
Error: rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: AO0XaWNdahp/ZqvpmMol0r6BQLWpSUlzkyXX8jREbDo=
Subject key identifier: F4:C8:26:A5:CD:E3:DB:AC:74:47:D9:BC:45:51:9E:2A:2F:CA:89:59
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 06B7
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 063F
Signing time: Mon 05 Oct 2026 03:07:02 +0000
Manifest this update: Mon 05 Oct 2026 03:07:01 +0000
Manifest next update: Wed 07 Oct 2026 03:07:01 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: /RLguM4/4gWBjDInnt/zqvn3R5WqFEObFlxVDfKRixs=)
2: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (hash: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=)
3: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (hash: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=)
4: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (hash: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=)
5: 326EDB067E2F11F1B541811CCF1D38B0.roa (hash: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=)
6: FA491FB47E2B11F1AA23710BCF1D38B0.roa (hash: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=)
7: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (hash: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=)
8: E684858E414211F1A3CDCEB6CE1D38B0.roa (hash: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=)
9: C90158C27E3011F1A42C28AACE1D38B0.roa (hash: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=)
10: D919A6407E2D11F1A051C317CF1D38B0.roa (hash: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=)
11: 4849F37E7E2B11F1AE846107CF1D38B0.roa (hash: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=)
12: 3943014C7E2E11F1B899F517CF1D38B0.roa (hash: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=)
13: 488CA7267E3211F1B91182B2CE1D38B0.roa (hash: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=)
14: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (hash: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=)
15: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (hash: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=)
16: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (hash: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=)
17: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (hash: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=)
18: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (hash: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=)
19: C2F4A7D87E2E11F19604F41BCF1D38B0.roa (hash: cs/k7hseOXiz7ZW07irORKXogIQDAeN4IB3fj0rnKto=)
20: A6E945927E3011F1831F23AACE1D38B0.roa (hash: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=)
21: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (hash: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=)
22: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (hash: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=)
23: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (hash: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=)
24: 4772158C414311F1B6D401B9CE1D38B0.roa (hash: 2QkUZI76kgSfjHqaizbFIrW983lIVl7zlWeJR1DkrZc=)
25: ECE516527E3011F190D646AACE1D38B0.roa (hash: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=)
26: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (hash: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=)
27: 12CF5EF67E2F11F18370421CCF1D38B0.roa (hash: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=)
28: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (hash: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=)
29: 312940B47E3011F199C902A6CE1D38B0.roa (hash: vag9WcuAOrF3+1EYVtHiJogvCIGwdfxrLrNAvVorVHQ=)
30: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (hash: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=)
31: 7F089C627E3011F191A271A6CE1D38B0.roa (hash: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=)
32: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (hash: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=)
33: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (hash: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 Oct 2026 03:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Oct 5 03:07:01 2026 GMT
Not After : Oct 7 03:07:01 2026 GMT
Subject: CN=6ac31456-739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:3e:f8:ab:ac:95:64:52:63:11:77:f7:04:
1a:33:3f:40:32:c8:9a:32:a7:6d:da:14:a7:f5:63:
04:af:14:15:7e:ee:8b:af:f7:33:71:49:bd:63:1b:
5d:9f:4c:16:20:53:dc:ca:52:bb:1c:45:6f:14:81:
99:dc:3d:5f:5d:29:e4:c4:37:ad:a5:c5:7a:12:52:
49:19:85:64:1c:38:4f:4a:7c:8c:1b:79:c3:e9:51:
81:16:b4:33:30:47:76:8a:5d:01:ad:c0:05:cc:da:
e3:71:9b:c6:f8:97:12:7d:07:c9:23:4d:98:42:1c:
10:a2:bd:b5:29:4c:fb:f1:48:fe:93:8d:1f:97:ce:
c9:2b:0e:79:4a:06:5f:fd:e6:61:a7:64:e4:93:1e:
eb:32:dc:9c:f9:aa:4f:b1:60:b5:d9:89:1d:8e:a9:
40:ad:db:19:31:18:b7:b9:de:20:86:52:9f:57:a1:
6a:c8:5e:d8:94:af:3f:ca:9d:aa:32:4f:45:49:79:
d9:fd:9d:13:92:ea:5a:7a:8d:a8:18:ff:cc:9d:30:
1c:7e:83:60:43:83:93:0f:2b:43:99:ed:0e:06:83:
52:f4:f5:df:7f:ea:90:83:f2:f5:9f:25:bf:18:7e:
d9:bb:f7:f4:93:08:37:d9:45:b8:ce:01:49:38:89:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:26:A5:CD:E3:DB:AC:74:47:D9:BC:45:51:9E:2A:2F:CA:89:59
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8e:b3:42:0c:9c:49:b4:bf:1b:01:77:a0:69:0f:1d:33:45:
e0:dd:b2:ac:fa:08:5b:7a:1e:ec:c5:1f:8a:ed:24:cb:af:f7:
ce:a9:00:69:bf:04:f9:1b:52:19:b4:a3:29:0f:bc:30:71:e5:
5b:2e:11:94:3e:8a:17:82:f0:bd:9d:d3:66:44:ee:15:29:d4:
f4:c8:72:6a:28:6c:e7:c1:e6:f2:55:93:aa:73:46:c8:2e:ea:
57:63:e8:ed:37:af:52:60:c0:84:78:3b:b1:af:c0:79:2d:25:
de:fd:c3:e8:77:e1:93:f6:85:a6:22:93:1a:15:90:b2:61:29:
dc:d6:27:e6:19:0b:fb:82:85:c1:5e:10:e1:25:eb:b6:00:69:
31:8c:6c:e5:a9:e2:c8:b3:f2:8d:a0:ff:19:3d:99:ce:67:19:
16:e9:11:a8:ae:44:08:29:1d:54:66:70:70:05:7b:69:83:08:
23:e8:f6:72:15:4c:8a:0c:c2:19:36:0c:5d:c3:83:37:c8:79:
73:d3:52:49:b4:55:2a:d1:95:8b:fa:ad:2d:8b:97:91:af:e9:
f9:14:2f:dc:d5:64:c5:14:fb:23:30:8c:3e:41:6e:7f:a9:09:
b5:ba:51:d6:b1:77:15:a5:bb:a1:b6:c9:3c:42:18:8c:0d:7e:
f3:95:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:49 2026 by rpki-client