
Error: rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File: 0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier: PoboOTCP22KpD137fZOUxcuNHguyNeX8BDanaG4WKyI=
Subject key identifier: DE:2A:EB:7F:E7:41:B9:DD:E8:D4:5B:28:1D:95:83:02:79:C2:EE:29
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 035E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number: 0352
Signing time: Tue 13 Oct 2026 04:18:10 +0000
Manifest this update: Tue 13 Oct 2026 04:18:10 +0000
Manifest next update: Thu 15 Oct 2026 04:18:10 +0000
Files and hashes: 1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: wqus23Sl0iWFKxM17hzDgMp5J3L768F6SXgdJeAPtYc=)
2: 5D97EC882D1611F19AC068E9DAE4EC9C.roa (hash: Nd824+zIPH9JTtjxmpkoGfMedFkSr7B3dV2aK/j/RZE=)
3: F5DFDF7A2D1411F183B08EE0DAE4EC9C.roa (hash: bDSLtErnrdZFcDBbgffxh/78ctsTZ8XFV1WdiU3csZI=)
4: E5E1D8322D1211F18330CFD4DAE4EC9C.roa (hash: pDD/K1s5jIYNoQOdvaFU2JduYhwGAyTs1meNSV1fFgk=)
5: A6AEED562D1411F182180DDDDAE4EC9C.roa (hash: X98HrtvjqtIk7250C17DJqnpkquwvjxOdANpHQT1YOE=)
6: 005277CA2D1411F19F47E3DADAE4EC9C.roa (hash: hfLkKQB462eRt13ViRiwse3oNTJII/TyMAwJoMbhFu0=)
7: 398848402D1311F1BAA22FD5DAE4EC9C.roa (hash: yP7+AAFHj7Sjoi+sbE5FIStkJLQJ5hzb+Bv5zDj3YPY=)
8: 4E367F362D1411F193F6A2DCDAE4EC9C.roa (hash: Hva6WC1MR0w9fxXELLwTc8wp0/s+of2OUmb/NZl5gnY=)
9: AECB1C142D1711F1B01831F1DAE4EC9C.roa (hash: JQBqoZnnwg76xS1Fp0vIiTMe2ujGiBdmDQrJPFV/kXI=)
10: B6D306CA2D1111F1AF5753CDDAE4EC9C.roa (hash: i7QZyG/nMeWTcoiMA1ETxMPD9HBiOdVz3lcsX0wQVo0=)
11: 27C816362D1711F19E094EEDDAE4EC9C.roa (hash: UVfs81n2SMgjtWjD2FisacME40GhAjNWkbUeCXyweSw=)
12: 658345642D1111F18F99FACCDAE4EC9C.roa (hash: 3IDzrwpzMmpVJX4D/2AwsQinkoMvGk+PnE3f0W1tG9w=)
13: 41C6D1002D1511F1BC8AEBE0DAE4EC9C.roa (hash: xtq/+9B10Xvwdvmepm+gxrmkIEDZCZ6b5ji5Ft9YF0w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Oct 2026 04:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Oct 13 04:18:10 2026 GMT
Not After : Oct 15 04:18:10 2026 GMT
Subject: CN=6acdb102-bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:cb:e0:13:b2:c1:4c:46:91:5c:16:88:38:
6d:4d:af:ad:ea:eb:fd:c7:f8:44:b3:a2:70:1a:e9:
74:df:2c:db:6f:76:24:c9:36:5b:c4:c5:fb:9e:6c:
df:b8:80:0b:3e:ce:f1:f7:09:0e:13:b2:71:89:04:
b6:81:b5:b0:b0:0a:09:aa:b6:98:1a:7e:a7:65:94:
29:a5:c2:9c:26:9e:dc:9b:d1:29:b5:2e:87:5b:14:
fe:59:b8:73:65:bc:af:a2:51:c7:5f:c2:bd:b7:50:
b9:e0:95:4b:41:4d:a5:fd:39:97:e7:08:ec:ce:d0:
82:79:45:bc:55:b8:4a:7d:4b:d4:d1:6b:8b:72:fa:
9d:15:b1:53:5b:a1:0c:a2:7a:08:52:b4:06:99:00:
7c:fc:4f:34:93:13:a6:c0:1c:95:d4:a0:58:ee:72:
56:78:9d:45:90:fe:09:e4:2d:23:1d:96:13:f1:ff:
6c:7d:96:f7:c2:23:34:c2:24:85:87:75:5f:53:bb:
a0:c4:c1:66:b6:fc:66:e0:57:c7:66:8a:eb:70:f1:
01:27:af:aa:a6:95:65:d6:7e:a9:36:6e:05:3f:48:
65:44:da:c5:f8:e7:54:00:f9:01:67:3f:32:0e:44:
57:55:6b:7c:ae:fe:ce:ae:9a:b1:70:8d:37:ab:63:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2A:EB:7F:E7:41:B9:DD:E8:D4:5B:28:1D:95:83:02:79:C2:EE:29
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:6d:49:04:b0:9b:a5:4d:b4:bd:3a:27:96:b5:48:57:70:
33:de:34:7c:f9:fb:d9:82:6f:97:b4:20:05:77:7c:b8:d4:77:
89:98:82:31:0d:6f:87:90:63:8f:5a:c1:03:d2:f1:03:d9:97:
73:6f:aa:ce:38:85:9f:ba:40:d9:9b:7a:57:71:34:6b:d8:95:
c1:cd:f3:02:ac:59:c4:d0:3f:61:e9:06:07:de:ac:0c:16:a4:
2d:4f:06:9d:00:b3:f2:82:cb:46:b0:05:5f:76:5c:05:a3:79:
df:5c:1f:07:3b:bb:8f:95:ea:a9:c3:26:b4:37:3f:75:33:c1:
46:91:87:fb:cd:08:76:24:bc:ac:f5:88:86:c1:d3:64:37:a2:
4b:3d:db:f5:b1:61:e4:9b:c4:95:0d:7c:8e:f8:1d:1e:90:40:
84:55:4e:02:a8:fe:e1:36:b5:a5:0d:a3:c8:67:b1:9a:26:8f:
13:1d:d1:e3:b4:00:3e:d6:35:f0:56:bb:0f:be:3a:59:fd:a8:
18:ce:4b:26:a1:8e:09:0b:0e:5f:8a:1c:23:2b:87:e0:fa:93:
0b:3c:b9:18:fb:f8:17:96:21:76:20:38:45:43:f4:f3:56:b9:
72:db:6d:34:31:0f:98:58:20:39:1c:b0:b8:ac:13:09:03:7c:
d0:56:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:35:59 2026 by rpki-client