Error: rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
File:                     cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft (raw, json)
Hash identifier:          3SDIj1cPX9zkcvdhlYj1OmqPM6NufWomLEXCvgw3Pc4=
Subject key identifier:   15:05:55:26:EE:4F:0C:C3:44:D5:2D:CC:F4:20:AE:08:40:B8:A6:ED
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Certificate issuer:       /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial:       01BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
Manifest number:          01AE
Signing time:             Mon 21 Sep 2026 05:03:54 +0000
Manifest this update:     Mon 21 Sep 2026 05:03:53 +0000
Manifest next update:     Wed 23 Sep 2026 05:03:53 +0000
Files and hashes:         1: cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl (hash: DFX9p93a97kTEPQXtDeqhUF51H/sAfttPZsYOvROFHg=)
                          2: 3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa (hash: f4YLBLBfUAXogyJhvZl0y7IkPqGGccMi1xOkCatN5G4=)
                          3: 57F5BEAAAC3C11F0BA850FBCDAE4EC9C.roa (hash: IRGVkC9Iwq4nwlm7oviEXl6YvRhsAZYUzYeVzQbE4lQ=)
                          4: 184BE21ACAFB11F097897982DAE4EC9C.roa (hash: VaMK+/dT2Q6pDxfaF/gb2r5AdyUutWWBmZfNWyJNyIQ=)
                          5: 9B100136CF6511F0A8BB93B4DAE4EC9C.roa (hash: OoN9sLhlpjdIHQAcjkQ8yi7gfir0O9MQgOPylY1+tIQ=)
                          6: B177409E197D11F1891FCAB1DAE4EC9C.roa (hash: oJM5riwTTw47G+aPvRoCqTaKUBHOKzqcOeNm+3lWbog=)
                          7: 536D1BDCCF6711F0B4C1ABBDDAE4EC9C.roa (hash: e3D4BVYWp1fgK7pZxSoviypldsbzYne17HJZDzOOKXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
        Validity
            Not Before: Sep 21 05:03:53 2026 GMT
            Not After : Sep 23 05:03:53 2026 GMT
        Subject: CN=6ab0baba-dfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:88:ea:46:03:e3:f9:44:b3:2d:08:f5:05:01:
                    00:a7:27:c0:3b:37:0d:8a:7f:e0:0b:95:15:78:ca:
                    8b:3c:a6:49:77:6e:34:f6:0b:50:95:40:9b:64:f4:
                    8a:79:38:9a:96:67:03:19:6e:36:ec:b2:69:80:7d:
                    de:60:f2:1d:f0:f1:29:f3:fe:15:4e:c7:a8:0d:3b:
                    14:7c:8a:05:d9:c3:0f:95:7e:89:be:d7:2c:03:0f:
                    a4:ad:cb:15:c1:db:1d:4c:35:aa:ca:41:b2:dc:0d:
                    ad:1e:ca:a8:f6:b9:2f:d0:f2:a1:8f:9e:41:9f:c2:
                    47:4c:09:fb:94:a5:cd:00:15:ee:f9:aa:17:0e:d1:
                    18:dd:32:7d:ff:10:a5:71:5a:e5:23:a3:98:a4:ac:
                    c6:ae:2e:7e:a7:bf:b0:fb:9f:24:67:84:12:d7:08:
                    cf:c8:d9:b8:0e:e1:df:08:7c:d7:88:9c:1c:43:80:
                    37:f0:93:0f:ab:c3:c2:36:20:c7:a2:ff:53:45:49:
                    1d:57:84:90:14:d5:f6:79:df:16:0a:12:77:00:0a:
                    30:c4:a6:28:a8:33:4d:61:45:74:c8:4e:e4:c2:bf:
                    08:3f:e6:2f:b2:fe:02:1c:28:43:0a:b1:83:28:cb:
                    e0:c7:ae:67:b0:80:54:ec:4a:3f:e9:2a:c1:2e:b5:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:55:26:EE:4F:0C:C3:44:D5:2D:CC:F4:20:AE:08:40:B8:A6:ED
            X509v3 Authority Key Identifier:
                keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:91:3d:25:a6:83:f9:1e:db:56:16:fa:ca:d1:f9:a4:7c:
         16:1c:1d:c1:5e:4c:99:fe:54:cd:8e:f7:3f:c6:ac:62:07:3e:
         4e:47:55:c4:3d:95:46:7d:ea:15:fe:d3:e4:9f:b6:3c:be:d1:
         73:15:a9:7d:48:89:7a:04:a8:be:03:d6:d1:2b:b7:09:b7:36:
         1b:4a:f1:f1:48:30:9c:1b:ce:f7:32:0a:ed:4b:4e:d8:7d:45:
         a0:b0:cf:0b:46:89:fa:97:f7:17:a3:0c:58:93:98:d7:0b:6f:
         26:51:68:c4:6d:cd:c6:9a:da:c5:90:9d:6c:62:fe:dc:a1:95:
         84:39:d3:90:0f:95:fb:d9:c7:2f:5c:d5:54:dc:f0:32:d9:8a:
         34:2b:ac:68:72:51:17:48:b0:44:49:71:0c:f3:fc:23:e9:21:
         fe:80:cf:c6:f3:f9:2f:90:97:c6:bf:1d:cd:e2:fc:9f:5e:23:
         e1:11:88:35:82:b4:b0:19:91:e7:ab:3b:3b:2f:21:c3:2b:bb:
         ce:4f:7c:0c:7b:af:c9:72:a6:78:51:e5:2a:0f:ef:ca:45:e1:
         af:9a:08:1e:5a:96:2a:2a:2f:18:59:fc:57:21:93:27:61:16:
         3b:e8:5b:7f:83:e7:19:05:8c:0c:48:6d:52:33:4c:b1:df:ab:
         aa:bd:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:17:09 2026 by rpki-client