
Error: rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
File: U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft (raw, json)
Hash identifier: LIBzCf+XeY9jdjHi+/kStAjx5tEA4JUL+1ZUF1tiNmo=
Subject key identifier: F9:F7:DD:FB:B5:97:99:16:65:C6:91:BB:62:F1:A9:B4:4A:7A:9F:EA
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 06AC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
Manifest number: 066C
Signing time: Fri 25 Sep 2026 02:54:36 +0000
Manifest this update: Fri 25 Sep 2026 02:54:35 +0000
Manifest next update: Sun 27 Sep 2026 02:54:35 +0000
Files and hashes: 1: U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl (hash: jZLVYm1uR2kZkj3t0stT0DqILzEcJgKTh880+IFeeoY=)
2: F37CDD6663EF11F19D9D91A1CE1D38B0.roa (hash: B67fPbeNoppqk9hSAfJscFe0hcg9inACXlUcJcipURA=)
3: 95847CC263D211F1A7398CF0CE1D38B0.roa (hash: eLnrZ20OW+/+TAX2GNAFcO6yJjN9oP7jwLYjX7qMZNc=)
4: 8BB3CD2C63F211F183EC96B0CE1D38B0.roa (hash: QT2dN5QyAj5zmXwnOl8L432zMepTujG3dnHPbEOQoEo=)
5: 4B8D541663CA11F1BE831AC3CE1D38B0.roa (hash: bXc7znb5ZEPejbBo1hmaATzGi2o/yRX/qJJYrw6Fvu0=)
6: 0E73307A63FA11F1A1F0FCDCCE1D38B0.roa (hash: XLqG5GPs5YizqGFdXKEc8GI+WTrCww4tk1kdt4oZRSc=)
7: 1F6044E263CB11F18B094EC7CE1D38B0.roa (hash: jA+jqGSdT4Jt9X0XI+H2ye6u3WTekunF2PsW/Ou42EI=)
8: 6830E0DE63C911F1909C6ABBCE1D38B0.roa (hash: LTcaq+viAgTZopGZOI0Vgv6RTw1bKNW1o2RpYagdufs=)
9: 9426FCC863F111F1937711ACCE1D38B0.roa (hash: a+SC+018xKB4zKNBP7aJ/jbTYhMj1+H6sZj4ZlwjKr0=)
10: 0EE6164863CE11F1A3D0FAD7CE1D38B0.roa (hash: wxtSa4sGkEa4UTR5Un9o7F3thEEYT91zL28hkshdvTo=)
11: 1AD7895663C811F1BA1D28B3CE1D38B0.roa (hash: knxjQz5KfAMltUZ7yx242TRnAUjpoVPD9o4kqV1khRY=)
12: 304638A463F111F19F4862A8CE1D38B0.roa (hash: LCeA3Ev3hShY/XIVNyiR7suSxfGqUt/ds+6exkNeIIM=)
13: 7AE13C2C63F311F195507DB6CE1D38B0.roa (hash: 4D0rGp2zfFCRNZAlK+377CPDM7y7kdeaPeJQfc7g1FY=)
14: 7A6A227A63F011F1888512A4CE1D38B0.roa (hash: 4jptDF4PFQTQqUd71cWIEHE5V47m+xhgm7jMjSt/VwA=)
15: 93BDFB3463FA11F1ACB1CCE0CE1D38B0.roa (hash: fmmkTkTFSuPZFc46BIeku1vPRqMOQfjtlqzTwMfmhXQ=)
16: 99E6EDB063F811F1B30EB6D4CE1D38B0.roa (hash: pLi5fyFa9uNVpQymeq6XRu2Lvwi/kzdsGGt5sBtXMtY=)
17: D57D8BEC63CE11F1B28816DCCE1D38B0.roa (hash: uLcJX271d+ip3ZQUo1xfKYciJj55ADVEQBKeAxryfCQ=)
18: BC1191BE63D111F1981D62ECCE1D38B0.roa (hash: 7C59kQ//mtaLdQHz1mSnz/+/gp8g+MjA6MlX0q2vpuw=)
19: 1B3E5BD6BFC411EEB815F6B6775412E6.roa (hash: /vMD2qyC5dIRjTseOPjuPT3UDFh3JnMal4OEIVBXwNA=)
20: 404E071063F411F1A98E55BCCE1D38B0.roa (hash: x/az9RVi7JNu/6hWg7qRpq/QSG0Fq0eC4gzic2/aptY=)
21: 1CBBD95C63CD11F1951166D3CE1D38B0.roa (hash: 4miT25AnxlNyNM74omEkAk+VyqFPtc/3toVSQUIWEiU=)
22: F63E656463C811F1A4A8EFBACE1D38B0.roa (hash: 3/Oc5NU6ufKouVIjuMd0zvc9pDchfhPB4U/fkpYzE/Q=)
23: 5EDAF1C2646011F1947BD2B8CE1D38B0.roa (hash: XWqDFeNCooEzTEjyd8623ieUiJ9e7GChr05ilpQPAE4=)
24: D4E7F5D263C911F18D2230BFCE1D38B0.roa (hash: FT9ac8Ykdp30FpgJ1AqJnRR4fTCVAlZln4Mcs64+mh4=)
25: 1A98D0D863F211F19D5A45AECE1D38B0.roa (hash: 5ns/OJLF4Ryu80Az4/iqFq/JpB9dRCmpDmrVUq8LPKo=)
26: 55D7D7C863EF11F1B717CB1DCF1D38B0.roa (hash: eCTPynYtU0RlLWyEGFXITeHwvIzfcOhgUNmXQSjFir0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Sep 2026 02:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Sep 25 02:54:35 2026 GMT
Not After : Sep 27 02:54:35 2026 GMT
Subject: CN=6ab5e26c-92be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:83:e9:53:bd:45:47:b4:c1:70:12:54:7b:
eb:66:91:bb:94:5b:ee:fe:75:d3:fa:18:bf:74:79:
38:a3:4b:66:4f:64:77:37:d7:86:c2:ca:0b:83:dc:
68:48:a9:08:36:04:45:6b:55:20:7d:ea:d7:30:bf:
d0:8f:87:58:71:f1:04:e4:2b:8b:33:eb:2a:2a:d8:
cc:ea:e7:e1:78:cf:0c:d3:e5:69:93:13:6b:0f:ef:
d9:38:da:0a:84:55:d4:42:da:85:8f:d7:3d:ec:16:
2d:bd:6d:25:ff:19:f2:e6:cf:eb:b0:c0:dc:4e:00:
87:69:63:84:72:32:da:12:3e:c3:ab:bc:b5:4c:81:
cb:86:ed:29:d8:2b:8e:38:67:62:3d:1d:24:f2:13:
4b:b8:fe:92:ad:56:1c:a6:46:8e:4b:a2:24:d3:c9:
32:11:84:ed:47:cd:07:62:05:97:e6:46:d1:1b:dc:
43:5e:99:84:61:27:10:76:4e:c1:58:59:44:7e:b3:
de:f9:83:7b:3c:56:a1:3d:f9:18:07:12:42:89:e3:
20:c7:22:67:71:53:4e:8e:54:0c:21:80:15:81:e1:
eb:b1:4b:7b:04:5f:6b:04:b4:1f:8c:eb:3d:ec:6c:
15:3b:c5:9b:88:13:c7:03:fa:04:0d:e1:46:1d:19:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:DD:FB:B5:97:99:16:65:C6:91:BB:62:F1:A9:B4:4A:7A:9F:EA
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:b4:09:2f:1d:7f:bd:df:8f:8b:80:bf:34:87:c3:3d:c5:
a1:f7:79:a7:ef:93:84:14:2d:9d:72:33:9b:a2:c6:11:4f:40:
70:b4:91:f2:e5:39:76:57:33:99:bf:0d:7a:09:d1:30:f8:6f:
48:cd:69:fa:92:5b:7d:89:d8:41:40:8e:e0:a0:4e:7e:53:5a:
9a:af:64:d9:b9:f0:26:1a:e0:92:0a:c8:95:05:5c:eb:64:bf:
32:01:ba:90:11:a0:9b:38:ca:24:51:d1:4b:79:77:ea:83:cc:
e4:3c:e1:7b:c3:22:6d:b9:64:5b:e6:fa:51:0c:a0:5b:f4:ce:
5d:ac:fd:82:05:fb:b2:fb:4a:5a:b8:34:ec:96:e3:32:25:87:
48:6c:b0:c4:37:ac:f0:08:1c:f4:1b:b4:52:7f:81:0e:de:d3:
aa:2d:4c:b5:cf:ef:fb:d1:f6:38:62:1d:86:05:15:1c:75:ba:
70:63:8b:c4:06:3b:6e:1c:0e:bd:10:c6:c5:64:27:7f:52:ea:
52:be:86:34:26:4e:bc:f9:9d:32:4d:b9:7f:7e:43:94:69:f8:
81:14:7e:65:81:f8:a7:59:98:23:73:b5:97:51:da:94:ac:4a:
df:4b:cb:41:36:89:3f:4b:5b:e3:ce:13:a7:f1:64:c0:20:d4:
d2:bb:6d:2c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yNjA5MjUwMjU0MzVaFw0yNjA5MjcwMjU0MzVaMBgxFjAU
BgNVBAMTDTZhYjVlMjZjLTkyYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfGIPpU71FR7TBcBJUe+tmkbuUW+7+ddP6GL90eTijS2ZPZHc314bCyguD
3GhIqQg2BEVrVSB96tcwv9CPh1hx8QTkK4sz6yoq2Mzq5+F4zwzT5WmTE2sP79k4
2gqEVdRC2oWP1z3sFi29bSX/GfLmz+uwwNxOAIdpY4RyMtoSPsOrvLVMgcuG7SnY
K444Z2I9HSTyE0u4/pKtVhymRo5LoiTTyTIRhO1HzQdiBZfmRtEb3ENemYRhJxB2
TsFYWUR+s975g3s8VqE9+RgHEkKJ4yDHImdxU06OVAwhgBWB4euxS3sEX2sEtB+M
6z3sbBU7xZuIE8cD+gQN4UYdGWtnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+ffd
+7WXmRZlxpG7YvGptEp6n+owHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTZFNUYvM0RBM0QzMjAxODk3MTFFRDhDOTM2QkQyRjEy
MjI0NjgvVTNYUFRLRmtPd2pEUWIybm5ZdmhCYjNEeElzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvX7QJLx1/vd+Pi4C/NIfDPcWh93mn
75OEFC2dcjObosYRT0BwtJHy5Tl2VzOZvw16CdEw+G9IzWn6klt9idhBQI7goE5+
U1qar2TZufAmGuCSCsiVBVzrZL8yAbqQEaCbOMokUdFLeXfqg8zkPOF7wyJtuWRb
5vpRDKBb9M5drP2CBfuy+0pauDTsluMyJYdIbLDEN6zwCBz0G7RSf4EO3tOqLUy1
z+/70fY4Yh2GBRUcdbpwY4vEBjtuHA69EMbFZCd/UupSvoY0Jk68+Z0yTbl/fkOU
afiBFH5lgfinWZgjc7WXUdqUrErfS8tBNok/S1vjzhOn8WTAINTSu20s
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:42:59 2026 by rpki-client