Error: rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
File:                     WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft (raw, json)
Hash identifier:          alx/qwe669eAKDFgg236fGJ8kIyWtnnmO7kSZAnZpcQ=
Subject key identifier:   6B:54:B2:D0:A2:E7:0C:6E:FC:2C:A7:73:82:49:67:67:73:30:0E:9B
Authority key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
Certificate issuer:       /CN=F36152D2AF/serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
Certificate serial:       0A6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
Manifest number:          0A69
Signing time:             Mon 19 Oct 2026 01:36:27 +0000
Manifest this update:     Mon 19 Oct 2026 01:36:26 +0000
Manifest next update:     Wed 21 Oct 2026 01:36:26 +0000
Files and hashes:         1: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl (hash: /OMXIpn0PHCmmPNmeR5Nf/w3GzuIHk9imdnt9laUW3o=)
                          2: 3D014ACE245611EBBD1D0152F8AEA228.roa (hash: MFrTUFfbbj7vAa2jXdNr9UDEEnV6UTAgpBBSQ+XncRo=)
                          3: 21BD81763EC811EE8B7946734AD9E6FC.roa (hash: VtpPsjIQ6asKfxUhbuH75a5ObTnCjtxuvTF4JyOA/iw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36152D2AF, serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
        Validity
            Not Before: Oct 19 01:36:26 2026 GMT
            Not After : Oct 21 01:36:26 2026 GMT
        Subject: CN=6ad5741b-de5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:a1:72:18:66:73:fc:a0:1f:c1:4a:c6:8a:
                    86:73:7e:c6:8b:b0:49:ce:7e:fc:6f:a1:b4:d3:05:
                    96:87:8f:4b:9f:84:eb:23:e4:8c:02:04:c4:45:2a:
                    c2:aa:4f:2f:f8:5a:69:72:64:31:f4:9d:90:fe:1e:
                    50:09:39:dc:0e:f3:4f:1d:29:42:8d:83:f4:4f:35:
                    bd:6b:86:0c:0b:df:a0:4b:55:e6:33:0b:dc:62:7c:
                    67:f5:e6:5e:60:11:3f:12:49:7e:ce:8c:94:72:cb:
                    10:9c:7b:cb:4d:16:5b:b7:a8:51:dc:5a:8f:4e:33:
                    bf:bd:81:8c:e2:9c:72:5e:b2:08:84:34:6d:2b:02:
                    78:c8:8e:6d:0b:7d:48:35:01:85:53:62:87:61:a9:
                    39:b6:09:12:dc:ce:ff:05:07:35:e5:39:54:4e:43:
                    6f:95:92:66:98:00:e6:fa:a3:9f:78:41:8a:e3:af:
                    53:3c:44:30:4b:d1:a0:51:49:b7:62:40:c4:a8:6e:
                    d4:af:7f:30:1c:7e:ed:e1:fd:e8:40:78:c7:70:37:
                    a1:d5:74:65:bd:4c:9f:89:98:f3:ba:d5:e3:95:5e:
                    f0:4b:0e:a9:b5:16:5b:d0:b3:15:13:04:40:7b:c3:
                    f4:35:e0:7a:c3:42:f1:db:e4:e9:f0:65:13:ca:54:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:B2:D0:A2:E7:0C:6E:FC:2C:A7:73:82:49:67:67:73:30:0E:9B
            X509v3 Authority Key Identifier:
                keyid:5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:48:07:8e:f8:f2:c2:b2:ab:9b:63:2f:06:7c:3e:87:1c:
         28:b5:71:84:fa:27:d8:61:6d:ff:4b:69:10:f8:64:0a:fa:87:
         c9:7d:16:bb:70:e7:8f:22:be:12:a2:8b:4e:f8:53:1c:59:2c:
         d0:05:a0:e9:0a:a1:1f:60:da:65:be:a4:30:87:28:e3:10:ec:
         b4:c7:d3:aa:73:d5:41:4c:b3:f0:20:4e:3a:9a:34:e4:53:ae:
         ba:86:43:f4:9d:e1:9f:70:c3:74:ba:33:a2:8c:eb:1e:4a:47:
         d3:30:bc:e8:81:6f:b3:da:74:14:e9:3e:50:2c:b3:ac:6f:ee:
         26:fb:75:ca:c6:e2:a6:8a:ba:19:2c:ce:83:a2:b2:46:5e:d8:
         68:27:c5:00:23:c7:bf:eb:ad:ee:0c:53:49:95:a6:3d:dc:f8:
         b9:17:a0:33:26:c6:c6:bb:41:e4:1f:1d:0c:2c:e4:d5:e8:d9:
         1f:a7:60:2a:e8:50:68:e1:5f:ee:59:fb:dd:fe:d0:ca:60:d9:
         63:12:cb:a7:76:e7:3d:27:5c:ca:7f:49:3c:fd:59:75:d2:91:
         9f:7d:af:97:3b:fc:47:15:81:ca:0f:f5:4b:dd:4e:63:5a:3c:
         6a:3f:0a:78:da:41:a2:84:c0:bc:fe:16:ee:ad:2e:95:a1:04:
         8a:48:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:23:04 2026 by rpki-client