
Error: rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File: ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier: DftPeQUwrNrvfjSi/ZDgqYgNglq6MjWlhtYXKPOcp30=
Subject key identifier: A8:0F:CA:E0:A9:CE:12:24:55:EB:4C:1F:5F:53:E8:26:B7:C0:D9:74
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 0595
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number: 057E
Signing time: Sun 15 Nov 2026 03:17:27 +0000
Manifest this update: Sun 15 Nov 2026 03:17:26 +0000
Manifest next update: Tue 17 Nov 2026 03:17:26 +0000
Files and hashes: 1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: tCEtmZHmwSABj9mH+EbNI+S2KYzz0EI/Uy6YQ0DrBNg=)
2: 9884A7A6DC1611F08554FAC6DAE4EC9C.roa (hash: gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=)
3: F67B1080078511F1A61271C3DAE4EC9C.roa (hash: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=)
4: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (hash: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=)
5: C8A598A47F3D11F093F96AD7DAE4EC9C.roa (hash: SX7VFRi6fja/lVzFn5u30dJTc0ojT/jkc4MDx+ibGA4=)
6: 317186825E5911F0BF0E56D6DAE4EC9C.roa (hash: 6apzxpSV9toddFW0ywLW65SIvt6/6D8w0xhl0KtVvGE=)
7: 5A6198AED59411F0985D177EDAE4EC9C.roa (hash: PE7nKz1fS34J7ek36L+PYwmWDnMXZGfg9zXwU8sOHbs=)
8: 1FD4E33E881A11F0B7B498A6DAE4EC9C.roa (hash: fsPwiXCwWpyl3VMVIS2dW1m76owZ/IrLRf2lMDpLzbU=)
9: 658663044E9D11F1B9523EEDCE1D38B0.roa (hash: N/DWLujuKv3pb5Dgqai2QU5o1RyKed2CARH+avVSMT8=)
10: 5C48C5E6D59111F0A35986E9DAE4EC9C.roa (hash: Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=)
11: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (hash: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=)
12: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (hash: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=)
13: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (hash: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=)
14: 36EA05F2D59711F0822F868FDAE4EC9C.roa (hash: EojrboZehKIGXK2BaidudpldxYrlMEfVrQIxHcWgYWc=)
15: 002215BE68C711F180D0CEFBCE1D38B0.roa (hash: v5F6X6ITuLHIHFcWFhURETKbMJ28InX1tSbdWhh89yc=)
16: 7023BF7ED59811F0AECA0E99DAE4EC9C.roa (hash: 0M4moWZIc1pWgW115yDoCQcKwuM3v5jTr3xkTdFI04c=)
17: 2CC09D9AF79B11F0B2CC95F0DAE4EC9C.roa (hash: GqpKo6qbPlIx2jVnFfAJCJZciNlgCHzuokWLGajhcgA=)
18: 3F8563360B3011F1952D8DD1DAE4EC9C.roa (hash: ywRwAGyvq53R6hNtJgtpMHcYkRZeZDea56O4hCBnArk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Nov 2026 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Nov 15 03:17:26 2026 GMT
Not After : Nov 17 03:17:26 2026 GMT
Subject: CN=6af92446-950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:4f:14:ba:7f:51:b3:ea:77:63:10:18:31:
38:4b:4c:88:35:c8:4b:a4:a9:2b:8b:e0:bc:90:3b:
7f:9a:23:95:a6:78:b9:2c:7c:30:b1:cb:26:62:c4:
94:33:b2:35:f6:4e:53:58:0e:64:bd:f2:78:0e:1a:
49:a8:fb:28:a9:6f:d8:19:ea:41:2d:0b:71:cc:0b:
fd:30:0b:2e:d4:bc:61:bd:e3:51:26:f2:e9:63:c8:
a3:22:a0:ad:f9:6b:86:86:5d:73:23:a5:ac:a8:06:
7e:8d:7d:eb:7d:c4:f5:18:37:f9:9f:17:f7:7b:78:
20:c8:ed:be:08:91:22:9d:b7:62:ec:f3:64:ac:31:
71:01:65:1a:2c:cb:83:f5:89:67:9f:e6:44:4c:d0:
ce:1c:74:04:8d:3c:b1:5c:e4:d6:d9:26:2c:23:84:
30:1e:e2:f6:4b:0f:c2:af:a7:cb:78:82:16:fd:e8:
7f:98:87:42:29:96:b7:ec:2e:3e:d4:fb:84:42:36:
92:85:c5:15:4f:d5:32:a1:e0:29:24:b3:a0:8d:32:
90:a4:c5:83:d8:57:b1:9e:74:b2:f9:3d:2e:74:6f:
c2:b1:e9:3c:09:d9:54:00:fa:d7:e1:94:74:90:bb:
56:c7:c3:cc:f3:a0:2d:8c:a6:c1:8a:b7:4a:cb:dc:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:CA:E0:A9:CE:12:24:55:EB:4C:1F:5F:53:E8:26:B7:C0:D9:74
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:d3:0c:7e:67:59:2f:9c:23:e3:7d:1d:64:e6:c1:a5:fd:
a2:59:7d:51:19:da:9a:fb:f4:a7:23:b7:03:2b:10:de:ee:20:
9c:22:8c:33:ac:f7:e0:fe:88:90:f5:f1:6b:1b:b5:10:4a:ef:
f3:ad:eb:3b:82:d3:34:31:85:6d:bf:20:cf:90:0f:9b:6f:3d:
d2:37:de:ce:f8:9b:61:65:0a:e8:bc:9c:bb:3d:af:1a:6b:cf:
99:5c:91:14:84:ee:d4:3b:e4:ca:0c:90:1b:f8:6e:42:ec:1b:
99:3e:8d:48:28:5a:9c:b6:d4:b1:5d:9c:28:31:45:53:1e:a5:
52:45:10:c0:36:09:cf:9d:66:b8:cd:63:d8:21:2c:14:d4:d4:
12:e1:26:69:44:2b:84:66:cf:c2:9c:0c:05:f6:7b:dc:91:38:
83:17:74:0b:31:3c:9b:5e:27:49:6b:4c:84:7f:da:54:f1:d8:
70:fb:8b:12:52:86:7c:96:15:d1:67:1f:c3:9c:06:60:6b:4e:
c3:a3:a8:53:47:4c:bf:0c:2c:73:1d:75:c4:06:98:3f:14:f6:
3f:76:1c:10:32:48:4e:1b:e8:4c:a0:4a:29:25:5f:00:32:bf:
d6:5d:84:a0:e6:4f:d0:00:29:04:2c:cc:31:7d:d6:b4:47:d2:
58:1a:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:20:06 2026 by rpki-client