
Error: rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
File: WpihEwK6HEmqvGDVAst1DFmRB8M.mft (raw, json)
Hash identifier: fGJNZBJTB3rwo1voQ8UDW4uYGrR+Qbmf5O1472Okz/s=
Subject key identifier: A8:2E:4B:2B:2B:C7:B3:87:B1:4B:FE:41:21:91:56:09:C6:53:69:7F
Authority key identifier: 5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
Certificate issuer: /CN=F36CF917AF/serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Certificate serial: 0689
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
Manifest number: 0671
Signing time: Tue 22 Sep 2026 02:45:31 +0000
Manifest this update: Tue 22 Sep 2026 02:45:31 +0000
Manifest next update: Thu 24 Sep 2026 02:45:31 +0000
Files and hashes: 1: WpihEwK6HEmqvGDVAst1DFmRB8M.crl (hash: hsgq3qcQmJpVH0vA8s0Yg7TIL4mDtbfz9AMi0AT3JrA=)
2: 7D22477A8A8511F1A99EB9A2CE1D38B0.roa (hash: ZbW6dhsJ+JcM68l7CncdThQ0Y6a4BW/oPDMIrWsfNYg=)
3: B416D1808A8811F19276B6B5CE1D38B0.roa (hash: JqKNVi9sDF1Z+WHUQyqHM6n1mTv2PxK9bP8CLP/bWwk=)
4: 88C66DCE8A8811F1BF25A0B5CE1D38B0.roa (hash: 96MKY1wJO/ICMedmLmNPvybRZlM1IF+zskjNS4Rtcww=)
5: D34DFAFA8A8911F1B39DD1BDCE1D38B0.roa (hash: gIg3T2F/mwJCGEuy84LwGKs/3oucbWWtsGagWAxJIUY=)
6: ADDBE62E8A8911F1AC7DEDBBCE1D38B0.roa (hash: dQe5lRR7iao+0bCygYFKDltIR9cZUc4q0UgQnVeBYqQ=)
7: F6F325F28A8911F1A00931BECE1D38B0.roa (hash: QOywer1maX7JFzM7VXF+eYTxPwTpFNOhN7NdrlCiO6U=)
8: 811A91A88A8911F19C1109BACE1D38B0.roa (hash: +yh89vy2fW/3hE8Sge1pTUKlI0uDEepcLMMEQ2oFtBs=)
9: 2519D8328A8911F1AD7DCDB9CE1D38B0.roa (hash: 8sQ3yTWm9ppQfsnveXYgDm7NMabPIZo2cwXeQRYMKOc=)
10: 56517DE68A8511F1A425C9A0CE1D38B0.roa (hash: x4/A0cOgEYz9UndmhI0YJkTiRJBKIEjyt8dqU/caCzI=)
11: F72372568A8511F19EE831A5CE1D38B0.roa (hash: Sj2GyCXVEGFZVUcPAApgFeaomJhf8dPrNUJd6K7oshI=)
12: 14D24A3A8A8A11F1810E49BECE1D38B0.roa (hash: 8ecNmNwPrHhtMp6pToYlrrAanzmGNuIqFDd82GDZ8l4=)
13: 96B3A2488A8411F1930A171BCF1D38B0.roa (hash: 9vh192EXAyU2s2NhCiFjEOTyBt89+8e3W3X3Xn0uFFY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CF917AF, serialNumber=5A98A11302BA1C49AABC60D502CB750C599107C3
Validity
Not Before: Sep 22 02:45:31 2026 GMT
Not After : Sep 24 02:45:31 2026 GMT
Subject: CN=6ab1ebcb-cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:49:ba:cd:24:00:b9:b1:ea:e0:2b:2f:5f:
b6:c2:d8:a6:d8:6b:b1:d8:b3:97:7a:0d:0e:f5:12:
d0:fe:42:63:36:0d:aa:30:75:23:da:39:2a:a5:a6:
cc:83:65:62:9d:aa:bc:03:0d:92:52:2b:b7:85:27:
d2:db:10:60:2d:35:c6:1d:0c:f4:9f:36:8e:bb:cf:
21:a7:24:a8:37:34:ca:7c:c4:db:7d:bd:f2:20:d7:
4c:58:20:03:31:71:a4:3a:54:4b:ff:af:9f:2b:0a:
15:ba:52:52:98:3d:58:d9:5c:1b:39:30:be:84:34:
1f:da:94:7b:b6:88:b0:19:34:29:ec:5c:cb:39:0c:
4a:6d:58:2a:9a:c7:96:33:90:0c:b3:fa:87:66:97:
ac:3d:60:a4:a8:8a:5a:7b:27:60:f0:43:94:b4:39:
a0:2e:ab:59:1e:23:a1:b9:93:a5:11:49:bb:a8:24:
94:4b:12:3a:11:b0:8a:5d:c8:9e:4e:c1:01:fb:38:
5c:e1:3b:c1:73:06:32:aa:2f:c5:ca:37:44:72:6d:
1a:dd:4e:d7:46:ca:b7:9a:74:eb:a5:50:66:b2:c0:
2e:a8:e2:a0:8e:4c:d9:5d:42:19:a8:c8:29:43:a9:
23:8b:68:4d:56:9c:56:41:fb:01:7e:e8:4d:4f:44:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:4B:2B:2B:C7:B3:87:B1:4B:FE:41:21:91:56:09:C6:53:69:7F
X509v3 Authority Key Identifier:
keyid:5A:98:A1:13:02:BA:1C:49:AA:BC:60:D5:02:CB:75:0C:59:91:07:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WpihEwK6HEmqvGDVAst1DFmRB8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/0D7561E6E27811ECBD71BBD6F1222468/WpihEwK6HEmqvGDVAst1DFmRB8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:6d:6d:36:d2:c3:f4:a5:96:80:2c:8a:07:fa:ff:60:92:59:
73:ee:4c:4b:60:8c:8f:16:c8:cb:0d:17:4e:25:f7:a4:59:15:
39:c0:fc:30:5e:94:31:16:f1:51:30:0a:36:f3:ea:1e:20:1a:
1d:dc:93:f2:3f:c4:84:be:1e:5c:7d:7d:d1:0a:1e:05:8c:39:
8c:0b:da:0c:16:79:9a:88:e6:58:69:c3:55:d2:6e:78:ca:ea:
66:b8:9a:ed:bb:28:d2:63:d9:7f:d7:c7:6b:b1:ee:09:2b:7d:
59:0e:3e:5d:db:fe:c0:e1:f0:ad:15:19:3f:1f:68:cd:f5:48:
47:b4:69:03:cd:3b:8e:a2:28:28:29:1d:30:61:3f:e4:b0:60:
4f:21:a2:45:26:a1:6a:ff:c5:c4:42:21:4c:b6:9e:e8:cf:ce:
6b:54:19:e5:83:19:c5:f3:fc:47:ab:74:20:3d:6d:a8:95:f5:
7c:a8:6b:4a:a0:99:3a:3c:5a:a5:ea:94:58:a3:54:a2:be:e8:
52:68:74:40:ff:2a:82:87:3e:12:3f:91:d1:23:c4:24:43:7b:
e4:79:c8:ad:fb:51:5a:7f:bc:2e:12:82:7b:d7:2c:a6:ca:81:
bc:85:f4:c8:1f:07:26:d3:e1:ea:e3:eb:77:c1:06:fe:dc:fe:
ab:e5:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:21 2026 by rpki-client