU
RZdVMDUkQEEr8rkcC1EP9yv6BYjdZxk/y9k7DL0j8CegLzA4LxCMSZBKBnR6+li2
8DWhcsp8Dy4KKDoMw7s8IQ6BTyM4JqZ/sy66plyhQ2yGSwzWAj+mu31Rh/ipGbwp
fAcmjJvydDPlu7XneAg2Q3vx8YCGLmA7Rrln5Cub1LGHP9UoE9tksqu4lU1VpoyD
GHdk31vb/Hc/Z/n88FR2XQ88YBsrAUh/X0IDgc38nXH0A3d+UdiVlzGd6wxmyrOX
5ZEDjNy/zLOfHGsHROlponUbu7IYuHWwby2f3+3jn0oglpOqV8Fpgphw
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:47:36 2026 by rpki-client