Error: rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
File:                     UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft (raw, json)
Hash identifier:          j/jfKA6jJbBeAOlHGDpr7hQFPkZUTQzc+HyRxRdD9gQ=
Subject key identifier:   61:6A:02:55:5C:51:D9:AB:B5:44:1D:CE:4F:C3:D5:04:AE:A7:CD:BD
Authority key identifier: 51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
Certificate issuer:       /CN=F363FEF1AF/serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
Certificate serial:       0444
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
Manifest number:          0442
Signing time:             Sat 03 Oct 2026 03:47:28 +0000
Manifest this update:     Sat 03 Oct 2026 03:47:27 +0000
Manifest next update:     Mon 05 Oct 2026 03:47:27 +0000
Files and hashes:         1: UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl (hash: Dy+k3UgCUJnDU12pcVfSsM4rmXlzbpwHutAZFFe5jfk=)
                          2: E3258EFA826911EE8B24F4234AD9E6FC.roa (hash: eWu8r9rN4KOzqqY/XWlw6jqNH/cI2P6B/LwtjtABcNs=)
                          3: FA87AD5A799D11EE927FAF824AD9E6FC.roa (hash: w3PUKAmzr0cKU0yWoHF3R0NzFnNrAi3OPe5Is4QZlH4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FEF1AF, serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
        Validity
            Not Before: Oct  3 03:47:27 2026 GMT
            Not After : Oct  5 03:47:27 2026 GMT
        Subject: CN=6ac07ad0-37fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:24:89:ab:b5:d0:00:16:71:ea:dc:ad:4c:
                    c1:bc:94:bd:b1:a8:cb:4f:0e:05:85:c4:5d:d7:9a:
                    e1:9f:0c:b1:5d:18:cc:34:45:a8:8d:88:82:fc:1f:
                    45:3e:8a:29:ed:ef:3a:45:09:d3:a6:2a:de:0d:34:
                    e3:cc:71:be:eb:0f:07:ac:3e:5c:1b:04:ea:b4:95:
                    fb:2f:f1:f1:10:69:2d:53:f9:96:47:67:86:b1:8b:
                    cf:4b:62:f7:43:0b:b7:df:e4:b8:0f:3f:14:f2:e1:
                    c9:45:68:76:2c:cd:a4:05:fe:68:56:bb:a9:12:b5:
                    56:15:d9:c3:04:0b:43:9a:49:e2:0c:da:77:8a:74:
                    a9:1f:28:91:4b:36:29:aa:c1:d7:06:f0:57:22:b7:
                    cb:1b:e4:e3:ee:7c:ea:57:3c:3e:12:d5:09:a6:5f:
                    80:15:1e:5b:d6:f9:8b:14:8a:f5:43:df:18:59:d9:
                    5a:c5:fa:2a:98:bc:d3:19:51:d0:dc:d6:4e:2a:0a:
                    ea:97:bf:eb:29:76:c8:71:24:ce:9a:7f:14:7b:07:
                    db:94:72:8e:f5:f6:3f:5a:69:52:15:13:67:81:d3:
                    d0:ac:f8:f8:8e:72:ca:51:b6:d8:dd:39:40:29:9f:
                    a8:87:7a:2f:5d:a3:ce:39:9e:32:2b:b0:8b:c3:1a:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:02:55:5C:51:D9:AB:B5:44:1D:CE:4F:C3:D5:04:AE:A7:CD:BD
            X509v3 Authority Key Identifier:
                keyid:51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:df:f6:ad:14:23:54:f1:ce:23:1f:95:28:4d:84:d7:8c:62:
         0e:4e:35:8d:f1:ee:b0:3e:db:23:68:b3:e6:9f:af:a3:7c:b9:
         ef:c0:65:89:d9:9f:fb:9a:f0:cc:29:cb:a5:e4:d1:3b:86:2c:
         e0:aa:17:be:7f:fe:8d:7a:28:ed:6a:f9:20:e2:0d:ce:11:a6:
         46:82:23:98:56:2d:e9:f1:07:15:ac:9b:99:0d:87:e2:80:09:
         3b:22:b7:b3:86:2e:33:aa:ac:ae:88:80:26:d6:52:37:9d:60:
         0c:06:8c:db:3f:72:93:5b:b4:e3:c2:f0:82:f3:e3:97:cb:4e:
         a4:9c:60:b8:25:65:80:43:71:3a:a3:a0:58:1b:14:d4:30:4d:
         d4:86:cf:40:bb:24:bf:40:12:1d:b0:73:ff:e8:7f:71:a5:3d:
         dd:97:f8:41:44:42:5e:af:59:c3:db:0b:93:57:cb:8f:aa:dd:
         5f:0b:68:67:c8:9e:64:d3:f2:1d:17:df:88:8d:8f:e5:da:73:
         08:fa:10:4f:9a:ef:fe:ec:ec:e9:fd:83:61:bf:be:a4:73:8b:
         50:53:a9:4e:de:74:68:d3:64:b8:bb:2f:2e:7d:6a:dd:02:60:
         d8:6f:48:43:41:ff:a8:34:54:c9:f2:dc:73:2d:87:43:f6:4f:
         72:2b:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:34:08 2026 by rpki-client