
Error: rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
$ rpki-client -vvvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier: 0wC91fdoD4lpAONfV8/BL6P7NLT1bK7m4fh0eQJQALY=
Subject key identifier: AF:9A:DA:D3:93:2A:35:49:FC:E7:1E:6B:AD:FB:1F:EF:A4:AA:F6:1A
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 121D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number: 1144
Signing time: Tue 22 Sep 2026 00:45:33 +0000
Manifest this update: Tue 22 Sep 2026 00:45:30 +0000
Manifest next update: Thu 24 Sep 2026 00:45:30 +0000
Files and hashes: 1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: zLCwK/1uoz9kUctvg37rFOYBmZQZQpsxeLPI4TQOOfE=)
2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7P3OQMXmFsOa8WIMclWcCqGJQ7rr260vhG2nME8veoM=)
3: wDt4YuRBsALhCei7e6wo-u2Xl08.cer (hash: fJBiv8O0wZh6CtZ9/+QS/zyF54vwRtZW6gmFtWifhNA=)
4: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: K04OvzkAolzFq1fT1oiHvi+Mj+v62+EgJUQSVJaFvcM=)
5: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: BZnl11DNpWh5PGLZaaoh4nJoG83nXFKoRkTHjhyWgz4=)
6: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: aSidkzKJveb6i/hBK3iEqraQvUvcPExhwR8JmQ3u8Gs=)
7: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (hash: AfzL1WxSfoLeqoguZfbCpKb9Vic4c/fcP8fXCLcEQQ0=)
8: eW3qOGfLk4c-eX8UKo65xUiMl4A.cer (hash: mqEsTRKJt26AntvB6W5YNW2DnKeV27rd9z+f53GIxo0=)
9: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: V4+FuUEoCZJ6/ClJ+fuUe/iGrC1jBuQuQZHU+7fX8Q0=)
10: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: 7Yf2WnE0MSTH4H3Yv7yD9zrBsRwXsRyyy+8kRrCpH14=)
11: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=)
12: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: Vk6/QhwBtzjIFouUR5GpkXr9wLsJbmz7egRFfNs4fwU=)
13: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: 1f9QrB5GLNacvyX7ryc+rmCF6Rqqj5DBunkE238OAWs=)
14: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=)
15: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: gIOVAzJrB5GBBiknNN57bD8vKs+P+elCD7kOXrr9P7s=)
16: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: ESonQPm1BZCZHT8AmAPn4aB2WMWF4HVW9G/XjdItdL0=)
17: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0=)
18: 00oZ5jEGlkvQLLLYrRgH35prGQE.cer (hash: LKblwX6VPkqX+5B56CEh+E8d26+ROD/d77JKqICYltw=)
19: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: PiWeHC/tbHAm1fE1JWWzKnAwyAo5srtkm1xwcPPCIpA=)
20: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: IrSo9ZLwerj9+uDqOJHKXiYYIV/k0fHU25wPuauz04U=)
21: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 3DtWEKfWel4Ugy9StOMR1yLEPzZCWovefGWBtkcq17E=)
22: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: P1aSzAVDH5tUU9whtzq2lgECjXLQtpROj+qfdFLtGSY=)
23: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: O4IWRrDhqem9+Acu1pAthLUbgTcOC666MpFUC9ANW8k=)
24: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: RjzQhisIV4IZBDv1UUEp/AN146ndNgiP56kIgNc3obM=)
25: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: QBSq1jgFtVJGdhSF3kq8whg65OLr34x7xuXUJhj45n0=)
26: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: hzZBQC0rhVWEHJyovZhr6R4fT883Z/vVYRS/Cu/GUoE=)
27: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: 22IzvwF0ubOVwj7dDZXh+HuKNTWvJ+hh/Ol4mnaHd+g=)
28: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: a1WXPpH5gOhL3PAp6EzAsA/GCV1/LGE+Yg+s5Pl3/yE=)
29: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: DZr1zEYmsmNuEWAIAxR5GzgoUKVNwtM9sbdrMLou0xk=)
30: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: xpydeokQoxNzDVYCyCJS3vRj2ntfmkb6bVOY0XBoBcE=)
31: CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer (hash: YaTTmJfB5qkSFWL9ZYPB5h0TBO5OKdFOj/WIdmLXlIw=)
32: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: 78cXdx8qWdgwku4h6ARLYUeWMxb0UtRpJquZFI9BgCc=)
33: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: nkYQLFEms18aXVHheCfHd/hM6smDyW/5caP1l97myOw=)
34: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: WGAjmXTfCgdokK98XyWtkGwWIlDjE34bEfqdPnKFXNM=)
35: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: UNQ9r+ulyKJMsUSDxRq58fXfkcC8uAzkEQnsJKshYVc=)
36: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: ODPsy/iImVniqak/Pgduwz/zaZKctT401Fyabu3//kE=)
37: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: Q5EknewVPEVZwmglFeD965Bt2h8UU65GklGFGcZ/Alo=)
38: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: 9YlJmkUieHtPlYbBVLn2IEVg1vkosZNLAoAs1YdVgt8=)
39: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: 48HpkA2xVe1po/4zte4zm57TDXGBkFxyvNFS1bmsdbY=)
40: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: WXJbwAZTsEUuaDDDhQ0zysFJXc71VbV+Hx+e9SqnC9Y=)
41: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: 7jk8mJ3rCoxrRFhDFkx2XtYZWHW9cChZc7Me/I5u8+g=)
42: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (hash: 58jHcj/BEAmJsCs+pzCNIv2iJNAegjttXvaY6UAxVFc=)
43: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: IqULL+lG1Z5qhAnwhTtSEmsoGbxU4pT2kMU3GoeUntc=)
44: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: mwUHFb8IaRLlcLhhn/YB6d0ugbt/JKazY6dGaopzai0=)
45: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: Typpk6tXaearLSR7AFkBBrayaSDOI/ZgTs2Fo/8103k=)
46: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: aqPqCmyv7jwaNDhMTitwanekt3dmItYEuK1j6O4NCUU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Sep 2026 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Sep 22 00:45:30 2026 GMT
Not After : Sep 24 00:45:30 2026 GMT
Subject: CN=6ab1cfab-a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:4e:63:76:f7:07:3a:ac:0f:04:ca:2f:e1:
df:de:14:b9:42:17:06:1a:67:ce:d7:a5:9e:84:a8:
02:3e:cf:9c:f7:2a:85:b8:bd:a9:92:d5:cb:a7:ff:
63:3b:1f:bb:a4:2f:ee:09:8d:23:49:79:f6:11:b1:
78:c5:fe:5e:fe:92:af:62:df:f2:c8:03:10:5a:4f:
83:5f:d7:fb:f8:f8:84:c5:c6:3b:56:b0:53:2c:33:
d2:c3:b3:2c:1b:1c:2f:e8:cb:7d:da:c2:90:d2:67:
c3:ed:95:01:be:44:72:8f:09:d5:2f:63:6c:db:2d:
f4:41:43:70:d0:7a:da:61:15:7a:06:49:7c:f3:09:
1e:49:7d:0f:d0:88:c2:33:63:2e:52:02:53:76:3c:
e5:f9:a8:a3:3f:42:4b:82:3d:4b:35:9b:98:bc:bd:
59:3e:db:91:e8:c4:3e:aa:00:08:bf:2f:da:7b:de:
86:ea:a4:05:e1:00:7e:2e:aa:81:c2:a8:0c:a7:ca:
a3:91:8f:07:e8:be:a4:84:60:1a:be:2b:95:f1:4a:
23:1c:e6:b4:ca:91:21:b6:57:60:a1:9c:b5:85:0e:
75:b8:c6:02:78:a1:ce:b8:fd:99:fa:bb:ee:b6:d2:
6c:c5:15:57:82:76:98:72:dc:a1:ec:88:02:5e:17:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:DA:D3:93:2A:35:49:FC:E7:1E:6B:AD:FB:1F:EF:A4:AA:F6:1A
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:6c:95:52:eb:c1:d4:48:90:b6:69:53:b8:55:d1:68:c9:13:
9d:e6:02:75:aa:12:e3:e4:ef:96:cb:17:96:11:e8:20:f5:b6:
9f:f2:dc:91:f2:b6:1c:17:6e:0d:5f:25:5c:e4:18:84:f8:6c:
17:4c:8d:6e:39:1a:c4:6d:3a:9f:36:21:83:75:e5:22:1e:4b:
ae:a8:8f:85:7e:42:8a:47:5c:8c:4e:80:2f:c3:ad:9a:b9:e6:
82:51:1a:94:19:03:f5:f7:95:05:c3:8d:2e:38:c2:f4:f7:4b:
7f:cb:f9:51:34:1d:db:0f:f9:60:76:a1:c3:a8:53:51:98:e5:
2f:7b:64:91:41:d1:05:d9:fc:35:0d:b2:26:25:f9:11:9a:dd:
e1:eb:dc:f8:13:52:17:1e:59:77:42:a9:a4:fb:d7:9d:ce:93:
8c:2f:da:a6:b0:19:5f:75:77:cb:f5:c5:0e:e9:06:47:8a:e9:
01:71:79:4e:97:7c:f4:4b:8b:e1:c9:c6:f4:03:f1:04:92:5b:
91:df:07:52:c5:19:02:b0:ef:73:b1:36:e3:41:0d:8f:36:13:
4c:83:f9:0c:65:f8:56:d7:96:a4:08:8b:74:d6:3d:fe:46:0d:
5b:06:e3:71:48:52:33:44:01:bc:e0:c1:45:91:76:68:df:54:
61:17:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:28:21 2026 by rpki-client