Error: rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
File:                     RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft (raw, json)
Hash identifier:          YWfLRWjLiay5HhF5dvuTfu6EqArRkXso6i0GqnXyUaI=
Subject key identifier:   E8:3F:B2:35:50:65:13:83:01:D2:39:9B:0E:C8:2B:AC:60:E1:CA:DC
Authority key identifier: 45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2
Certificate issuer:       /CN=F3612066AF/serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
Manifest number:          08
Signing time:             Mon 21 Sep 2026 05:57:10 +0000
Manifest this update:     Mon 21 Sep 2026 05:57:09 +0000
Manifest next update:     Wed 23 Sep 2026 05:57:09 +0000
Files and hashes:         1: RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl (hash: pfCY3UVhUk4oUfRr7CpTcfwlnp1xMHsi+y/oeNZ0I1A=)
                          2: 3226718CB1D711F189148CCACE1D38B0.roa (hash: nJ64FS+WCksILj46Guscx9vgjK0V1m37yzo+54WTWTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3612066AF, serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
        Validity
            Not Before: Sep 21 05:57:09 2026 GMT
            Not After : Sep 23 05:57:09 2026 GMT
        Subject: CN=6ab0c736-ed00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:c4:77:66:05:22:20:a9:fe:eb:54:d7:b7:
                    98:37:27:c1:9d:a2:52:0b:f2:7b:b3:1a:1b:fb:d3:
                    82:e0:5e:fd:9b:af:5a:ec:22:52:b3:c6:4d:97:29:
                    bb:4a:22:72:48:d7:67:57:83:05:e8:64:fd:32:63:
                    53:82:3c:3f:ee:c9:e9:54:d8:3a:f3:62:4b:ca:84:
                    e6:51:aa:5d:66:9c:9b:df:ce:e4:04:e6:20:5c:de:
                    3c:f6:39:fe:b3:4c:97:da:62:a0:fe:8b:2d:63:4e:
                    c1:ff:87:fc:bd:09:fa:7f:95:56:87:30:d0:9b:d6:
                    7e:f3:9c:5c:a4:22:31:4d:24:3a:78:2c:2e:a2:6c:
                    99:81:19:bb:e1:8a:74:7e:6c:36:e3:f5:29:01:70:
                    26:15:5d:23:79:de:99:16:ac:26:b2:09:40:d9:a1:
                    67:44:d7:2e:b0:55:ed:ff:b7:ad:44:8d:96:a4:cf:
                    b8:98:c9:73:ea:d5:92:27:8c:da:36:e2:ea:77:c5:
                    e8:c9:51:86:e0:f0:2a:53:d5:be:fd:13:b7:9f:99:
                    04:7e:a4:e0:41:72:3e:90:f8:cc:fd:2c:76:4d:02:
                    03:7b:fc:1e:49:42:b9:a4:71:43:6b:4b:51:ef:06:
                    0f:93:db:c4:0d:cd:46:b1:54:d7:6a:71:d3:85:58:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:B2:35:50:65:13:83:01:D2:39:9B:0E:C8:2B:AC:60:E1:CA:DC
            X509v3 Authority Key Identifier:
                keyid:45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f8:91:5e:08:ea:90:69:27:6c:d0:59:25:76:33:46:be:05:
         f1:36:31:98:7e:37:83:3d:ed:aa:60:1e:b7:be:d7:d1:fb:d7:
         97:9d:17:14:03:e2:28:8e:21:79:b6:6a:7d:0d:69:c2:b9:47:
         8e:77:3f:76:2f:5c:8a:05:cb:05:85:7f:fa:e2:43:bc:85:6e:
         e1:69:62:d8:36:54:73:d4:8e:7c:89:d1:ef:1f:2f:e2:6a:64:
         42:bb:1d:8b:04:61:cf:1e:07:3a:dd:f9:45:37:e9:fb:1d:47:
         05:eb:c9:5b:af:56:77:78:69:b5:50:b1:67:23:19:99:12:49:
         e5:4b:f1:59:03:05:0e:61:3e:6a:db:ab:55:dd:72:b8:a3:ac:
         2f:6a:e5:93:48:05:62:e8:c2:e9:46:fa:21:82:41:34:64:ea:
         7a:54:e3:6b:99:8b:72:8e:88:e6:e3:50:95:8c:66:14:be:9e:
         08:0f:19:51:74:96:a8:7d:a9:5f:18:4a:1b:8a:14:a3:f6:63:
         ea:f1:0d:13:13:e8:c6:60:52:0a:4e:a9:33:e7:03:4b:0e:a4:
         83:d4:c8:41:33:3a:8c:8d:f4:25:50:79:49:67:1b:3e:5b:98:
         10:ec:09:cd:6a:57:29:b3:4b:25:73:7c:3f:c6:81:3f:e8:75:
         13:94:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:02 2026 by rpki-client