
Error: rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
File: ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft (raw, json)
Hash identifier: 5by4h+KtNwHzt7xxlzTT2B7yWdE0WoD9yTIsbtB5PEs=
Subject key identifier: A7:21:5D:E0:9A:33:6D:13:2C:9B:C8:F5:6B:1C:B9:F8:C7:4D:30:EA
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 09DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
Manifest number: 0997
Signing time: Fri 25 Sep 2026 01:49:53 +0000
Manifest this update: Fri 25 Sep 2026 01:49:53 +0000
Manifest next update: Sun 27 Sep 2026 01:49:53 +0000
Files and hashes: 1: ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl (hash: Jvbp8OuIQLVAOGmAFd0q87kkEyZSAgGWcbTmxH0wCKE=)
2: 83E3D206DB3811F0B374F4DBDAE4EC9C.roa (hash: 34qjKxpSW0bIH6PWUpdvDjDm4+YGbEyAh1sydxcdIW4=)
3: 0332F694AA6211EA84373977F8AEA228.roa (hash: yMasz+8upXI4SIFaRoZw+RpsGMpU6WZH5rMWZCIkVjo=)
4: 758A5BAA8A4511F1A5ADBB1ECF1D38B0.roa (hash: 24EItAQeYoSQjN7R05LPu88iXCg7Xj6qZC9JE2CA5ZI=)
5: 26AD8020AA6311EA980D3F78F8AEA228.roa (hash: R2I0hzQ1e4OGon8XpJKR9+TlMctYJ1LPf4tv+dTnV58=)
6: CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa (hash: /I1CiGW7sqLqxLCpz1psQMD55EuJb7Kf2dj2xcmkfIw=)
7: 794365BC8A4411F1AD15F715CF1D38B0.roa (hash: EaXFvV0nbSRI+dWTnMCUBVPvSZbxEdHX8aL+blDZ2ds=)
8: 348608D48A4511F1B7909D1ACF1D38B0.roa (hash: bTsyMSJ9AGxaLnr15//My4xyTfYU4xOgd8A/ZOKcpRw=)
9: CE535E928A4211F189EF6D0BCF1D38B0.roa (hash: pqTD5vuIPNYosoVcIXRuexj718OErf0Go9H98dOWALo=)
10: 7A8BCDA0AA6311EA87579978F8AEA228.roa (hash: DUrpypV88Thv9XkaKmM6uSQbHs7esXZAI31rKEisAJU=)
11: 8ACB3F388A4611F19B154EA5CE1D38B0.roa (hash: Or5JdewyBtD5G+RUQL6fWR9lIWKjItl4UD71JHXPcW4=)
12: 1EAA28D08A4311F1B80C860DCF1D38B0.roa (hash: y7oDSkY4VJRwd1DmzUhjmZxjs7eS7XYQV0LhmqyW5j0=)
13: CFF3DA5AAB0111EA8A90371EF8AEA228.roa (hash: Hrsy3AtcUPHIAPrhTXMj1kgvV7iogmndM1wleGxNNGQ=)
14: 235841308A4F11F18D3580DBCE1D38B0.roa (hash: 6xKGVfk7UGI0E4XQMdLh3B8fcITtYs2m7LJMHPvMuYs=)
15: CBFB5E548A4411F1BE53281ACF1D38B0.roa (hash: IpRkc/eCZ12PyWVeOxAIwFy3gBAvmVRQx/VDfgfh9+4=)
16: 622E917C8A4311F19934E50FCF1D38B0.roa (hash: 09wAq0k14UAMG0dZdGjRyMaD2s85j0ILxfKvfzbeqqk=)
17: BC328368A98F11EA845E9024F8AEA228.roa (hash: aEfS+TbQUG5zLx1MMdMyJUk14wIR04mV1qJ0EnnZ2A8=)
18: C4DECBDE8A4311F19F345010CF1D38B0.roa (hash: 9qzrv0z0up9hG0YxeA3JsDrQkz673sG89pHN/ZEXEqI=)
19: CB98CEA6AB0211EAA6F7361FF8AEA228.roa (hash: ZSYd6jvBelLZFAaYVZgMWbWwLloGNnY8ZF/wD9hbGBg=)
20: 03AFDF00AB0311EAA3AD8C1FF8AEA228.roa (hash: sFzYJqYLs5ONLQlckUmbZswzqVXiB3p2Q/pIoyHdJqo=)
21: 17A32854AB0411EAAB629C20F8AEA228.roa (hash: zKsQRMdOIyFs+FKhpUrD4nBlHSqKt3S3BGmcS2sRh5Q=)
22: 70C0347C8A4111F18F253F02CF1D38B0.roa (hash: YquXEas7ZBrf+wE8oD5kf3nqV/72UTlW3zUn0oy/Ekg=)
23: 697BEAA28A4211F18A0A2E07CF1D38B0.roa (hash: TxeYvE2svOHXXKaIzw1V+oxLLKooPiZ+jn6gQo4VQHY=)
24: 6C4D89A6AA6111EAA182A376F8AEA228.roa (hash: LzwfcfPXYn9F1fPoqK07og6GatpFFd+at5aM7HIpiWg=)
25: A1C08CEAAB0211EAA396101FF8AEA228.roa (hash: mUdyM8jVbZOdUnYstWhFSJu3Gnm/9gnZidIzSu9DdSk=)
26: 7DE1A76EAB0211EAAA00EB1EF8AEA228.roa (hash: UgPlrfbrOUaa0Rure5sbCm3BbNQUJaDxeb/7KDVdWw8=)
27: 16C311B8DB3911F090B142DEDAE4EC9C.roa (hash: oTycKqiylbUdKMVCBD4pMuYdWpoylPqw/eqePPTrrvM=)
28: 27594B14AA6111EAAF3E7076F8AEA228.roa (hash: +UBoLDHhSRyhcHLCtlW120zF9c/uBcAoKI/HhyjUO+w=)
29: FB5B5E368A4611F18D08BEA9CE1D38B0.roa (hash: IdnrnbxLYMGAupUWenScYIJS1+LHtvTrZ8RfUxIlT+4=)
30: 18FADF668A4211F18551D206CF1D38B0.roa (hash: EFJNW77UkwO/Yngz5FbqiyR5Ry/RF/ED8FRHoJ+2vJ8=)
31: 8BE390348A4E11F1974E9BD7CE1D38B0.roa (hash: dYWR83J9ueuelQlYPVArf9FEBr0YptiSUEfg4k+4kTc=)
32: 60F2D4AE9CDF11F182826801CF1D38B0.roa (hash: 5jdWkPJIVEsx6JLNtRPmkv4TfL/Ck5yB9tdpZvkN57E=)
33: CD69990AAA6111EAAEF51077F8AEA228.roa (hash: 66nblc4vo3caJGaaXr6x5DjXPXoBEzrDDtb7jGf9pro=)
34: 9B3D63248A4011F19E1D6CFDCE1D38B0.roa (hash: bvYS8sDyf/jLqRVSjUjEvL4gxQODnKRCXkw2SMtP3BU=)
35: C30FE1AA8A4111F18F845804CF1D38B0.roa (hash: 0w2pBxJGHrWLLP5IlGjUNIzw0pKRBe3sWcp7KEVqGbU=)
36: FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa (hash: qb6gHGUgXuVKr5ZhHivPalyPRVNxfgUbZGkYrEhffk0=)
37: 136264948A4111F1AAD3B7FFCE1D38B0.roa (hash: l9tPXd5PIw8Caba0foe8eNLmSzVDNfZcXDHlsYOrIgs=)
38: 131322BE8A4411F1B3708715CF1D38B0.roa (hash: nFxPUQrhLpzyZT2u0OdSzLBcFLdzL3hx+ams0/B9I44=)
39: 79BCA104AA6011EABF54BD75F8AEA228.roa (hash: 2Qz+ljxijYcdl6kPi9I4CTsUSzVdMruUcWGLCSgT+a0=)
40: 8B17DADAA98F11EAB9AA6924F8AEA228.roa (hash: KYYTpk99AQONppdJtauPNE8kMIyequZ2O2Wm6wTUshU=)
41: E78772EAAA6011EABE292F76F8AEA228.roa (hash: RVdCn6tQheyeYPxX1TwMkUOiKylOKn/PBjrul9+GwyY=)
42: F08DC35AAB0311EAA2FC7020F8AEA228.roa (hash: ZkcsfNFonZHY0l0CGy37g2maUdxSkH07LKPBv7Ii97w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 01:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2527 (0x9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Sep 25 01:49:53 2026 GMT
Not After : Sep 27 01:49:53 2026 GMT
Subject: CN=6ab5d341-571b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:1f:de:ec:20:d8:ab:b1:bc:44:16:d3:8f:
ff:59:b7:57:ba:9f:63:10:b7:54:14:86:2c:c9:97:
c6:1a:7f:4b:2a:35:a7:73:86:4c:39:71:d4:9a:8d:
5a:2f:46:68:69:66:41:7f:1f:a8:ce:cb:90:6b:19:
e7:91:76:7e:ef:5a:49:45:22:91:54:ce:f7:be:94:
7a:7a:3b:d6:b0:92:25:06:46:e5:bd:87:8e:e8:30:
b8:7d:80:e8:d9:1c:b3:8d:9c:a8:43:74:68:79:f1:
fc:72:92:5d:d5:8f:6b:62:22:8a:4b:04:3f:dc:87:
19:4e:75:ae:51:18:3f:71:e3:6c:86:18:31:da:49:
0d:09:db:43:d8:fc:f1:ba:75:07:76:70:25:12:08:
c4:4f:26:f4:74:99:d0:3f:6a:05:30:a1:83:42:96:
25:3c:87:90:dd:11:f1:e8:01:99:9a:32:bf:18:26:
8b:24:81:f8:8a:00:00:ca:32:97:3d:14:5d:51:bf:
a9:a0:5f:74:fb:58:7a:49:db:bb:15:5c:4a:f9:3f:
15:0b:cd:b2:2f:34:bd:99:33:c5:89:30:e0:57:65:
01:f4:f4:92:bf:97:27:67:67:29:58:67:d1:06:5c:
e5:64:fb:23:70:76:5d:f9:f6:d5:0c:dd:b3:0b:4c:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:5D:E0:9A:33:6D:13:2C:9B:C8:F5:6B:1C:B9:F8:C7:4D:30:EA
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f5:e0:d3:ea:e6:eb:d9:07:2e:03:04:6e:9c:57:6e:ff:7d:
03:9c:07:e1:67:74:87:2a:71:67:70:c8:a0:88:81:9f:c3:79:
cc:85:f5:cb:75:d2:dd:17:3d:7b:ef:97:bb:6d:83:0d:9a:ca:
46:0d:fe:b2:73:ae:d3:15:04:ca:cd:25:82:37:cb:e5:f0:f6:
9a:1f:4d:9c:e3:5f:6e:27:12:5f:ac:c6:4a:c0:95:ec:d2:8a:
50:2a:10:10:78:4a:b2:94:99:b0:bd:2c:30:52:d8:28:a8:75:
b3:57:fa:b7:e6:61:c5:6e:3c:4d:49:b7:15:6c:ae:64:67:be:
a3:70:05:fe:27:95:82:93:d8:70:18:f0:90:f3:ca:79:87:7f:
23:f2:6b:83:bc:25:92:1a:f9:29:07:ee:a2:37:49:54:dd:4e:
b4:c6:63:80:28:72:4c:21:60:03:c0:bb:1f:10:9f:f6:c9:0e:
35:16:39:65:ac:dc:d0:cf:0b:04:45:0d:72:95:d2:76:83:b3:
b2:0a:73:a3:f6:57:1d:53:71:9b:e4:74:db:26:39:65:bd:37:
26:b4:87:bd:80:6c:95:45:8f:37:36:c6:73:94:95:5f:9f:e9:
13:ab:7d:fa:e0:c5:f5:0e:3f:ef:a1:f4:73:f4:b6:d6:85:99:
f4:11:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:07 2026 by rpki-client