Error: rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
File:                     RfLi_fMRPvxjNXV8r49bXsSszbM.mft (raw, json)
Hash identifier:          +QocsPUHPG+755pYQM81oJHG1YBEkh1QOZZMAucuavQ=
Subject key identifier:   88:8A:22:00:E9:03:61:34:CE:D5:C1:86:59:5A:F4:7C:20:CA:FE:FC
Authority key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
Certificate issuer:       /CN=F36A6D8BAF/serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Certificate serial:       0187
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
Manifest number:          0182
Signing time:             Thu 05 Nov 2026 05:11:28 +0000
Manifest this update:     Thu 05 Nov 2026 05:11:27 +0000
Manifest next update:     Sat 07 Nov 2026 05:11:27 +0000
Files and hashes:         1: RfLi_fMRPvxjNXV8r49bXsSszbM.crl (hash: l9qB6mtkb8SMNSbyOPishp8xFWSnLRJlsHrZmY0jRIk=)
                          2: 380C0580278511F1B43266B7DAE4EC9C.roa (hash: bfdf+j4kevo+Pizg6P6e/82+1I3zu33b51tah9+KFWc=)
                          3: B23FF6B4278411F1A38689B3DAE4EC9C.roa (hash: LO47Ya7O99gQwMPITew91xxQM1GvNNiTnvhJCLpvLr0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
        Validity
            Not Before: Nov  5 05:11:27 2026 GMT
            Not After : Nov  7 05:11:27 2026 GMT
        Subject: CN=6aec1000-beb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:b3:1b:63:4d:3f:c3:30:80:e5:8c:55:48:
                    ef:f3:52:73:ec:6e:1b:9d:b1:30:eb:f7:07:06:fb:
                    b7:a9:7c:e6:83:70:e0:9b:81:81:c9:cf:cd:ee:31:
                    a5:fb:c8:d1:ca:09:d7:37:69:29:d9:39:e7:8d:d5:
                    c3:76:53:3c:3c:2c:96:85:a2:52:c2:14:22:e4:16:
                    c1:9e:bf:7b:20:6f:cb:a4:d4:a7:aa:1d:8b:ef:21:
                    00:69:8b:9a:03:c3:9a:29:2d:de:24:ea:2b:0f:3a:
                    7d:f2:e8:3d:b6:8e:25:c5:29:3f:a3:7b:41:28:02:
                    1e:0e:a7:68:97:85:ce:b1:c2:0f:57:9c:3a:0c:8d:
                    15:bb:69:d3:e9:d2:32:93:1e:99:c6:72:42:d5:28:
                    17:95:9c:43:44:94:66:16:ec:32:56:cd:b7:7b:42:
                    03:16:6e:e1:15:77:42:4e:93:58:93:7a:fc:c7:f0:
                    74:0d:fa:cf:1f:79:94:eb:43:00:18:cd:06:33:dc:
                    f5:76:c3:97:5b:a4:39:7e:27:ed:29:4f:1b:47:db:
                    77:1f:d6:f1:58:b0:f1:48:ec:3d:36:ba:97:3e:76:
                    8f:c8:37:c5:87:61:30:07:4f:a5:fd:e8:ba:16:aa:
                    7d:2c:db:eb:ee:cb:89:a3:c1:51:bd:4d:67:59:01:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8A:22:00:E9:03:61:34:CE:D5:C1:86:59:5A:F4:7C:20:CA:FE:FC
            X509v3 Authority Key Identifier:
                keyid:45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:af:61:86:98:d1:b2:a2:cc:19:3a:50:94:43:1e:77:d0:19:
         ad:e9:9e:ca:71:20:60:74:4c:8e:15:40:3d:64:02:9e:44:91:
         d8:8f:85:4b:8b:12:d3:c0:57:8c:96:bb:9a:1a:06:26:ed:e2:
         b8:fa:2c:39:4d:54:bc:f8:ed:94:73:0c:b4:bd:b5:48:0f:e0:
         69:0e:c9:71:fc:89:20:f4:74:12:5a:49:b9:9f:03:3f:57:f0:
         fb:40:69:a3:3f:44:e8:aa:fe:6c:2a:db:fd:e7:e2:61:61:b6:
         ec:86:da:ae:3c:fe:56:c7:07:cb:30:74:5b:17:5f:15:9d:b7:
         35:a8:1f:f1:b5:e8:ee:17:73:0e:67:5c:78:2d:67:3f:4b:72:
         d8:2a:50:a4:df:b1:f7:e3:26:5c:5f:9e:79:48:93:45:76:45:
         f7:7e:20:ee:f7:5c:69:84:1a:a1:fe:d9:60:c0:f7:93:1f:e0:
         8a:f0:7b:10:94:fa:bd:56:ab:ef:71:b5:4f:e6:48:1d:19:b3:
         36:10:ae:ef:62:96:20:b0:24:d6:e5:b0:55:9b:2d:be:0a:22:
         51:55:80:8c:3b:ea:66:7d:e0:0f:05:a4:13:3e:c1:8d:db:54:
         7d:21:a5:88:a0:4e:19:b5:f2:13:20:57:d2:cd:35:ed:1a:35:
         7e:06:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:31:47 2026 by rpki-client