
Error: rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File: T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier: wWu8VkcAhWyt9FE6pB7qVPRwxRGci2aWVrXjodlhJF4=
Subject key identifier: 41:CF:92:93:AF:0A:9B:6B:35:B8:6D:5C:FC:6E:2A:47:6C:91:2D:2A
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer: /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial: 040B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number: 03F4
Signing time: Sat 14 Nov 2026 04:04:53 +0000
Manifest this update: Sat 14 Nov 2026 04:04:52 +0000
Manifest next update: Mon 16 Nov 2026 04:04:52 +0000
Files and hashes: 1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: mklNdWx5Mj2rDbMlTGRgSXI7Z1lttVRSAH525Iyb7aM=)
2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
11: 156898525F5911F1BE0CD5B2CE1D38B0.roa (hash: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=)
12: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
14: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1035 (0x40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Validity
Not Before: Nov 14 04:04:52 2026 GMT
Not After : Nov 16 04:04:52 2026 GMT
Subject: CN=6af7dde5-decf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:e0:cc:6c:e8:5f:ba:cd:38:c4:6e:4f:3c:
dd:6c:b6:5a:e9:6a:bc:59:65:f7:17:09:b1:80:f8:
c3:b5:c5:a8:90:84:28:9b:eb:7c:67:bd:ca:39:1c:
95:1d:02:18:90:88:c7:62:67:01:96:66:28:7b:66:
87:6b:1f:8d:b9:e3:2d:de:d6:52:2d:82:cf:0b:e2:
95:cb:d2:a9:58:20:09:e0:c4:c6:03:44:67:c8:a4:
3e:61:ef:aa:69:50:bc:34:c0:b1:13:7f:66:40:6d:
27:83:83:56:35:21:67:82:51:c2:a6:4a:a7:b8:fd:
bc:30:3b:6e:81:82:84:76:60:6b:b0:c2:ad:a3:d7:
2f:a8:1d:43:56:ba:d1:8a:87:85:83:2b:a6:10:30:
72:01:8f:1a:bc:ab:56:4b:0c:49:94:ed:ec:51:8a:
b4:7a:ec:22:6a:d7:c5:b8:45:d2:e2:aa:52:27:fd:
10:d5:3c:22:99:02:db:3c:43:40:f4:09:f6:a9:10:
31:8d:d9:08:72:e6:a8:c0:ef:f8:c8:95:71:bb:4f:
03:98:ee:80:6d:c0:46:b6:b9:74:34:eb:c9:89:8e:
35:37:82:73:a5:77:74:83:e9:88:fc:de:0c:80:b1:
02:4e:0b:b7:7a:16:7c:29:f3:02:28:cc:c4:f8:65:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:92:93:AF:0A:9B:6B:35:B8:6D:5C:FC:6E:2A:47:6C:91:2D:2A
X509v3 Authority Key Identifier:
keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:8e:33:49:23:cc:69:82:7f:c0:7b:45:c9:82:9f:d1:cc:
04:7d:24:61:34:ae:6a:a8:0e:69:79:df:e3:4b:6f:95:68:ac:
ab:78:a7:cb:53:2c:ed:5f:4f:ce:dc:f8:fc:4e:3e:78:a0:a2:
20:e8:b5:a5:d7:79:ea:a3:38:28:f0:c3:20:8e:39:22:9c:5d:
09:1f:71:a5:86:c8:26:c0:ef:d9:be:5d:20:c1:f0:5f:ee:74:
51:7d:10:50:31:83:e9:d7:9b:16:d8:89:0b:5e:69:e4:5f:31:
de:14:f6:cf:c6:60:ee:bb:fa:dc:64:9f:bd:fe:ac:ad:f3:33:
66:fb:54:f1:3a:3b:f1:30:88:1a:5f:3d:90:1a:f9:b5:51:53:
f5:34:c6:52:96:af:99:89:5b:f7:7b:f7:b2:02:c9:66:b7:1a:
a6:fa:de:27:fb:89:08:0b:9f:f8:32:98:60:74:bf:d9:b6:38:
f1:ca:20:92:8a:64:c0:3e:a5:85:ed:61:d6:5e:21:64:6a:c0:
30:90:b4:05:db:51:0a:ac:5a:5b:5d:0a:f4:ce:fb:95:6f:04:
a6:c5:d0:a4:d5:3b:17:4a:33:7e:cd:da:5b:80:45:f2:ac:53:
43:a4:8a:a1:0a:b1:8f:5c:12:17:bb:cb:bc:80:7c:b1:8e:4f:
45:6d:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:35:56 2026 by rpki-client