Error: rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
File:                     WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft (raw, json)
Hash identifier:          S3Un39qK9jwGfgJ5+YKDUOW22TLY41nwLzM9D5M98Es=
Subject key identifier:   EF:C0:0D:20:D7:F3:79:0A:BB:48:5F:A6:4A:9E:DE:71:CC:0A:47:8E
Authority key identifier: 5A:B4:A9:FE:58:32:F6:C2:4C:04:2A:37:12:67:F6:60:C2:95:57:65
Certificate issuer:       /CN=F365F086AR/serialNumber=5AB4A9FE5832F6C24C042A371267F660C2955765
Certificate serial:       044C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
Manifest number:          044A
Signing time:             Wed 23 Sep 2026 03:46:28 +0000
Manifest this update:     Wed 23 Sep 2026 03:46:27 +0000
Manifest next update:     Fri 25 Sep 2026 03:46:27 +0000
Files and hashes:         1: WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl (hash: +5zKZAOCM6AGipViR1Isk8Eq4sh97K11CAnsePSfQS0=)
                          2: CA22557A6CC311EEADC6BA794AD9E6FC.roa (hash: oggy/nm73zs7H5jaTFugBIIpgLOqgVoTTLdGZpNH8nI=)
                          3: CE307EFE6CC211EE939580764AD9E6FC.roa (hash: 91FMWaym5o112Upsz2ppnXK0BcnsGf6XXkO595t9JSk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
                          rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F086AR, serialNumber=5AB4A9FE5832F6C24C042A371267F660C2955765
        Validity
            Not Before: Sep 23 03:46:27 2026 GMT
            Not After : Sep 25 03:46:27 2026 GMT
        Subject: CN=6ab34b94-acc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:23:02:9b:22:e0:a0:2e:a7:ee:cf:de:5a:
                    d7:b6:f4:94:ed:46:b3:8b:f8:a9:7d:11:42:ac:e1:
                    ec:c0:05:22:f3:0e:bd:1e:d4:4b:eb:25:d4:d6:19:
                    e5:6e:05:c5:59:3d:9d:29:7d:5d:f6:aa:dd:15:b8:
                    97:fe:ef:27:0a:5b:72:40:f2:44:cc:a2:d0:7d:e0:
                    19:34:6b:eb:5f:a9:54:37:54:67:44:66:73:46:1d:
                    fa:70:36:b2:87:6a:57:c1:f3:0c:47:81:3e:bd:fe:
                    33:de:c1:a5:05:81:7c:1d:be:78:82:24:38:44:51:
                    2c:b0:f9:b0:38:d0:27:79:ef:ec:84:71:c1:a2:1c:
                    5f:80:e2:8c:44:16:6c:a7:5a:4d:7c:96:ad:28:ff:
                    24:d9:aa:7f:42:7d:6b:30:1b:b9:2e:2a:f2:22:0e:
                    a4:62:63:8c:a2:24:2a:75:59:33:7d:75:61:6d:49:
                    f1:4a:97:ca:80:e0:18:7a:b4:4f:de:9e:81:39:d4:
                    ae:a4:e5:ba:0f:56:2a:68:6e:5d:01:bb:df:9c:c3:
                    9c:a5:d8:6d:a9:89:3a:61:db:f0:85:15:6f:91:f2:
                    f7:a4:d7:22:62:a0:f7:12:29:50:6f:74:82:37:47:
                    cc:ae:84:ec:cc:d0:da:d5:ff:5a:bc:65:6e:11:50:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:0D:20:D7:F3:79:0A:BB:48:5F:A6:4A:9E:DE:71:CC:0A:47:8E
            X509v3 Authority Key Identifier:
                keyid:5A:B4:A9:FE:58:32:F6:C2:4C:04:2A:37:12:67:F6:60:C2:95:57:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:10:83:72:a3:0c:33:3f:f3:79:97:f8:28:46:7c:98:2f:
         3b:6c:98:af:a9:cc:c5:9d:23:9f:84:16:1d:03:a6:3d:87:7c:
         d1:56:ab:f6:c0:14:a4:dc:57:ad:32:17:00:52:c4:fd:74:ea:
         0d:94:4e:90:b9:4b:42:55:57:9c:37:4b:63:0b:c2:86:e2:4e:
         06:d2:50:2e:6c:d9:5a:d9:37:c6:8e:0b:3b:87:ed:5b:9c:27:
         da:2b:f7:29:80:5c:8d:a5:f6:4b:a7:82:2a:96:2c:67:47:d5:
         3b:a2:73:f7:14:d3:41:fe:67:10:73:0d:68:36:0e:f5:c6:ff:
         be:43:08:29:77:ea:58:0d:cd:31:f2:a4:67:07:52:54:9b:28:
         55:fa:9f:b2:ec:fa:9d:28:61:99:37:90:0b:2c:26:2d:cc:f2:
         47:ca:a3:0a:c1:a6:d6:86:2d:8a:ab:8f:f8:0d:ef:9e:32:d9:
         0c:ea:69:b1:91:2a:12:a3:d2:56:ab:55:a7:47:df:e9:5b:75:
         91:62:f7:cc:30:b3:90:ee:45:6c:21:7a:15:e7:d0:4d:5e:27:
         6c:60:ca:70:cd:8d:ff:5c:d9:d9:52:bb:47:cc:57:aa:1d:2d:
         69:e1:c6:f9:7d:d3:82:db:06:62:1e:59:35:1d:8d:17:4e:ca:
         ca:1a:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:37 2026 by rpki-client