
Error: rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
File: MSixWW8doKps7c_JneyOHWKEieU.mft (raw, json)
Hash identifier: J8HGUpOvaDb8Oojjpy4YBMBXKHyutHJdXBEyrCZpLks=
Subject key identifier: DF:6F:B1:08:CE:66:E7:AC:11:6D:71:EB:C9:5C:C7:FB:83:75:45:F2
Authority key identifier: 31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
Certificate issuer: /CN=F3671347AF/serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Certificate serial: 01AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
Manifest number: 019F
Signing time: Sat 26 Sep 2026 05:07:05 +0000
Manifest this update: Sat 26 Sep 2026 05:07:05 +0000
Manifest next update: Mon 28 Sep 2026 05:07:05 +0000
Files and hashes: 1: MSixWW8doKps7c_JneyOHWKEieU.crl (hash: jmLYf0Eqb2BGja5rjJlK+pnMyIUl/uYuZ6OlNdiFiNA=)
2: 876C9056823811F0AD50BEB6DAE4EC9C.roa (hash: FmjhNEZbCZYUjiXuK/jj96puYqt9Q9f9SSixXv/v/IY=)
3: 74594750819011F0BAAC22EBDAE4EC9C.roa (hash: lk3pCRLCUb/HUyRGwNR07aBltjh1UJhq7uZ69Xw/koU=)
4: A40FA8E0831611F099BCE1E6DAE4EC9C.roa (hash: IUydHjwonzzPSVQdQWsBCOTf4qdbBgAkGlNb6MeI1fQ=)
5: 39D41848831711F0B79C4EEBDAE4EC9C.roa (hash: oqrQyadBMYdawxX49jq0Jbtm2txf/130uDVG0NFFiHw=)
6: E932C506831611F0967706E9DAE4EC9C.roa (hash: tNuraBBdmRnBsX8T8fQalaYtxMghZ02rNoDmpK8DF4c=)
7: 49DF1BFA823811F0966D6EB6DAE4EC9C.roa (hash: 94vpLfKlFsg/QtwEdwPCd3PKqQroRPh8vm+klqQcxnY=)
8: 0ABADEAC831711F08AB92EEBDAE4EC9C.roa (hash: ZrkF0GhmCxfvqijo/YwHXsJCMK6ucZZ7bXMseXzxa9o=)
9: 9045DD5A823711F0A21A98B1DAE4EC9C.roa (hash: eyZ9yZrBBgy/71qSkPKciubjX/IL3eKPd8xWFBAiHnM=)
10: BA6C7CB0823711F0B922C0B1DAE4EC9C.roa (hash: 1sAGylLK0t+wy+kNU8P4eB9ajj4oeVIm5IaViXHc3V4=)
11: FCD1B060823D11F082F2DCDDDAE4EC9C.roa (hash: DEMbJ1fpxckeqnBF4G9Ph+TgPF8w10GVo9kBf+4mx1Q=)
12: FD2B626E823711F0854FBAB5DAE4EC9C.roa (hash: oX6C3aFWkcjYWTiygsopoqQv2/W30taLI5gR+gx6saU=)
13: 88670070819511F09786F98BDAE4EC9C.roa (hash: T1wOQVQ7DTYzmeNn2R6QyD9aOQXs8A6sr9yud0Xydxk=)
14: C62BE790831611F0848ADEE8DAE4EC9C.roa (hash: 2jF111Vd/S7zsiWrg4vZQJoQV7Acsi0SEn4OzYgJrJk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671347AF, serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Validity
Not Before: Sep 26 05:07:05 2026 GMT
Not After : Sep 28 05:07:05 2026 GMT
Subject: CN=6ab752f9-cdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:d5:69:c8:6d:be:09:b8:64:8a:40:8f:90:
4d:a7:86:3b:b8:0d:0a:96:ca:cf:4d:d5:a6:2d:f5:
2d:24:eb:b9:d2:56:83:84:26:47:10:b9:5f:30:1c:
bb:b9:41:33:73:a5:94:ce:08:81:76:bb:c9:18:dd:
92:f7:75:97:3e:68:3d:a6:d2:75:5b:de:70:67:d5:
e6:4e:8e:50:37:5b:2f:9b:1b:20:38:be:a6:c1:6c:
5d:58:e2:b9:ba:52:96:9a:6b:8b:5f:4b:5d:9e:49:
51:81:b8:a1:a7:c3:1d:a1:66:89:eb:56:c8:11:39:
a0:68:32:62:52:f3:90:32:07:53:30:1d:a9:9c:9d:
6c:53:25:34:f6:aa:16:74:b5:48:3a:0a:2a:4d:44:
e2:ac:fe:0c:52:17:7c:8b:a9:ae:ee:de:f8:f0:07:
ea:1a:eb:f3:f7:1e:cb:77:76:75:8b:aa:d8:95:b6:
f9:28:1a:ab:9d:98:b0:da:4a:8f:6f:75:75:55:11:
31:c9:e5:c4:11:59:f5:0b:1e:1b:56:88:b8:f0:77:
db:db:50:1e:2a:d4:ee:e1:b5:80:41:65:11:62:4d:
38:0e:33:a1:6c:c0:ad:5b:59:d9:78:9f:62:45:c0:
93:22:60:dc:c1:5b:dd:7f:b9:99:82:9b:d9:41:de:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:B1:08:CE:66:E7:AC:11:6D:71:EB:C9:5C:C7:FB:83:75:45:F2
X509v3 Authority Key Identifier:
keyid:31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:4e:55:dc:92:7d:96:82:18:96:83:c6:12:82:c9:ae:b8:97:
86:0e:25:d6:45:b2:05:c9:14:9e:a9:7e:ed:4b:65:53:db:fe:
14:f6:90:52:5c:a0:dd:b7:bc:a3:d7:1f:a9:b3:28:af:c8:dd:
2e:0e:81:47:15:a3:df:38:84:67:30:73:4a:af:96:a4:3b:b7:
a1:21:21:78:1c:6a:66:18:46:07:ca:02:e3:ca:41:e8:89:5d:
be:9c:49:aa:89:88:c4:39:bc:aa:15:9a:6d:0f:fd:ff:dd:a6:
ba:16:d2:df:58:db:d9:41:37:55:18:56:30:1e:e4:04:15:50:
34:be:ec:40:02:72:78:ee:56:0f:7f:59:bd:58:af:79:57:be:
8c:b5:5e:36:bb:85:c7:e0:86:e0:90:26:42:1e:fe:e9:0f:66:
34:4a:2a:59:f5:a8:bd:92:a1:52:a6:00:91:84:7d:ff:91:2e:
01:c5:c2:d1:f3:f0:fa:f1:1f:23:8d:86:74:75:0b:db:87:4b:
ec:ac:a4:36:e0:e5:80:fb:7d:52:2d:c2:0d:95:b0:00:89:29:
ff:35:ba:a1:cb:7f:ac:9c:35:52:64:33:eb:21:a1:05:e6:a1:
84:07:a5:93:e1:ad:50:aa:92:4e:70:b6:80:46:3a:a0:f1:5d:
82:56:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:52:01 2026 by rpki-client