
Error: rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File: P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier: KO5Y2Hrzal8Z53dxQjJ7sMb67puE17EQS/lneGKz0Dw=
Subject key identifier: 18:51:C6:17:B7:D6:CF:84:39:2D:05:8E:AB:51:8F:64:3B:C4:F6:BF
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 0543
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number: 050F
Signing time: Thu 24 Sep 2026 03:32:45 +0000
Manifest this update: Thu 24 Sep 2026 03:32:45 +0000
Manifest next update: Sat 26 Sep 2026 03:32:45 +0000
Files and hashes: 1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: zWaQOsRhIx2k7vd4cZC/wNwFa4B5RJJUCTggln5jII8=)
2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
6: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
10: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
11: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
12: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
22: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
24: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
25: C41EE034846D11F1B0082AE7CE1D38B0.roa (hash: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=)
26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Sep 2026 00:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1347 (0x543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Sep 24 03:32:45 2026 GMT
Not After : Sep 26 03:32:45 2026 GMT
Subject: CN=6ab499dd-7838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:99:41:e5:ea:1b:17:6b:69:20:cd:c7:39:
6f:47:d8:9d:27:05:0b:bf:0e:68:8a:cf:60:36:a2:
4f:23:56:88:78:54:32:e0:2d:cb:92:ec:73:22:55:
78:6f:31:f8:1b:4b:2e:e8:2b:f0:0b:83:1b:70:31:
2a:51:18:ea:b8:45:75:5c:cd:e6:40:f2:0e:b4:47:
ed:9e:eb:eb:4e:27:1d:35:04:ac:10:ff:39:7a:ae:
07:72:32:40:cf:87:b6:d1:a0:7e:6a:0f:d1:82:c4:
57:d7:5e:b7:c8:d2:02:10:38:a8:44:7d:6c:fb:32:
5f:c7:dc:9f:6e:c1:0e:d8:14:80:7a:cd:26:37:19:
6b:2d:db:52:99:d8:3f:35:4d:a7:1f:20:77:e9:85:
a7:04:1d:90:d4:d5:29:5f:2f:10:ed:28:03:71:37:
73:e2:86:1d:9c:d5:f1:6a:dc:10:d5:23:f5:8a:65:
10:e3:27:8c:3c:95:8f:b4:7f:3a:58:8a:58:7e:b9:
76:23:17:b5:2c:5b:4e:b7:83:bb:53:31:57:c3:0a:
6a:06:da:b2:a5:2b:88:80:9b:f5:f3:14:4a:51:b7:
2e:55:62:4a:d8:cd:df:b2:98:40:24:9e:53:bb:a8:
a6:57:fb:b4:40:3d:2b:a0:bb:6c:e4:f2:30:bd:15:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:C6:17:B7:D6:CF:84:39:2D:05:8E:AB:51:8F:64:3B:C4:F6:BF
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:70:70:55:d5:94:60:5b:a5:6a:d4:07:a6:e4:4e:71:4f:1c:
6e:a2:19:7c:34:f8:9d:92:8d:f7:f6:23:1f:9d:c7:9d:49:e3:
74:74:14:c7:0d:36:46:32:c7:fc:8d:50:25:27:c2:17:72:d5:
37:98:6c:10:a1:e1:19:24:6e:48:52:f5:58:68:1c:57:49:c4:
b7:1a:c6:23:19:0d:19:f6:bf:97:1e:5d:fa:d3:d5:6b:57:52:
8e:26:07:e6:d8:58:ce:34:ab:41:18:02:e5:ec:6e:c0:e7:52:
8d:78:1b:d1:fa:9d:66:df:05:bd:11:1c:ae:8e:d8:ce:18:37:
f1:a5:bf:57:64:4d:df:98:2e:10:5e:02:7e:da:7d:e6:aa:e5:
68:d4:63:08:d0:52:37:cb:da:39:8d:0e:82:fb:ac:c5:45:59:
e2:6d:9e:a1:18:9f:01:29:74:03:4c:78:20:d9:f3:06:ab:75:
6e:2a:bb:d5:f5:61:4b:5e:58:a6:19:2b:53:04:0a:2d:6b:25:
8d:4e:79:75:be:4e:00:d1:38:be:8b:99:c5:39:cd:fc:23:a3:
c2:b4:5b:0b:22:d6:22:94:e4:69:37:40:37:49:c6:00:6f:aa:
bc:27:7b:b8:d0:9c:a9:f5:1d:14:2e:5b:00:69:27:de:4c:e2:
8a:2c:78:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJGNDFBRjExMC8GA1UEBRMoM0Y2NzdGM0ExOEFDQUFFNkM5N0Y4MUY5OUFFODc5
NDY1NEUwNDEwQjAeFw0yNjA5MjQwMzMyNDVaFw0yNjA5MjYwMzMyNDVaMBgxFjAU
BgNVBAMTDTZhYjQ5OWRkLTc4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqBZlB5eobF2tpIM3HOW9H2J0nBQu/DmiKz2A2ok8jVoh4VDLgLcuS7HMi
VXhvMfgbSy7oK/ALgxtwMSpRGOq4RXVczeZA8g60R+2e6+tOJx01BKwQ/zl6rgdy
MkDPh7bRoH5qD9GCxFfXXrfI0gIQOKhEfWz7Ml/H3J9uwQ7YFIB6zSY3GWst21KZ
2D81TacfIHfphacEHZDU1SlfLxDtKANxN3Pihh2c1fFq3BDVI/WKZRDjJ4w8lY+0
fzpYilh+uXYjF7UsW063g7tTMVfDCmoG2rKlK4iAm/XzFEpRty5VYkrYzd+ymEAk
nlO7qKZX+7RAPSugu2zk8jC9FXCPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGFHG
F7fWz4Q5LQWOq1GPZDvE9r8wHwYDVR0jBBgwFoAUP2d/OhisqubJf4H5muh5RlTg
QQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRBRDlFNkZDL1AyZF9P
aGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1AyZF9PaGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFE
OUU2RkMvUDJkX09oaXNxdWJKZjRINW11aDVSbFRnUVFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtcHBV1ZRgW6Vq1Aem5E5xTxxuohl8
NPidko339iMfncedSeN0dBTHDTZGMsf8jVAlJ8IXctU3mGwQoeEZJG5IUvVYaBxX
ScS3GsYjGQ0Z9r+XHl3609VrV1KOJgfm2FjONKtBGALl7G7A51KNeBvR+p1m3wW9
ERyujtjOGDfxpb9XZE3fmC4QXgJ+2n3mquVo1GMI0FI3y9o5jQ6C+6zFRVnibZ6h
GJ8BKXQDTHgg2fMGq3VuKrvV9WFLXlimGStTBAotayWNTnl1vk4A0Ti+i5nFOc38
I6PCtFsLItYilORpN0A3ScYAb6q8J3u40Jyp9R0ULlsAaSfeTOKKLHhL
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:46 2026 by rpki-client