
Error: rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
File: llyMNbDxD46l29pUTykbbKkoO10.mft (raw, json)
Hash identifier: qlQDjGwDPc2GWd4YjXuRQHvs76kVnFEa0U+4Wsj0yMA=
Subject key identifier: 36:13:38:15:A0:3C:1E:A1:8B:95:A5:11:3A:3C:FD:69:31:05:82:09
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0A36
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
Manifest number: 0A13
Signing time: Tue 27 Oct 2026 01:40:39 +0000
Manifest this update: Tue 27 Oct 2026 01:40:38 +0000
Manifest next update: Thu 29 Oct 2026 01:40:38 +0000
Files and hashes: 1: llyMNbDxD46l29pUTykbbKkoO10.crl (hash: cJnOkSy3QWwOtcaWwxWL15aSEagRV4sOTc7q47hRYhw=)
2: CD539CA4195F11F1A93F757FDAE4EC9C.roa (hash: 72eww79c1LhxX88JJHRLGmkQ6SgWbuwwLn91Yhwl3OM=)
3: 71049C4A4FFE11EFB49E615C762E951A.roa (hash: jbW+6AKtEoSOyZoaKGmM/zW6o3okDriAIOGo+daJIco=)
4: EE939480196111F1B93A308CDAE4EC9C.roa (hash: bk0vsHax/qp4UlIJSg2DL8tth/n6/mOBtDc39qKX8fs=)
5: 579583E2195F11F1B991657DDAE4EC9C.roa (hash: SF0hDp8Zk9dynSHbdMmIgYSWC7ijmylDn1pyd15RvQY=)
6: 47B929708A6A11F19AE386FCCE1D38B0.roa (hash: +PURW9h8fC6QCQjo5DYWqsOQMj1WuGyTtah+FIejrAc=)
7: 28C356B4196111F184DBF487DAE4EC9C.roa (hash: aSzuJgc4hXP1yI45B2SkSx8ZkUWaYTT+OBaaHmbOFSc=)
8: 21C1E2568A6B11F1AA1ECD02CF1D38B0.roa (hash: 3IW2hG4U1ExpcZubWiJJn8Gv7hZRkdjDAkFy5BeMkGs=)
9: 923C5AF2195F11F1A3BEA27DDAE4EC9C.roa (hash: XHVjQ0BnSbhqTQoC6M8bTABJ3YO/Bp0yh7KCDo0mYuo=)
10: CF1CD3564FFE11EFBC6B5560762E951A.roa (hash: rKE0aTq1xK/d7TP0Mi/oZzn9/eW8mKHviKpsNrNh4jQ=)
11: 363906AE8A6D11F1A73E2E0FCF1D38B0.roa (hash: HuoTVuH2wLkOrx2U374b3Tje/aCCSu66XS48cTDH4ro=)
12: 086691B6196011F1AA8AAF81DAE4EC9C.roa (hash: IM9+GWZbmnwdn08EHStSdHEHqEJhliwSrh+UsfiVB7M=)
13: F3312BC0196011F1BD761A86DAE4EC9C.roa (hash: ibkIYsf/GzzdmpJ0e4OsQNVAHYchdgJBYBy4m/psamQ=)
14: 670BE738196111F1A493168ADAE4EC9C.roa (hash: 89il+swCnx0o5ne+xSUMBKX+ebYKwDzvuxUzUv1wXZ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 29 Oct 2026 01:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Oct 27 01:40:38 2026 GMT
Not After : Oct 29 01:40:38 2026 GMT
Subject: CN=6ae00116-ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:f7:7e:62:10:7e:8d:72:5b:35:69:f2:cf:
5c:10:e3:a8:ec:58:ed:0b:3b:67:67:2c:5f:6b:0b:
a6:47:50:e3:88:1e:90:de:01:c0:52:59:5c:27:43:
99:93:24:39:2b:79:4b:16:c5:9b:df:77:86:8b:ba:
b8:d7:88:cb:80:f2:00:35:57:b1:d2:a0:ba:cd:d0:
ba:29:d9:74:30:d4:9a:9c:2f:5d:41:cd:ca:cc:84:
4c:fa:9d:06:dc:48:71:96:2d:2b:66:8f:eb:1a:9e:
8a:12:48:f5:20:ee:29:ee:14:d2:e0:c2:1e:09:cb:
cd:8e:8f:ae:e5:9a:03:8e:64:1a:14:40:81:2b:0f:
ff:0f:5b:79:58:ed:15:8e:3d:3b:80:83:04:ac:bf:
d3:ed:01:0a:41:28:62:4e:12:0f:41:f4:bd:2f:df:
72:50:c8:17:85:3e:55:88:60:fd:a9:3c:09:49:32:
17:7f:1a:59:c2:a5:72:63:7a:da:07:d5:4b:da:3a:
11:39:d4:be:b5:9d:96:b0:5e:8c:95:b9:7b:d5:3b:
61:4d:91:2b:f3:73:53:28:05:15:55:1b:50:85:77:
bb:47:98:6b:d9:17:fa:cb:c0:05:18:a7:64:23:f1:
29:69:28:b9:b5:c3:89:9e:5b:9f:33:2f:4a:60:9b:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:38:15:A0:3C:1E:A1:8B:95:A5:11:3A:3C:FD:69:31:05:82:09
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:7e:bd:0d:bd:37:3d:33:5a:15:1b:4c:ea:26:51:18:b3:
0b:d7:33:7f:62:6a:5a:1f:b0:19:01:04:36:1c:4f:f9:b9:b5:
7c:67:2a:93:2c:7e:7b:14:91:c9:c5:33:df:9d:24:bd:74:fe:
6f:83:d8:cb:ba:e7:e6:22:51:5b:e0:ac:cd:64:fe:21:1f:7a:
fd:77:14:29:ae:23:bf:48:c4:65:04:d6:19:fc:d4:ef:61:4d:
10:cb:f5:86:c8:96:d6:68:57:cc:66:ce:28:53:a8:a1:ca:a9:
b6:89:56:1b:15:cb:b5:7f:9b:60:9c:b8:fe:a8:46:ac:dd:ff:
f9:5e:b8:8c:7b:02:40:e9:20:51:d6:4f:6b:ca:95:46:f1:92:
cf:6f:e1:27:bf:b6:81:61:21:35:a7:46:e6:03:74:9e:b7:1a:
c7:d8:22:4f:0b:0f:66:37:9a:fa:57:9b:a0:13:82:2c:c5:4d:
1c:12:91:73:54:7a:94:99:87:b7:24:97:52:d9:e6:2f:ed:a0:
a7:e0:cf:c7:7d:58:7d:1b:3b:13:25:9c:22:63:1d:d2:9b:9e:
0a:eb:32:49:5a:a4:c4:0f:0c:7c:6c:8b:bc:47:9c:8d:d5:df:
2b:c7:91:b1:0b:7a:c5:85:59:c5:c5:2c:96:a6:d2:2a:fa:bb:
e0:e2:a2:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNEN0ZBRjExMC8GA1UEBRMoOTY1QzhDMzVCMEYxMEY4RUE1REJEQTU0NEYyOTFC
NkNBOTI4M0I1RDAeFw0yNjEwMjcwMTQwMzhaFw0yNjEwMjkwMTQwMzhaMBgxFjAU
BgNVBAMTDTZhZTAwMTE2LWNhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrovd+YhB+jXJbNWnyz1wQ46jsWO0LO2dnLF9rC6ZHUOOIHpDeAcBSWVwn
Q5mTJDkreUsWxZvfd4aLurjXiMuA8gA1V7HSoLrN0Lop2XQw1JqcL11BzcrMhEz6
nQbcSHGWLStmj+sanooSSPUg7inuFNLgwh4Jy82Oj67lmgOOZBoUQIErD/8PW3lY
7RWOPTuAgwSsv9PtAQpBKGJOEg9B9L0v33JQyBeFPlWIYP2pPAlJMhd/GlnCpXJj
etoH1UvaOhE51L61nZawXoyVuXvVO2FNkSvzc1MoBRVVG1CFd7tHmGvZF/rLwAUY
p2Qj8SlpKLm1w4meW58zL0pgm9LxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNhM4
FaA8HqGLlaUROjz9aTEFggkwHwYDVR0jBBgwFoAUllyMNbDxD46l29pUTykbbKko
O10wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4QUVBMjI4L2xseU1O
YkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xseU1OYkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTNEN0YvQjcwNUVBRjI0MUE2MTFFQTg4MUE2NzI4RjhB
RUEyMjgvbGx5TU5iRHhENDZsMjlwVVR5a2JiS2tvTzEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYPX69Db03PTNaFRtM6iZRGLML1zN/
YmpaH7AZAQQ2HE/5ubV8ZyqTLH57FJHJxTPfnSS9dP5vg9jLuufmIlFb4KzNZP4h
H3r9dxQpriO/SMRlBNYZ/NTvYU0Qy/WGyJbWaFfMZs4oU6ihyqm2iVYbFcu1f5tg
nLj+qEas3f/5XriMewJA6SBR1k9rypVG8ZLPb+Env7aBYSE1p0bmA3SetxrH2CJP
Cw9mN5r6V5ugE4IsxU0cEpFzVHqUmYe3JJdS2eYv7aCn4M/HfVh9GzsTJZwiYx3S
m54K6zJJWqTEDwx8bIu8R5yN1d8rx5GxC3rFhVnFxSyWptIq+rvg4qL/
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:40:24 2026 by rpki-client