Error: rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
File:                     Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft (raw, json)
Hash identifier:          J2Ef0syn6uaNR4Qeq7YdnLJlDRsw0F62ja5eUCMECRs=
Subject key identifier:   94:BA:71:D8:71:90:08:94:CC:B2:FD:08:2D:58:3D:47:FE:B7:54:EC
Authority key identifier: 16:CE:53:FB:BF:95:B5:5E:29:1E:23:A1:FD:CA:43:7B:66:A5:84:D0
Certificate issuer:       /CN=F368EFA9AF/serialNumber=16CE53FBBF95B55E291E23A1FDCA437B66A584D0
Certificate serial:       6B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
Manifest number:          6A
Signing time:             Mon 21 Sep 2026 05:40:28 +0000
Manifest this update:     Mon 21 Sep 2026 05:40:27 +0000
Manifest next update:     Wed 23 Sep 2026 05:40:27 +0000
Files and hashes:         1: Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl (hash: NZzNkAIitTmmMkthoAC/taZ0MF8VBpbX5CE7G1wyxOw=)
                          2: 3FEDDEF663DD11F190C6BEB3CE1D38B0.roa (hash: 3xvDuGuPm+PDeZR/Wm7c96ujoWhROffy2SCsDzfKouA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368EFA9AF, serialNumber=16CE53FBBF95B55E291E23A1FDCA437B66A584D0
        Validity
            Not Before: Sep 21 05:40:27 2026 GMT
            Not After : Sep 23 05:40:27 2026 GMT
        Subject: CN=6ab0c34c-1a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:d3:12:55:f9:82:7b:0e:1a:66:71:a8:d2:
                    0f:e0:2e:f5:d6:26:aa:08:95:fd:71:e2:21:b2:67:
                    77:db:af:db:cc:07:77:d3:36:22:1d:44:83:61:6d:
                    85:96:9f:0c:c0:75:56:6d:2c:e7:c9:45:a1:ff:6a:
                    cb:c6:11:88:37:16:14:c4:df:1f:43:c6:89:4d:9f:
                    a0:d7:62:c9:96:42:81:4e:e1:f3:a6:e6:f7:ca:4f:
                    8a:84:fd:37:2a:b3:f9:b9:ac:f7:ea:92:3d:f6:8c:
                    24:4e:7f:c4:6c:46:78:ec:d7:ab:7d:0e:e9:b2:e0:
                    06:06:a6:f5:b8:11:ac:8a:34:6d:6a:3d:01:6e:3a:
                    cb:26:a4:cf:5f:a2:8d:23:32:67:d4:f4:39:f8:1e:
                    f6:9f:3c:32:c0:bf:5f:fb:6b:2b:16:d5:7d:0d:6b:
                    83:b9:0a:96:56:5f:b1:34:81:3f:97:d8:58:c4:dc:
                    fe:ba:14:9d:ef:8d:75:6f:4f:77:cf:b8:ee:0d:49:
                    03:e4:f9:23:51:af:37:e3:c0:f0:e5:83:95:60:c6:
                    eb:e2:57:3a:70:c9:74:96:46:84:c0:d1:e7:5c:b3:
                    11:40:25:a5:74:3d:ea:f3:7a:ba:33:cd:5c:dd:1d:
                    01:0e:f6:d8:c9:cb:24:36:49:0b:e9:b2:16:90:4a:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:71:D8:71:90:08:94:CC:B2:FD:08:2D:58:3D:47:FE:B7:54:EC
            X509v3 Authority Key Identifier:
                keyid:16:CE:53:FB:BF:95:B5:5E:29:1E:23:A1:FD:CA:43:7B:66:A5:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1e:c0:fc:4a:38:d1:e6:fd:7a:98:59:ae:40:c9:b4:1f:45:
         53:ec:40:b5:2a:83:b8:e4:ed:18:7a:8d:9a:37:3d:f5:1d:7c:
         73:9f:1a:a9:09:57:3f:78:d9:57:1d:88:ef:01:4d:f0:40:6a:
         2c:25:1e:e2:50:5f:85:73:c6:0e:b1:d4:58:d0:d8:1f:2f:39:
         0f:9c:e0:20:23:cb:09:08:6c:ad:9b:3b:05:9e:fc:98:90:b4:
         cf:66:15:3f:a1:69:a5:38:6f:53:ea:4a:c2:8a:b4:24:22:5e:
         22:5d:d3:19:c4:12:99:5d:0e:8c:4e:c6:c2:e3:08:4c:f3:db:
         2e:8c:6f:6a:f8:08:f9:1c:b9:9a:2d:dd:0e:af:67:2a:6d:df:
         78:9f:53:cb:da:86:19:36:54:4f:45:d1:91:d2:35:75:62:36:
         42:c5:45:65:d4:2e:a5:db:90:e9:1d:a4:c1:a3:a3:5f:4c:a4:
         0f:07:44:70:69:5d:db:a3:c5:cc:e1:ce:0c:2d:cd:cf:42:92:
         e3:17:55:f0:b8:74:3a:81:52:f0:0b:b1:13:f2:98:4d:af:4e:
         3e:8d:cf:fa:20:0c:ea:a4:9a:4e:84:86:3b:39:3f:8b:e3:ca:
         dd:29:e4:5c:2f:c9:30:a4:34:6a:2a:a3:cd:40:f9:e1:51:ad:
         65:0e:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:50:19 2026 by rpki-client