
Error: rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
File: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft (raw, json)
Hash identifier: jmRWYTmt71duk6uGCHDblHSzUV8abuNYdWHj0CKCDS8=
Subject key identifier: 81:28:53:F9:BB:FE:4A:5E:7C:60:78:8F:05:AD:DF:C8:13:BD:26:00
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: 056A
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
Manifest number: 0557
Signing time: Sun 11 Oct 2026 03:20:05 +0000
Manifest this update: Sun 11 Oct 2026 03:20:04 +0000
Manifest next update: Tue 13 Oct 2026 03:20:04 +0000
Files and hashes: 1: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl (hash: tjt+6HSjAtbwsqe6V5wTxZplyjFm7T15jY5ta79M/mQ=)
2: 82219ECEA8E511F097F863D3DAE4EC9C.roa (hash: bcPInogd3xIR0s3sTN2It6IQWCB3KAgCeLuGiSvLwas=)
3: FEDC02C25C0711F0B890E9F0DAE4EC9C.roa (hash: qe7/Ho3hjXx1p+1X+gIsJxiQFYRX/3+okpR+BwibaKg=)
4: E3C267F25E4F11F0940EFC9BDAE4EC9C.roa (hash: /diZHt8dfDU8ymyLaJDOGusaWBebTUtvPjH5WbW4syU=)
5: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (hash: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=)
6: 99141D08576111F080D583A2DAE4EC9C.roa (hash: cQTA6aPVu1R9IwPCQ/9eGLXpsOsSHn6GFJCWQdw5Yp0=)
7: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (hash: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=)
8: A8DB4ACE60DD11F0914539B9DAE4EC9C.roa (hash: Si/TX7Gk5wKi7Q8cmheHqqKR3iXrshzEj+Q8MY2UZ+M=)
9: 072D1082576311F088413DABDAE4EC9C.roa (hash: kdbBEJRsB56bxxE6rksSixZh/DLbv8XJMoYIBLPc8/g=)
10: A3FEFCB0577A11F0A98CD3C1DAE4EC9C.roa (hash: qgOiHPxC/Z9pgaIJ8OipsoRNTQGJykYjhiWofc3it3c=)
11: EA8394FEA84011F0A123C6ADDAE4EC9C.roa (hash: BlN6ZCd0jXJwuiZMNu47rtCr+FOtsw3oe++3RgGL1q4=)
12: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (hash: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=)
13: FE51ED62582911F0BD53CEBBDAE4EC9C.roa (hash: KhWFDo0vWu06AyFmvRpE1g14Vu+Rmq4RukcLEVcErN4=)
14: D69EE072B2FB11F0B7B245B7DAE4EC9C.roa (hash: qpCOGOVOdGPaWFwLUvwVE5eduGEP3cZDJGPFiGA53VI=)
15: BC741E48575B11F09D18457FDAE4EC9C.roa (hash: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Oct 2026 00:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Oct 11 03:20:04 2026 GMT
Not After : Oct 13 03:20:04 2026 GMT
Subject: CN=6acb0065-9d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:fa:19:33:a9:fa:52:65:91:5b:15:57:55:
f5:9e:f1:09:1b:96:69:74:df:7a:77:6c:b9:c6:dd:
c0:ce:7a:74:20:80:da:62:52:36:87:d2:52:8f:9e:
55:56:6d:32:1f:5f:a8:5c:bb:24:4c:e1:5e:b8:89:
16:ca:3a:c4:98:82:fd:ba:d2:ee:e7:85:aa:de:fb:
08:7f:86:e7:12:0b:d3:25:7f:b5:47:dc:61:99:c6:
f7:9b:24:57:71:db:c8:08:0d:bb:c3:5b:1a:ae:06:
51:c0:68:4a:2b:b3:d2:f3:ef:df:98:23:d2:55:bf:
a1:4f:af:c9:01:fc:42:a2:0f:9c:02:82:6e:0b:8f:
e3:79:c3:c8:bd:54:b5:f4:60:64:24:6f:53:54:ec:
2b:19:69:e9:6c:b9:1c:c5:74:97:b5:d2:58:23:2e:
68:c4:c5:48:fa:d7:a1:f6:ad:a0:d3:0c:2e:d7:90:
28:4f:2b:c5:a6:4a:a8:02:33:20:ad:0b:9f:8f:68:
9b:a7:75:86:31:82:1b:a3:1e:be:84:d2:16:86:21:
64:15:15:c5:ed:ad:57:c2:6e:98:16:8e:6c:9e:98:
10:bf:2b:5a:f6:b0:ed:d9:47:0c:8c:d3:ba:50:be:
98:03:78:78:d0:17:11:6c:02:ff:76:9d:da:7f:55:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:53:F9:BB:FE:4A:5E:7C:60:78:8F:05:AD:DF:C8:13:BD:26:00
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:5d:ab:19:44:5a:f4:c7:84:bb:96:2c:0b:1e:f2:bd:9e:
5f:e3:86:06:86:a3:13:ba:98:ea:02:cf:c2:e0:28:72:32:0d:
56:75:65:b9:85:d6:1b:f4:83:78:b6:2e:47:91:23:e1:21:01:
ac:9b:97:6a:c4:70:07:ce:da:a6:36:ec:e4:cd:ea:44:db:4b:
30:5f:9c:90:b0:77:fa:36:7b:ca:77:f1:d7:25:82:f9:27:4e:
24:9c:5d:25:5a:22:97:75:5f:a8:f3:32:21:64:40:b4:4c:04:
c8:5e:8f:1b:a7:bf:b2:8a:90:48:7e:fe:21:76:14:63:b3:bf:
01:fc:22:b8:69:ad:3e:ef:ee:8b:9e:5c:87:7d:06:c4:37:eb:
5f:77:d9:84:25:64:32:98:1f:b2:fa:e4:c5:40:9e:66:ff:e3:
4f:ce:37:ea:c6:b0:c5:86:02:9f:67:e6:97:60:dc:ee:9e:77:
7d:ea:b5:b3:f3:15:8f:ea:a2:77:1d:c3:2b:50:f7:81:b9:33:
5b:39:e9:37:7e:e6:c0:d3:9b:fd:e0:35:c3:2c:b6:7c:cb:22:
d9:83:f8:c9:54:f5:71:3e:19:96:30:b0:eb:53:f3:11:d7:29:
f1:65:cf:b0:e6:3b:61:78:0c:ad:aa:fa:7c:7c:4e:d0:53:3e:
7f:81:0f:13
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBWowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yNjEwMTEwMzIwMDRaFw0yNjEwMTMwMzIwMDRaMBgxFjAU
BgNVBAMTDTZhY2IwMDY1LTlkMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDSPoZM6n6UmWRWxVXVfWe8Qkblml033p3bLnG3cDOenQggNpiUjaH0lKP
nlVWbTIfX6hcuyRM4V64iRbKOsSYgv260u7nhare+wh/hucSC9Mlf7VH3GGZxveb
JFdx28gIDbvDWxquBlHAaEors9Lz79+YI9JVv6FPr8kB/EKiD5wCgm4Lj+N5w8i9
VLX0YGQkb1NU7CsZaelsuRzFdJe10lgjLmjExUj616H2raDTDC7XkChPK8WmSqgC
MyCtC5+PaJundYYxghujHr6E0haGIWQVFcXtrVfCbpgWjmyemBC/K1r2sO3ZRwyM
07pQvpgDeHjQFxFsAv92ndp/VfpbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgShT
+bv+Sl58YHiPBa3fyBO9JgAwHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTU5MUMvNjcyMzU3RDRDMjQ3MTFFRDk1OTc5MEEwRjEyMjI0
NjgvM1A2amhIY2kwdjdIb0RucGtEajNVNEpaMERFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHW12rGURa9MeEu5YsCx7yvZ5f44YGhqMT
upjqAs/C4ChyMg1WdWW5hdYb9IN4ti5HkSPhIQGsm5dqxHAHztqmNuzkzepE20sw
X5yQsHf6NnvKd/HXJYL5J04knF0lWiKXdV+o8zIhZEC0TATIXo8bp7+yipBIfv4h
dhRjs78B/CK4aa0+7+6LnlyHfQbEN+tfd9mEJWQymB+y+uTFQJ5m/+NPzjfqxrDF
hgKfZ+aXYNzunnd96rWz8xWP6qJ3HcMrUPeBuTNbOek3fubA05v94DXDLLZ8yyLZ
g/jJVPVxPhmWMLDrU/MR1ynxZc+w5jtheAytqvp8fE7QUz5/gQ8T
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:29:10 2026 by rpki-client