
Error: rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
File: 47B7udCVd0n_5Ix-cyWp4RtBark.mft (raw, json)
Hash identifier: fKUVMt0sY+46k1gjFmEPEfGh2krkEZYDUYo88HIKk0c=
Subject key identifier: 4E:1C:81:83:9A:F3:58:82:68:71:5D:73:EF:1D:C6:E9:AA:58:2A:C5
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 05C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
Manifest number: 05B2
Signing time: Sun 27 Sep 2026 03:07:24 +0000
Manifest this update: Sun 27 Sep 2026 03:07:23 +0000
Manifest next update: Tue 29 Sep 2026 03:07:23 +0000
Files and hashes: 1: 47B7udCVd0n_5Ix-cyWp4RtBark.crl (hash: giOi57GWEDByMO/32tbpm2ftoLiGpDFFNzMYlldN2eA=)
2: 3DB6256EF80C11EFBCDFA247762E951A.roa (hash: 1MJQsEu3MtkwAZkp/UQ3hGrxa4qXYrkMkXdBA/w9NYE=)
3: 8DD1E8A28D8011F1872795DECE1D38B0.roa (hash: AuG7o8U9JTA7hBUkkkhtnhH4htjoCHWQPqg12mvfVJM=)
4: D8BF08468D7F11F1BF6671DACE1D38B0.roa (hash: ZOfn2W3js3WfcuCV4Hm+XVb7XYhXh9TvM9OxM56E5d4=)
5: A9B39EA48D7F11F198E60BDACE1D38B0.roa (hash: GexUwewXFwIgcK2EC7XmhRa1RpB4eqf6pDb3pMOsQNg=)
6: 539E5CC2F81411EFBDDFCB7C762E951A.roa (hash: ATiggh+vNVuMqXawpwCemlyRXEd1oK0f4La6CW2y5Xw=)
7: FF60F386F81311EFA12B167C762E951A.roa (hash: E6AA/MQ35BNobVmf7gM/3zri44Qh8PJyk5Jml651Nx8=)
8: 4DD725E4F80F11EF86D22A5C762E951A.roa (hash: /ugyz6PR8i04hr2ae3kp6xDqUB/TUr9B+hb22NVvtNo=)
9: D8FBD076F81311EF989FC47B762E951A.roa (hash: 5ZM7FZdyHJ3h1kABK4Wd0X2vl/nK0g1+cnj1dsOe5qI=)
10: 63D1057E8D8011F1844C38DECE1D38B0.roa (hash: FdYgjyY4n2W5SNqldyqQPTcqZ1ZUm54sdDLKKYWmvDk=)
11: 1CCE2C1EF81311EFB753FE76762E951A.roa (hash: s6VENZXD1xBLDNkwrezGHkWnpkVaPcwUtHMwOrh8cVE=)
12: 0B2BDC008D8011F187AF7DDACE1D38B0.roa (hash: hvVvqgd3J6HugAOQ2xZMf4rYH2ZaGbqj41jpcp8CqDs=)
13: 366F83268D8011F1830198DACE1D38B0.roa (hash: d+4Imc72ML8FNafY13Sy87POx3jwfWKVT0mYE8Pd+Vs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Sep 2026 00:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF, serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Sep 27 03:07:23 2026 GMT
Not After : Sep 29 03:07:23 2026 GMT
Subject: CN=6ab8886b-4022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:a6:a2:63:4c:27:92:ad:6b:b2:fb:42:34:
b3:3e:b4:c2:8a:25:03:f1:a2:12:ce:f0:a2:5b:b0:
63:34:48:bd:82:26:58:bb:b7:5e:61:a1:3a:70:9e:
8f:c4:df:23:0c:87:35:cb:a6:e5:dd:c4:54:66:a8:
f6:b2:7a:9a:d4:fb:c0:a0:24:9d:ce:32:28:93:2b:
a1:a3:28:c3:45:5b:fc:89:ec:62:01:1d:bc:62:34:
39:26:18:46:0d:cd:5c:d7:e0:13:31:39:00:df:d7:
c8:ab:b2:a8:0b:16:dc:a1:37:99:f2:74:8d:ab:7a:
fc:22:1a:c8:17:d0:9f:dc:50:5e:b7:41:2d:9d:ad:
39:6c:9d:a1:f4:a3:1a:cf:27:59:e0:cb:aa:97:7d:
e2:eb:e4:22:c7:22:1d:ce:e8:67:91:15:bc:0d:b5:
54:c6:13:0a:31:04:a6:89:7f:e8:ec:93:68:fa:4f:
81:15:98:6f:44:76:85:15:21:95:3f:b3:1e:4d:8b:
ec:df:98:ae:27:6d:05:48:11:15:ae:9f:e7:3d:59:
5e:49:26:27:5f:6c:7f:c9:f8:01:20:75:bf:46:ea:
d2:46:12:0f:b4:63:e8:5f:3d:df:48:65:5c:3c:07:
69:c7:4b:85:84:de:48:4b:54:75:9a:0e:68:84:b1:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1C:81:83:9A:F3:58:82:68:71:5D:73:EF:1D:C6:E9:AA:58:2A:C5
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:a1:61:29:d6:32:f5:bf:7a:d5:8c:75:69:31:b5:1d:15:
9f:85:20:14:b0:53:fc:96:46:92:f6:78:1d:a1:97:bc:86:ab:
78:7d:04:4b:52:03:a3:24:52:5e:f8:09:46:95:f9:7d:d2:28:
ba:36:84:b4:e5:38:e6:30:e7:d4:ed:33:43:dc:47:72:69:cc:
9c:e5:e6:1c:c0:af:16:58:1d:47:7c:b4:cb:3d:08:cf:b5:a5:
05:3e:a3:bf:e6:3c:37:8b:2c:80:a5:e4:4a:f1:90:49:ed:6b:
1e:e1:95:b8:d7:93:aa:46:5c:29:4e:cf:71:5d:03:7c:fa:fb:
c0:99:fb:d2:6f:ed:43:03:13:dc:48:72:1e:f1:4f:b2:b8:b5:
74:6d:e0:05:10:24:41:8b:04:d8:d2:c2:d1:12:96:f4:d2:41:
56:98:be:94:d8:84:0c:6e:0b:bc:90:98:23:42:cd:0d:a8:9c:
fa:87:bc:34:0f:7b:a0:7d:ff:16:79:3c:2e:bf:ba:7b:a2:4a:
57:74:a9:af:ab:eb:f8:84:fa:21:14:21:ba:b8:a4:6b:76:23:
4c:30:30:16:a8:6d:70:7c:c4:66:f1:4b:7e:69:7c:b2:93:e4:
d9:3f:dc:14:fb:4e:b5:5b:f4:6b:a9:7b:bc:71:69:d7:a3:0c:
c6:9b:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:37:43 2026 by rpki-client