Error: rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
File:                     pfjRvVkiC4dTo3nUoz0jv0IysTY.mft (raw, json)
Hash identifier:          xVbRnPCNfn1lmSW0li17c0hTGgXWF7CYiXBcutADqMo=
Subject key identifier:   7C:0B:B3:97:83:93:70:42:CB:0C:2E:87:B7:7D:98:24:63:CD:9C:B2
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       07D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
Manifest number:          07D1
Signing time:             Wed 23 Sep 2026 02:12:18 +0000
Manifest this update:     Wed 23 Sep 2026 02:12:17 +0000
Manifest next update:     Fri 25 Sep 2026 02:12:17 +0000
Files and hashes:         1: pfjRvVkiC4dTo3nUoz0jv0IysTY.crl (hash: 2i5Q9UXpldql3P7sWnbwBCuTqE0YEyc8JRid1u15q4w=)
                          2: AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (hash: AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=)
                          3: 709C9AF07E9611F1B670E8A0CE1D38B0.roa (hash: kULxAx5OQMS8RRQIFyZkaRuPIeQUE8SFLSbtCir4i1Q=)
                          4: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (hash: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Sep 23 02:12:17 2026 GMT
            Not After : Sep 25 02:12:17 2026 GMT
        Subject: CN=6ab33582-f294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:3b:64:e5:19:12:40:7e:5a:10:89:79:49:
                    7b:cc:21:2f:5c:ba:d8:98:ea:35:e4:eb:5d:70:f9:
                    47:0a:4c:78:44:82:bb:26:26:5a:40:8c:9c:d3:0d:
                    fe:88:43:8a:d2:e3:41:bd:f4:87:3a:dd:98:e1:5f:
                    53:ee:87:c8:17:32:af:fd:81:a0:64:bb:29:47:e4:
                    ec:4b:9e:0d:eb:cc:63:8f:58:2f:9d:e3:3a:8e:47:
                    f4:33:a7:6c:d5:65:22:78:fc:24:9d:6d:f7:55:de:
                    98:a4:53:c5:ac:d7:66:00:16:b0:91:28:8c:dd:f9:
                    0f:25:ac:c8:92:c3:03:7c:68:17:91:e2:a9:80:7e:
                    8f:40:d7:bb:21:51:71:af:a5:10:c1:d9:28:fd:89:
                    ae:b1:08:01:d6:58:9d:0d:e0:c0:4a:21:04:43:c7:
                    a4:72:51:28:4e:fa:be:a2:aa:f1:23:3c:2d:5d:6b:
                    e5:79:1d:b1:88:4e:af:7e:70:60:b1:aa:fd:77:4c:
                    b1:cd:9f:4b:60:98:75:bc:1e:ff:ed:05:6c:c7:1d:
                    1e:37:a3:94:f6:1d:e5:f5:cf:71:5f:14:9d:a2:1c:
                    d3:54:a3:c1:87:af:eb:ac:28:4a:76:84:6f:d2:fe:
                    14:63:b5:61:a0:ae:88:0f:b3:c8:68:dc:c4:37:d0:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0B:B3:97:83:93:70:42:CB:0C:2E:87:B7:7D:98:24:63:CD:9C:B2
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:58:7b:9f:49:57:b3:52:ad:bc:b3:eb:c9:1b:1a:86:d1:
         80:c8:98:3f:1b:33:71:df:81:25:79:00:29:52:9c:81:ad:e7:
         44:bc:8a:d1:52:02:66:4c:7f:f1:e0:72:46:a5:73:6d:d7:34:
         bd:eb:cb:3c:af:73:13:aa:1b:40:2a:1c:ee:20:09:dd:70:78:
         5a:a0:6a:c6:58:9e:16:fb:ae:4e:fc:3f:ce:40:67:f9:e2:3d:
         ef:f8:94:fa:7c:11:2e:59:66:ed:ef:03:83:c9:61:16:cd:9f:
         d7:ca:88:1a:8b:01:4e:14:85:c8:a7:75:ee:0f:7b:3a:72:c0:
         24:48:62:66:ed:3a:4e:7b:5e:dc:09:f9:d0:93:47:b4:3a:b9:
         67:93:5e:5b:8e:ee:93:cb:ad:b0:81:e9:13:d1:67:d8:e4:23:
         d0:f5:53:7c:ea:4a:07:05:15:76:d1:e3:a5:5c:12:56:4c:6e:
         8d:29:46:44:9b:74:0d:f9:96:69:35:26:3c:d1:77:8b:f3:9e:
         06:b6:99:4b:42:dd:4d:9a:16:6a:62:d4:87:75:dc:c7:68:a5:
         5c:b3:d3:6a:3a:c7:b9:90:d3:3a:ca:d0:06:64:6e:a9:cf:5e:
         fc:ed:f3:58:18:89:79:e0:c9:09:b5:26:ce:85:7e:4b:e2:ce:
         8a:1a:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:51:47 2026 by rpki-client