
Error: rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
File: pYptKRFMiB4AWHcnnZWrqjnuFBw.mft (raw, json)
Hash identifier: F8p+bO5mfKp/TD/iNINeiMKlwX0ZtGjpGu0tNDTSB8k=
Subject key identifier: F7:7C:C0:80:F6:B7:E7:00:C3:4D:05:3A:8C:A9:E8:B3:6C:C2:27:38
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Certificate issuer: /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial: 0505
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
Manifest number: 04F6
Signing time: Sat 26 Sep 2026 03:26:35 +0000
Manifest this update: Sat 26 Sep 2026 03:26:34 +0000
Manifest next update: Mon 28 Sep 2026 03:26:34 +0000
Files and hashes: 1: pYptKRFMiB4AWHcnnZWrqjnuFBw.crl (hash: a4XiaT+7BeEZIIHbuPlUxrZQ8WGF+HX3xQXxgRUfqZI=)
2: 2E63F6584A9411EEA74A5E814AD9E6FC.roa (hash: kFbuohwYBsspjejBsjNQv3b4gYzYeJeZ4QVpfNwRA6M=)
3: C752587A400B11EEBBC46D7B4AD9E6FC.roa (hash: vQTlaBoB3sy8/njOdOy98dV2tA4dWiTOvqnT9aoOp+I=)
4: 013EB6404A9411EEA90CF7804AD9E6FC.roa (hash: pQcoR3YRmRscrqHBzKXHLQZx2MD1uAGqwdTHv198PjQ=)
5: 7E63088E4A9311EE8568477F4AD9E6FC.roa (hash: rv9TAXsAG6tgC35rrOdz5+Kwb/oSzCBw738sLnBloFc=)
6: 6FF821EC40B811EEAA1112234AD9E6FC.roa (hash: LpDKodbHkpLTmMWPNMNHkmwQuf/YokY9pE0HTQhIW7A=)
7: 9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa (hash: gcE1HsR8Mdu/vGmmLNuL2lsC+GftLbl/G1A9D8Vce3s=)
8: 3BDE86EE4B0D11EE8D6AAC8A4AD9E6FC.roa (hash: YgQH4Tyn11YWyadrNAmzwWqQsX+CmhhZoDQij9nE5Vg=)
9: A3A3B4084A9411EEB1DF22834AD9E6FC.roa (hash: 7/28k1jbRMHbMuR0caeZhrzprYSpaTkK0NUr0sw7sfI=)
10: 57418EF04A9411EEB410DB814AD9E6FC.roa (hash: q12m8ZQQQsDXVbIvrMrW+qu3TkUh3w0FfQrFK7Pqqvc=)
11: A632A7524A9311EEA933AC7F4AD9E6FC.roa (hash: 989QeyV0tCLRIDQrSwFN7hoE8gXvYUy2ldXlV1YkXGI=)
12: CE6060704A9311EEA5F02C804AD9E6FC.roa (hash: Hs360djHIf3ak9GbVE0Knhr4VTREbtOjL6bSMzqrUhI=)
13: FF0A93E0400B11EE8807FE7B4AD9E6FC.roa (hash: d4ujJVZEWVPL68c5XEuS1b7DDCDSn2VVtrxCjnaqarE=)
14: 6DF3308A4B0D11EEB78B6E8B4AD9E6FC.roa (hash: fKRHwC2yWp7CWASllA6SXYSSy+E/H/AFFpAl0NYIs0M=)
15: 53B7B60C4A9311EE9902D27E4AD9E6FC.roa (hash: Lc6p/skcV7T38Y2SJSqIQlEnAuZOjjbq8VZr0A0Y0HY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Sep 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7FB7AF, serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Validity
Not Before: Sep 26 03:26:34 2026 GMT
Not After : Sep 28 03:26:34 2026 GMT
Subject: CN=6ab73b6b-e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:65:d7:5a:c4:2b:45:fd:1e:a7:38:31:96:
0b:40:02:b8:b2:b0:dd:42:4d:31:0b:c5:a1:d7:6e:
39:3c:ea:fc:18:33:1b:ab:dd:c2:dc:c7:17:a3:26:
b8:eb:42:12:06:ac:3a:ec:66:c6:85:38:5b:09:ab:
d0:bb:4b:94:5c:d4:b9:c7:02:1d:0c:85:ca:0e:b5:
b4:17:5d:7e:9e:12:d2:6d:23:70:74:66:1a:cf:e6:
52:55:88:0e:f1:4d:8d:be:b6:01:a4:59:b5:90:e3:
30:0d:cb:2c:61:c4:20:e4:50:48:ed:7b:37:bc:a3:
73:85:fe:7d:96:c8:e1:ea:cc:11:8a:d9:7c:94:6d:
c0:52:cf:93:85:38:92:93:bb:d7:09:7d:ac:f3:d2:
dc:de:27:97:70:16:29:55:7f:ca:64:bd:2c:70:0e:
b5:43:2a:c7:a0:81:4b:03:f9:a0:86:0d:43:5f:a5:
f4:2f:80:7b:d5:e5:4f:a0:a6:24:a0:46:d4:3d:42:
53:2e:d8:43:8f:40:8b:2d:f2:5a:57:3d:39:b5:a2:
7b:13:0e:64:36:95:cc:e0:27:03:be:e9:6e:0b:bb:
b7:9c:72:c7:4b:40:f6:61:3d:fb:f4:ad:bc:a3:3b:
93:72:37:7c:10:30:ee:ec:ec:f3:58:8d:43:87:81:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7C:C0:80:F6:B7:E7:00:C3:4D:05:3A:8C:A9:E8:B3:6C:C2:27:38
X509v3 Authority Key Identifier:
keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:69:3b:2c:ae:15:cf:95:5a:f6:8f:41:31:4e:99:8c:6f:d4:
99:ef:71:71:fe:72:c8:6c:27:6f:18:ca:25:4d:a8:03:88:db:
ca:13:18:4f:41:ec:e5:ae:6c:77:23:82:2a:d2:4e:8f:3c:fb:
fd:70:ca:99:a1:a4:be:ee:b4:74:f6:3e:49:20:cd:c3:0c:46:
c1:a5:d4:b5:ce:1f:e7:d3:75:0c:b3:d9:0a:25:8e:31:b8:5c:
7d:38:17:9f:49:ec:f7:49:73:59:a1:d7:35:00:e2:5c:96:d4:
2d:ca:ca:74:f3:5f:ec:b8:b5:83:5f:f7:c2:24:f1:f4:a5:f8:
d5:67:3c:d1:06:2f:0b:f0:13:2d:c1:cc:61:16:6a:cc:cf:61:
38:dd:f6:e1:b3:fa:0d:6e:23:17:95:62:b3:24:a7:8c:a3:b0:
ce:ca:79:a8:75:ff:4a:0e:2c:ab:59:44:19:f3:fa:c0:eb:df:
fe:8b:be:b7:c3:a2:a8:18:8f:eb:b0:13:f9:cb:46:be:d2:e7:
0b:28:38:b2:c4:19:79:50:a2:f0:a2:51:0a:3a:25:93:f9:0a:
2a:3a:55:22:6a:67:bc:a3:a4:ab:31:4f:5b:5d:03:17:18:7a:
e9:fe:8a:d7:9b:82:bb:90:23:53:9a:08:28:4f:dc:eb:35:45:
98:75:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:27:22 2026 by rpki-client