
Error: rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File: xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier: cinrvutA7Rp+904zMVuzCyYFso68/ntaZKyXcK+diq4=
Subject key identifier: B1:83:9C:B6:3F:7D:A7:01:39:CB:71:62:78:25:7A:C5:0D:FD:8F:8F
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 0991
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number: 0975
Signing time: Sat 19 Sep 2026 06:04:27 +0000
Manifest this update: Sat 19 Sep 2026 06:04:27 +0000
Manifest next update: Mon 21 Sep 2026 06:04:26 +0000
Files and hashes: 1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: dhSJ1aZR7q16jgKm4q3ot2onPX9cjHBLc08Uyp1XhIk=)
2: 1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa (hash: GpBCPBpYP7jSKCmZZyQgNpO5GbazBb3Ixsp5RwZj6vM=)
3: 608B48BEB55611F0B2E28A9CDAE4EC9C.roa (hash: 6xR9Yw6qiVIfQSJDhytaGImSZ1A3jFhmSl44es/ykHg=)
4: B9EABCD2B54C11F09D128FDFDAE4EC9C.roa (hash: FQu8ySvpjzSm8Wt9V+i50XqTr/lNpOUbbdjMIfmS/L8=)
5: DF5534A0B1C911F184211CFCCE1D38B0.roa (hash: tdKG3fAnZ8O4SvFAeUfYg2GlcrozRV06z8IlLTGUwMs=)
6: 094FEDD4B55611F08FD11F9CDAE4EC9C.roa (hash: jvqPC+LV3haBj2mis1++y3ICQS3fsxJo9KRlAft0JPY=)
7: 96B4A35AB55511F08FC6E597DAE4EC9C.roa (hash: 6Qab2GQfV990KSXtH4bePzdjsFn7IxaaFDENDt4G4Yc=)
8: DBE779FCB55511F09281119CDAE4EC9C.roa (hash: r38PJu83hUBvf7P5w3SkDI8cVfAvH12yPWpkkk25OPA=)
9: 2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa (hash: BLNEGjyDBYxkX0YHPraswO3BVBLrA7gab5y1HJSh2U4=)
10: 7F2A789EB55611F097EC52A0DAE4EC9C.roa (hash: 2L2OgLFRPecgH2xTdenUefSJFiuBkC2MjqJciX7PRvY=)
11: C4C9B73AB55511F08736369ADAE4EC9C.roa (hash: CMYKxCS3jFNWQQUqDagCHxfFByaW82mbkSwsyKkTgQ4=)
12: E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa (hash: yiPtl3UM2gTn4BwT0BadrawkZ+QM2YDZW4gZb83Wnio=)
13: 9A0C2716B55611F094735AA0DAE4EC9C.roa (hash: 43UkRVumG67YdCPCBU+yiy01Xg1w6Ryu6pqrcLYThmU=)
14: 457A28BEB54D11F085FD31E0DAE4EC9C.roa (hash: WvjKJ61Ybf7E0w2qd2kPgyK95N5i97V0MyHCGmY1W6o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Sep 19 06:04:27 2026 GMT
Not After : Sep 21 06:04:26 2026 GMT
Subject: CN=6aae25eb-a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:d7:af:df:dc:9a:42:d1:9d:5f:38:ea:be:
e6:59:ef:db:43:36:6b:74:e4:d3:c3:85:1d:e3:29:
97:1f:31:0f:1b:ca:ea:e6:d1:11:05:d0:49:0f:6b:
65:ea:e5:f4:ea:8f:c7:2c:b0:f8:fa:d0:b2:ce:ff:
01:ab:62:0a:d4:70:26:c3:f9:a1:d5:ca:da:76:61:
75:a4:bc:2c:ff:6e:a7:63:f9:f7:4c:74:96:68:33:
24:64:1b:78:10:14:12:fe:66:4f:cd:b5:1a:d9:8b:
55:5a:4e:f6:b7:c5:9c:24:2a:52:f1:1a:a9:40:9c:
67:d2:38:e9:e1:00:7e:ef:79:b7:c7:02:47:24:87:
0a:57:4f:89:74:07:50:5e:4c:16:08:12:3a:91:cf:
1e:4b:64:63:5c:40:41:05:03:9b:c1:bb:40:75:c7:
ef:22:1e:90:7a:04:b2:97:1a:7f:78:eb:a1:37:62:
bd:66:75:31:af:07:62:42:0e:62:dd:73:f5:11:de:
60:c1:ea:32:f4:dd:f7:3f:1b:c7:c4:b8:fc:59:a8:
7e:53:5b:dc:bc:5b:f6:20:bf:6a:b5:d4:d1:d0:30:
04:15:b9:7d:32:60:5a:d1:8f:fd:0a:5c:a2:68:95:
87:e2:16:62:71:0f:e2:6e:7d:eb:98:5f:2c:9d:ed:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:9C:B6:3F:7D:A7:01:39:CB:71:62:78:25:7A:C5:0D:FD:8F:8F
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:83:fa:1d:ee:2d:31:09:72:8e:b3:02:08:2f:6c:96:50:8e:
58:14:d8:4b:69:5e:6a:8d:f2:71:3c:10:29:05:dc:9d:a6:97:
a5:a4:88:3a:04:14:8f:0a:ce:e9:c4:62:5d:ee:cd:18:dd:11:
b0:9b:c7:21:f2:fe:8d:87:e6:7d:8b:35:91:82:b7:a0:1e:12:
35:32:17:88:3d:9d:a6:bc:e7:fd:72:58:9d:f9:cf:8e:64:d6:
15:3d:02:59:d0:04:f0:51:7d:f6:a3:35:ca:a7:5b:23:61:a2:
a8:ca:d7:c7:b5:ee:5e:c5:60:f0:f3:38:57:e5:e0:29:bb:a9:
ff:d2:f6:a3:67:7b:49:b7:2e:f4:f9:62:a4:b2:f2:44:10:1d:
45:1f:10:12:17:3f:4a:e2:1c:2c:1c:b5:b8:d9:65:e5:fc:01:
4d:96:a2:ea:1c:d1:74:21:5f:7a:d2:06:db:d6:c0:23:b2:e3:
d9:11:47:99:40:de:1f:13:00:6d:aa:f2:9e:00:81:e4:9e:a3:
9b:f4:ca:b3:1c:dc:4b:ae:e7:a0:79:85:e0:16:b0:14:67:a1:
2c:cd:08:5e:27:bb:92:d4:cc:77:aa:64:b7:56:36:96:f9:36:
8b:55:05:01:f2:bb:fa:97:68:4b:68:17:08:e9:28:4f:77:a9:
5b:4f:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:49:50 2026 by rpki-client