
Error: rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File: hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier: tg9kpVFtLty0K8y/wTz/n2shjU74C0MSC7H37XaViGM=
Subject key identifier: 35:AA:A4:DF:09:01:9D:38:3D:F2:1F:18:C9:FA:E0:77:5F:C6:E0:6D
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 086F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number: 0824
Signing time: Sat 14 Nov 2026 02:20:06 +0000
Manifest this update: Sat 14 Nov 2026 02:20:06 +0000
Manifest next update: Mon 16 Nov 2026 02:20:06 +0000
Files and hashes: 1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: E7d8s9FfVJfGmHjC700KtBYdCcIVG72YehZLFMX/u7Y=)
2: 7C11FB3A8FD711F194865F12CF1D38B0.roa (hash: xF16zWSmkM/c3V8YjQqugs+5p0JlSIff3givFahh+9Y=)
3: 973F091E1FB311F18E80869FDAE4EC9C.roa (hash: CzHZTufJFyhjGHkpFVZuM6wyww8c6DnqEF6oCbO8Cz0=)
4: 31E310CCB5C411F1AC8E7ED9CE1D38B0.roa (hash: iWVWVjP77LsNaKIjHC8sf05lelaswMjolhlVLp8YwMA=)
5: E0978148B5C411F1A36DE3DDCE1D38B0.roa (hash: z5bG46DBUE3vNLEVMpI+LUmEIzU52A9/RHq13j9q2E0=)
6: A59DE662B5C511F1B97B67E2CE1D38B0.roa (hash: D2enViRD9nEBljcCW0p8G2Wrk/CPIlQ8omhKxmpbPAE=)
7: 5D4E3E2CB42911F1A7228ADFCE1D38B0.roa (hash: Sg21FeRg0sCbvKh+6dJ2xNE1rFfw9mLKthCDLQtSl8w=)
8: 36A614CEB42A11F180BEC6E5CE1D38B0.roa (hash: aj9KPPBD12Iwz9ZD1UE6JBIBWDkqvN+k6I+NvFlEqAI=)
9: FD95FA44B5C511F1BD3C9EE4CE1D38B0.roa (hash: JbbjFtzo3g6b4VR4ureyvlDyIMVyw9Db1qIxz067tJ4=)
10: 582E5A0E1FB311F1988F6B9FDAE4EC9C.roa (hash: 0HSfpxd6RJw1dDAmVY8F6DqPcLyoD2dBDFLG8DPE+ZM=)
11: 27636ED4B5C511F194E419E0CE1D38B0.roa (hash: ewBZP+o3gFUaiXSh3dLy0P/FBmeqa9KK37P6TR8GuE8=)
12: 8A2A4AD0D13411F1B8205CB7CE1D38B0.roa (hash: FOw27Xeld9dFbs6yaStMMMuUlg8GdjhOBpPIp3WsLHA=)
13: BF074D607AB911F19544E1E5CE1D38B0.roa (hash: qFoBsejg9FN/FDV2O6h7qkRNG5vip+EUMILXAArsA6s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Nov 14 02:20:06 2026 GMT
Not After : Nov 16 02:20:06 2026 GMT
Subject: CN=6af7c556-ccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:d1:0d:74:b7:7e:75:61:4a:13:c4:55:eb:
cf:23:09:9d:62:29:5c:00:c8:f9:9c:51:df:fe:de:
20:fd:d2:1a:b5:c0:22:45:55:c5:f5:57:17:4a:ed:
6e:44:51:fb:b1:27:24:c8:fe:76:ce:8c:ed:72:20:
ea:32:ea:87:25:e7:ab:b0:b8:2f:16:3e:c3:57:78:
66:1e:9b:14:d2:5b:e3:3e:a1:db:d8:ba:bc:a1:44:
44:77:f5:c7:71:5e:23:80:f6:07:bb:18:90:0f:5b:
60:45:7b:0e:fa:f0:d0:f8:0b:7f:7e:10:f0:44:79:
74:b7:a6:4c:ec:a8:66:7a:e8:c3:c5:cc:33:8f:b2:
fa:a3:9e:23:f5:1d:59:34:23:81:90:31:7c:bd:28:
c8:e1:ac:52:76:b7:ad:68:f3:f9:fd:60:70:03:ec:
ef:d6:28:1a:90:d9:0c:7b:99:7b:1b:47:54:57:d5:
77:6c:28:91:cf:0d:ab:e3:ec:7e:8f:70:e8:ab:37:
65:eb:12:72:4c:e1:40:89:cb:06:4e:3e:ef:32:24:
7d:4a:b2:05:93:32:84:c0:32:22:4a:9c:cf:c8:0d:
47:34:52:0c:4b:49:ed:b7:00:f1:ea:94:c5:16:2d:
1c:bb:7f:45:af:8b:25:30:77:b8:1a:96:70:a6:10:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:A4:DF:09:01:9D:38:3D:F2:1F:18:C9:FA:E0:77:5F:C6:E0:6D
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c7:fc:3f:29:51:3c:79:36:13:09:a8:3f:30:2c:20:52:fd:
b3:fb:39:42:8e:71:d2:15:63:71:2b:fb:0a:df:e6:58:f9:2e:
0a:fb:08:9a:9d:67:17:aa:47:52:d1:46:41:92:5d:1a:76:6c:
a2:a9:85:05:61:c4:48:de:37:30:6d:28:7b:c8:d7:ba:78:23:
34:31:01:99:d8:f6:78:a1:84:88:48:4e:4a:03:c1:dc:26:f2:
e7:2f:83:bb:0a:7e:b4:df:c1:f8:0e:51:01:22:47:15:fa:d4:
b8:d7:09:a9:e0:5d:4d:37:ff:07:22:57:bc:6e:59:f0:85:eb:
69:34:f8:bb:7a:fa:f5:88:3f:a5:0c:dd:c6:64:35:6b:2c:55:
19:d6:b0:2d:9b:36:54:01:1b:c2:b9:85:e9:16:b1:37:da:31:
27:37:d2:fd:93:4a:a6:87:e3:07:aa:c6:bc:e0:ac:e5:47:d0:
53:73:9f:3b:3a:5d:db:d0:23:85:8a:a1:25:26:af:e3:94:0b:
82:09:6a:bc:0a:5d:2c:1d:35:8d:3f:a4:f5:fb:f9:8f:71:52:
4d:38:dc:77:e6:e1:21:61:38:27:6f:43:a7:ea:33:32:13:77:
d0:85:ff:f4:c0:7a:f9:cb:bf:dc:1e:2f:14:35:90:9d:2b:f1:
b7:37:67:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNjExMTQwMjIwMDZaFw0yNjExMTYwMjIwMDZaMBgxFjAU
BgNVBAMTDTZhZjdjNTU2LWNjYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3vtENdLd+dWFKE8RV688jCZ1iKVwAyPmcUd/+3iD90hq1wCJFVcX1VxdK
7W5EUfuxJyTI/nbOjO1yIOoy6ocl56uwuC8WPsNXeGYemxTSW+M+odvYuryhRER3
9cdxXiOA9ge7GJAPW2BFew768ND4C39+EPBEeXS3pkzsqGZ66MPFzDOPsvqjniP1
HVk0I4GQMXy9KMjhrFJ2t61o8/n9YHAD7O/WKBqQ2Qx7mXsbR1RX1XdsKJHPDavj
7H6PcOirN2XrEnJM4UCJywZOPu8yJH1KsgWTMoTAMiJKnM/IDUc0UgxLSe23APHq
lMUWLRy7f0WviyUwd7galnCmEK9VAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNaqk
3wkBnTg98h8Yyfrgd1/G4G0wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjA2MjgvRjBDQ0JFN0NGQkEwMTFFQkFCNzg2QzQ5RDhB
MDE0Q0UvaGdYWFdab0VBdmNPd3ZKWTFzRnIwdVRvMGY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWx/w/KVE8eTYTCag/MCwgUv2z+zlC
jnHSFWNxK/sK3+ZY+S4K+wianWcXqkdS0UZBkl0admyiqYUFYcRI3jcwbSh7yNe6
eCM0MQGZ2PZ4oYSISE5KA8HcJvLnL4O7Cn6038H4DlEBIkcV+tS41wmp4F1NN/8H
Ile8blnwhetpNPi7evr1iD+lDN3GZDVrLFUZ1rAtmzZUARvCuYXpFrE32jEnN9L9
k0qmh+MHqsa84KzlR9BTc587Ol3b0COFiqElJq/jlAuCCWq8Cl0sHTWNP6T1+/mP
cVJNONx35uEhYTgnb0On6jMyE3fQhf/0wHr5y7/cHi8UNZCdK/G3N2dq
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:45 2026 by rpki-client