Error: rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
File:                     pRfOfXY3SrjJj08InHCnc9_ey6U.mft (raw, json)
Hash identifier:          9XDmr2Ystts9Aeq6VPpkjkj89NtVx6T/smHtN4D2hhs=
Subject key identifier:   7B:DE:1B:02:7B:1B:EA:8F:8A:4C:C5:BA:6C:F2:C7:C8:A8:94:6F:78
Authority key identifier: A5:17:CE:7D:76:37:4A:B8:C9:8F:4F:08:9C:70:A7:73:DF:DE:CB:A5
Certificate issuer:       /CN=F364B5D4AF/serialNumber=A517CE7D76374AB8C98F4F089C70A773DFDECBA5
Certificate serial:       8B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
Manifest number:          8A
Signing time:             Mon 21 Sep 2026 05:37:04 +0000
Manifest this update:     Mon 21 Sep 2026 05:37:04 +0000
Manifest next update:     Wed 23 Sep 2026 05:37:04 +0000
Files and hashes:         1: pRfOfXY3SrjJj08InHCnc9_ey6U.crl (hash: 4VJQVM6QVDBOxQntQr46rj8sIZvEXM3WKiWoesjgKis=)
                          2: AD5ABB264BA511F1B3E306DECE1D38B0.roa (hash: /y+033adLUiAQpUibK32N78UCS8A+yUlenW6S8LVos4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B5D4AF, serialNumber=A517CE7D76374AB8C98F4F089C70A773DFDECBA5
        Validity
            Not Before: Sep 21 05:37:04 2026 GMT
            Not After : Sep 23 05:37:04 2026 GMT
        Subject: CN=6ab0c280-bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:31:71:15:52:1f:c4:ad:c8:83:d9:25:69:
                    af:77:31:13:86:41:0f:da:14:ca:3e:a9:27:dc:fc:
                    a9:8c:0e:3f:40:f1:11:38:0a:48:61:52:b5:a8:8d:
                    4f:a8:4b:da:5c:f8:9c:6e:2d:fc:45:9e:44:bb:ed:
                    cf:ab:e9:8a:a4:46:a0:3e:1e:e5:17:c2:fb:dd:7a:
                    f6:c6:49:50:10:76:cd:b1:05:de:4a:bb:37:32:56:
                    16:d3:70:3f:19:42:52:e7:30:19:49:ab:1d:38:7e:
                    53:9e:b6:48:e7:b5:c1:28:52:2a:27:8d:b6:bb:f5:
                    67:21:99:1e:c7:ba:89:72:90:1d:82:02:42:d4:1b:
                    54:77:c4:86:3d:c0:70:e5:7d:e5:4a:81:e4:9a:1a:
                    0f:ee:ef:81:a8:6c:18:7b:a4:38:3c:bf:fd:5d:46:
                    56:a4:22:34:6b:0b:14:6d:cc:ac:19:fb:ce:54:f6:
                    76:83:eb:b7:dc:f6:eb:6b:ac:e1:31:de:94:63:35:
                    c0:fc:a2:10:c9:10:44:98:9d:01:d8:77:ba:4a:aa:
                    83:c5:e9:c2:8c:f5:b3:80:48:0a:5b:07:77:a8:aa:
                    b9:0e:87:2a:4c:c0:fe:c9:5f:34:12:81:03:9f:52:
                    59:24:bc:8d:59:5e:ab:d7:86:12:15:b1:8b:2b:b5:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DE:1B:02:7B:1B:EA:8F:8A:4C:C5:BA:6C:F2:C7:C8:A8:94:6F:78
            X509v3 Authority Key Identifier:
                keyid:A5:17:CE:7D:76:37:4A:B8:C9:8F:4F:08:9C:70:A7:73:DF:DE:CB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:38:89:87:4f:5a:f5:fb:7b:77:ad:f9:ee:4c:49:ba:fc:ba:
         12:9c:01:7c:a2:73:b8:ff:a0:9b:c5:ad:c1:92:98:ad:c0:2d:
         9c:92:bb:00:2a:13:61:ad:93:06:f3:b8:41:c4:95:55:28:42:
         f3:98:0c:6e:97:73:3b:df:9f:7a:35:2e:33:ef:4f:08:60:de:
         b9:e6:45:e0:23:d7:a6:1b:51:1e:9b:bf:80:e3:d7:52:97:6d:
         ad:3b:b5:49:dd:c7:3b:76:b2:e4:1c:6f:98:06:02:df:8e:73:
         be:b9:d2:d1:fb:d9:96:2b:17:f0:68:44:0f:72:d7:6e:c3:ac:
         2d:29:72:57:50:8b:50:2b:c2:21:6a:6d:93:29:e0:7f:82:30:
         5e:77:f0:11:b8:fb:d5:7d:a3:9a:67:0f:94:14:3d:15:7b:16:
         b7:34:e3:a7:26:86:48:93:66:7d:ae:6d:49:b0:ec:c4:0e:db:
         85:cd:4d:83:07:3f:3c:45:2e:31:95:73:64:1e:a9:5b:56:66:
         21:60:ad:ff:cb:ee:71:41:7e:de:e4:f0:ed:6a:e0:68:ae:4f:
         85:40:f4:f9:4b:7f:6c:73:94:a6:03:99:5c:51:6a:3b:97:ae:
         d0:a1:6d:79:56:6a:8a:40:8f:51:4b:92:f2:46:34:ef:66:b0:
         ae:47:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:22 2026 by rpki-client