
Error: rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File: kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier: o1qhmBNZIKXsfhF7eL6RZPrx+ZCAU7mLz/Bl+/z2mA8=
Subject key identifier: 41:F1:43:3D:8B:8A:01:DD:1B:9C:C4:5D:23:8A:09:77:ED:0A:DA:17
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer: /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial: 0172
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number: 0167
Signing time: Sun 15 Nov 2026 05:16:31 +0000
Manifest this update: Sun 15 Nov 2026 05:16:30 +0000
Manifest next update: Tue 17 Nov 2026 05:16:30 +0000
Files and hashes: 1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: 581PkBji+fEY21QtTMeGfj5jdWBb5S0YLxDFJnRAhuo=)
2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Validity
Not Before: Nov 15 05:16:30 2026 GMT
Not After : Nov 17 05:16:30 2026 GMT
Subject: CN=6af9402f-16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:41:1c:33:fd:eb:46:1c:d6:be:62:e5:eb:
a2:f3:1a:51:53:e1:c5:6b:5e:87:a9:0c:21:71:04:
64:0e:6f:cd:4f:bb:c6:48:33:09:04:fa:35:51:95:
71:61:4d:32:77:02:d1:b5:24:59:1d:49:cb:33:c4:
7c:8f:10:3e:79:b4:d6:1b:8c:db:a3:7a:23:eb:99:
b8:3c:63:22:c1:80:eb:64:1f:7c:e8:7c:1c:8f:2a:
02:d6:c2:24:77:4c:8a:7f:95:36:92:e0:2e:5f:64:
f2:60:98:be:bd:cc:cc:28:1c:96:1a:23:e8:0c:28:
21:d8:0e:8b:8f:f9:ac:0d:4a:f9:3b:4a:8e:94:29:
0d:aa:dd:ff:ec:a2:fb:06:3a:43:d7:dd:66:a4:b4:
7b:fb:16:2f:4f:fb:12:8e:3d:77:52:91:f1:53:85:
3b:12:cd:d6:40:19:0d:68:05:46:9c:74:de:05:4a:
ef:e8:ee:8f:55:a5:a7:9c:74:32:0e:7e:a2:d0:a4:
ae:ee:96:5a:64:76:9a:1f:38:ac:9c:a8:3b:76:9d:
0b:58:be:e7:69:8d:7d:9c:03:14:b4:0e:86:b5:09:
9d:fe:18:2e:33:b7:1f:5c:93:d9:27:15:08:dd:c1:
e1:e7:2c:4e:51:0f:c8:ae:5f:35:d8:1e:53:62:78:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:43:3D:8B:8A:01:DD:1B:9C:C4:5D:23:8A:09:77:ED:0A:DA:17
X509v3 Authority Key Identifier:
keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:c6:46:ec:b1:3e:08:94:4a:4e:ee:78:69:42:fc:20:43:
93:6e:99:ff:cd:b7:5f:22:c8:99:2b:dc:eb:ef:21:fd:f5:b7:
6f:b4:f0:34:b3:e9:73:36:70:e7:99:27:b9:09:f7:64:cf:a5:
6e:bf:f9:ed:eb:a0:3f:fa:31:87:19:5a:29:84:f9:59:30:ff:
a8:bb:52:68:cd:b2:ca:07:70:e5:55:95:ca:24:18:e4:9e:c8:
b6:e4:3d:29:6c:00:0f:2c:82:1e:ba:46:89:a0:81:67:cc:fa:
37:0b:28:a6:1e:e2:ff:f1:52:34:73:1f:6a:3b:3c:46:c3:bf:
a4:80:19:99:a5:4e:7e:fe:36:4f:f9:ba:38:9b:8c:d2:bf:88:
92:6d:82:2c:bd:81:83:97:0f:6f:a1:a9:8b:cb:37:73:0f:66:
ff:cf:9d:78:7d:47:a7:da:59:03:ea:a2:93:00:76:db:10:c8:
a2:b8:2c:c7:d0:cc:24:c4:d4:75:59:a5:df:6f:41:d7:4c:33:
bd:1a:dc:48:9e:2c:80:ba:4d:f3:b9:65:de:e4:06:c2:f3:7d:
02:bd:82:65:9d:05:ff:3e:f2:2c:53:a5:40:fa:51:e3:a2:b4:
db:e2:18:c7:22:df:9c:21:fa:7d:bc:9d:70:6f:8a:8b:03:ef:
7c:59:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:12 2026 by rpki-client