Error: rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft
File:                     fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft (raw, json)
Hash identifier:          T53TW/sZwRnhcJRzYozix9KR/LcNIDBK6jB/GNGlFP4=
Subject key identifier:   58:7A:EF:47:22:5F:20:FE:F5:A1:0B:02:DF:BD:C0:D1:C1:C6:3D:0A
Authority key identifier: 7F:1A:87:55:EC:84:BD:18:7E:5E:E3:2F:76:59:AD:10:0B:ED:82:30
Certificate issuer:       /CN=F361ED8CAF/serialNumber=7F1A8755EC84BD187E5EE32F7659AD100BED8230
Certificate serial:       0117
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fxqHVeyEvRh-XuMvdlmtEAvtgjA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft
Manifest number:          0116
Signing time:             Sat 10 Oct 2026 05:23:00 +0000
Manifest this update:     Sat 10 Oct 2026 05:22:59 +0000
Manifest next update:     Mon 12 Oct 2026 05:22:59 +0000
Files and hashes:         1: fxqHVeyEvRh-XuMvdlmtEAvtgjA.crl (hash: +SrU62dHkEOeiQFh/O2dQmz0zbKOfv9n5H+scX0Rq0Q=)
                          2: E95F8804EC7D11F0874D9DBFDAE4EC9C.roa (hash: 6idkzE9LQSRQ2OV6QxZLrwF5d7TAUb2wXQ5qIcdASLg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fxqHVeyEvRh-XuMvdlmtEAvtgjA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED8CAF, serialNumber=7F1A8755EC84BD187E5EE32F7659AD100BED8230
        Validity
            Not Before: Oct 10 05:22:59 2026 GMT
            Not After : Oct 12 05:22:59 2026 GMT
        Subject: CN=6ac9cbb4-97ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:61:8a:7f:be:b1:e2:64:bf:88:d5:c4:b4:
                    5f:bc:cf:56:a3:97:17:13:bd:9a:af:e4:98:e7:94:
                    32:7e:12:bf:b8:f7:c6:76:5d:fc:aa:7c:06:e4:6e:
                    12:b8:d2:07:f9:3f:4b:a3:c0:dd:f9:28:6f:d9:e1:
                    47:67:d6:c2:73:c7:2d:c5:35:e2:c4:ca:1f:b6:be:
                    d7:35:0d:64:e1:35:a7:4f:88:19:99:d0:ad:38:14:
                    ac:d4:99:27:8a:53:21:b3:73:af:76:84:a5:bf:68:
                    a8:bc:4a:a7:8b:29:94:4d:6a:1e:d9:8c:4c:12:3c:
                    67:a8:83:59:3f:9a:6c:e0:6a:fe:c6:02:96:29:63:
                    8b:02:3b:9a:6a:53:15:b0:23:f4:d3:b9:25:36:49:
                    3a:f1:3d:ae:91:81:ff:c2:a3:1e:6d:12:31:35:e8:
                    70:3b:e7:2f:f9:0b:15:8c:68:56:68:89:46:e8:7d:
                    5b:6b:db:a7:e0:78:79:1a:4b:18:b5:d2:87:30:a2:
                    72:96:6b:71:9d:e6:80:10:d8:0c:ab:4d:e2:64:15:
                    45:e9:9a:39:e0:9a:e8:91:82:4d:73:65:54:01:13:
                    ff:c8:10:52:ec:4b:45:5c:43:77:b6:4d:d7:e0:18:
                    96:0a:a8:c4:73:82:da:e1:90:08:63:f0:c6:d5:c1:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:EF:47:22:5F:20:FE:F5:A1:0B:02:DF:BD:C0:D1:C1:C6:3D:0A
            X509v3 Authority Key Identifier:
                keyid:7F:1A:87:55:EC:84:BD:18:7E:5E:E3:2F:76:59:AD:10:0B:ED:82:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fxqHVeyEvRh-XuMvdlmtEAvtgjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED8C/AA25092EEC7911F0A21BFDA6DAE4EC9C/fxqHVeyEvRh-XuMvdlmtEAvtgjA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:49:1d:dd:6b:d5:17:8b:90:8c:f4:60:56:fb:13:e0:53:
         49:fa:44:bf:12:ce:2a:7f:c7:39:60:7a:a9:e2:3f:09:45:a9:
         4c:9e:d9:7b:9c:a4:2e:6b:63:d6:e0:29:74:9b:dc:43:f8:01:
         1a:ab:93:9e:3c:dd:7d:c7:98:59:9c:a3:cf:91:90:cc:3e:1b:
         6f:a5:b5:a8:96:b8:f5:80:04:35:d8:59:7f:ca:24:5f:b9:22:
         e6:3e:5c:99:e6:29:75:87:04:d9:48:79:93:e0:93:f4:c1:8e:
         45:be:97:27:46:4f:5d:36:2f:7b:d1:b6:de:61:b8:c0:cd:4a:
         06:2c:d0:1c:b6:05:59:d2:49:27:f0:b4:68:57:ff:68:4e:af:
         49:22:ee:46:76:e7:02:bc:16:96:09:e1:90:10:66:db:25:48:
         25:52:47:36:09:d9:84:bf:c4:57:71:f3:58:9d:18:b0:9f:32:
         10:6f:37:8b:42:66:c4:06:ad:ae:e6:91:93:5f:59:4f:11:e2:
         d7:e0:64:9c:8c:9f:ca:47:10:f8:9a:2b:7d:8e:29:bd:69:5b:
         19:4d:11:85:a9:dc:76:70:23:99:72:e0:fa:1c:c9:0c:27:72:
         d7:98:4d:ba:f1:c7:09:e0:f6:11:7f:84:af:ba:b4:7a:14:4a:
         2c:e8:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:35:34 2026 by rpki-client