
Error: rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File: ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier: zqMGcehEPTFnTpFYL3c3tg22Es3roiDUKVMbQMRGBRA=
Subject key identifier: 6D:AC:37:3F:98:92:FE:F4:2F:C7:EC:F8:57:73:B8:25:DE:05:EF:35
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 0563
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number: 054C
Signing time: Sat 26 Sep 2026 03:19:20 +0000
Manifest this update: Sat 26 Sep 2026 03:19:19 +0000
Manifest next update: Mon 28 Sep 2026 03:19:19 +0000
Files and hashes: 1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: rV46mak4LEx9xVbBUl8Wp5gf4Vpqd6dQjd+IpRsh1nE=)
2: 9884A7A6DC1611F08554FAC6DAE4EC9C.roa (hash: gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=)
3: F67B1080078511F1A61271C3DAE4EC9C.roa (hash: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=)
4: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (hash: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=)
5: C8A598A47F3D11F093F96AD7DAE4EC9C.roa (hash: SX7VFRi6fja/lVzFn5u30dJTc0ojT/jkc4MDx+ibGA4=)
6: 317186825E5911F0BF0E56D6DAE4EC9C.roa (hash: 6apzxpSV9toddFW0ywLW65SIvt6/6D8w0xhl0KtVvGE=)
7: 5A6198AED59411F0985D177EDAE4EC9C.roa (hash: PE7nKz1fS34J7ek36L+PYwmWDnMXZGfg9zXwU8sOHbs=)
8: 1FD4E33E881A11F0B7B498A6DAE4EC9C.roa (hash: fsPwiXCwWpyl3VMVIS2dW1m76owZ/IrLRf2lMDpLzbU=)
9: 658663044E9D11F1B9523EEDCE1D38B0.roa (hash: N/DWLujuKv3pb5Dgqai2QU5o1RyKed2CARH+avVSMT8=)
10: 5C48C5E6D59111F0A35986E9DAE4EC9C.roa (hash: Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=)
11: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (hash: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=)
12: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (hash: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=)
13: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (hash: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=)
14: 36EA05F2D59711F0822F868FDAE4EC9C.roa (hash: EojrboZehKIGXK2BaidudpldxYrlMEfVrQIxHcWgYWc=)
15: 002215BE68C711F180D0CEFBCE1D38B0.roa (hash: v5F6X6ITuLHIHFcWFhURETKbMJ28InX1tSbdWhh89yc=)
16: 7023BF7ED59811F0AECA0E99DAE4EC9C.roa (hash: 0M4moWZIc1pWgW115yDoCQcKwuM3v5jTr3xkTdFI04c=)
17: 2CC09D9AF79B11F0B2CC95F0DAE4EC9C.roa (hash: GqpKo6qbPlIx2jVnFfAJCJZciNlgCHzuokWLGajhcgA=)
18: 3F8563360B3011F1952D8DD1DAE4EC9C.roa (hash: ywRwAGyvq53R6hNtJgtpMHcYkRZeZDea56O4hCBnArk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Sep 26 03:19:19 2026 GMT
Not After : Sep 28 03:19:19 2026 GMT
Subject: CN=6ab739b8-83a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:82:a0:30:15:f6:fa:8d:8b:20:72:97:bd:
77:92:7b:01:d2:86:78:a1:d4:40:c3:a6:56:0d:2f:
a6:de:f6:aa:12:7f:94:e0:46:8c:b8:4e:93:93:09:
81:6f:7e:ca:78:68:ca:4e:f5:ac:06:9d:d4:69:d3:
53:9e:aa:d6:0a:fa:58:a8:12:76:c6:d0:a7:92:c6:
66:7f:db:1d:f2:dc:45:1d:8e:e8:b2:ef:1f:e4:a1:
1c:15:29:09:b4:e3:2c:3f:00:65:6e:19:6f:19:64:
3f:0f:9e:2e:a8:20:4f:8a:41:12:0b:9d:e4:7a:9a:
8a:dd:bb:5a:d4:80:b8:67:68:ad:57:7b:f4:89:3e:
cd:be:36:73:e1:5c:2c:45:d5:3b:1b:52:6c:af:6e:
2e:61:49:74:5c:7f:ff:da:ec:98:2d:0e:54:01:5f:
16:e6:a2:a2:8d:b8:d8:cb:e9:59:58:90:2f:05:69:
48:a2:0b:f3:ee:42:f4:a4:f1:22:85:58:60:ce:cc:
2b:88:af:bc:50:e9:cb:39:7a:5a:74:d0:dc:e6:7a:
35:be:cb:52:f1:b6:53:9a:05:a1:b8:60:2f:75:5d:
63:5a:6b:9a:15:81:11:74:88:1d:9e:a0:9a:21:70:
8c:f8:6e:08:49:e5:a6:c5:04:49:3c:7d:52:69:9a:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:37:3F:98:92:FE:F4:2F:C7:EC:F8:57:73:B8:25:DE:05:EF:35
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:64:b3:c9:a7:e1:90:7a:0c:2c:3a:ec:48:cb:7f:b5:61:
fc:ab:c6:e8:44:2f:86:cc:a0:f3:d6:b9:80:46:95:50:8d:f5:
95:22:ff:b1:20:c5:e1:a9:65:12:9f:3e:aa:2a:b5:88:30:87:
1d:37:03:50:9e:31:08:89:af:34:99:16:b3:86:0b:11:ed:91:
f8:d1:10:d0:46:ab:83:5c:00:9b:13:f6:8c:34:50:a3:76:51:
1e:c3:8d:21:9d:eb:91:3d:1a:d4:10:dc:85:67:a6:f0:22:0e:
44:ea:53:a2:e8:d0:ab:d6:aa:6c:b9:04:0f:69:0b:f2:cc:c2:
f3:0f:59:08:69:22:4a:d7:94:76:3c:4d:ce:a1:dc:09:9d:0a:
59:05:54:03:65:97:30:33:47:b2:fc:e6:eb:32:d7:6f:e5:19:
63:2b:59:8e:41:87:35:64:fc:71:a8:b4:9b:35:8b:97:7d:5c:
07:fc:6c:b2:b5:71:65:be:aa:b1:76:fb:0f:7a:11:a8:c8:e9:
f3:72:0b:e6:27:92:2b:5e:a1:e8:e8:b8:d9:04:72:09:5f:ce:
c7:bc:41:d2:2f:75:5f:01:7c:62:af:77:16:3c:37:17:7b:5f:
ca:66:83:53:4f:f9:e8:09:05:6a:57:18:dc:d4:b5:0d:b3:70:
d6:e6:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:53:39 2026 by rpki-client