Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File:                     wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier:          +GmgcEU+dMKrTdj367JQ/vCVF5WZdFROVuNSYJHGoIk=
Subject key identifier:   E6:88:81:CE:6C:15:5C:1B:69:63:B1:98:C8:39:07:02:67:C5:1A:C5
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer:       /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial:       012F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number:          012B
Signing time:             Tue 22 Sep 2026 05:17:25 +0000
Manifest this update:     Tue 22 Sep 2026 05:17:24 +0000
Manifest next update:     Thu 24 Sep 2026 05:17:24 +0000
Files and hashes:         1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: doxSxMQFy0z4ILFUih10Hqe8Zg/KBhDgUx7inOlhkzg=)
                          2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
                          3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
                          4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
                          5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                          rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
        Validity
            Not Before: Sep 22 05:17:24 2026 GMT
            Not After : Sep 24 05:17:24 2026 GMT
        Subject: CN=6ab20f64-9ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:f9:0a:81:1c:52:91:74:5d:f7:d7:c3:fe:
                    6a:5d:a3:42:ce:98:00:90:c5:a6:a0:73:e5:96:7f:
                    51:63:5f:34:75:3a:4e:92:49:6a:66:c4:d7:61:da:
                    6e:09:4d:48:44:32:03:5c:98:c1:9d:a7:b8:7c:2d:
                    17:f5:90:8f:50:c9:95:a6:d3:eb:df:ed:f9:4a:70:
                    f6:1e:bf:11:4c:29:fd:e7:2a:a0:bf:eb:d2:ef:4f:
                    15:ce:a1:c5:db:ae:ee:e9:1b:2b:1c:3f:7c:92:eb:
                    3e:4c:0d:8f:52:9a:8b:7c:ea:fa:c3:4d:48:c0:12:
                    48:9a:fc:f3:41:4f:5c:e3:09:86:31:5a:c9:41:c9:
                    d9:0e:27:26:ac:18:dd:cd:7a:42:42:86:b5:d6:1e:
                    19:21:20:3e:c3:16:c7:3a:7d:fe:44:27:6e:f3:4c:
                    47:9c:45:78:9e:90:98:ab:72:6c:be:8c:86:85:6c:
                    95:49:19:22:b9:61:e6:a0:2e:2f:a4:dc:eb:e4:73:
                    4a:74:8d:47:a5:29:2c:2e:2b:95:3d:02:b1:6c:75:
                    e3:f8:b5:3c:f0:ec:59:31:72:8e:59:76:8a:fa:38:
                    d5:26:22:bb:d4:a6:db:03:3c:98:ab:8a:cb:60:35:
                    f1:83:02:f3:bb:19:ac:ba:58:7e:1d:47:52:5e:8b:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:81:CE:6C:15:5C:1B:69:63:B1:98:C8:39:07:02:67:C5:1A:C5
            X509v3 Authority Key Identifier:
                keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:49:c8:59:bb:d7:38:9e:07:e5:eb:87:f4:c6:16:99:84:ee:
         de:43:f2:3e:24:77:89:cf:43:e5:d9:ae:ef:89:29:4e:4d:6e:
         60:34:8e:68:e9:66:a1:35:c3:55:25:f9:6d:9f:2e:b1:f3:3e:
         6c:37:5a:b9:c9:2b:43:e4:ff:31:f4:bb:d9:84:ae:72:c0:f6:
         f4:e5:d4:96:5d:a3:e0:fe:09:8f:17:70:f9:ab:d8:13:f5:89:
         30:5e:e3:5a:7a:7f:19:75:f1:ac:e6:2a:69:a2:23:50:37:3c:
         1b:79:35:50:27:a1:0a:9c:0d:58:de:8e:1d:da:a9:76:ef:a5:
         d7:6d:9c:da:b8:39:47:08:05:63:fc:ad:22:f3:6a:75:6a:f8:
         39:34:e5:74:84:bb:e3:6b:99:a8:39:29:f3:c1:7b:ca:4f:f1:
         fd:c8:b7:bf:90:0c:f3:85:e4:3f:ed:69:d7:a6:fe:4d:40:03:
         e8:cb:ba:5b:71:91:38:35:6e:03:ad:50:5c:27:67:a2:a7:79:
         91:b4:62:64:18:f0:b7:95:dc:ac:12:a6:39:19:71:3d:de:cf:
         aa:a1:e0:69:27:07:4a:76:a5:7c:c2:4d:48:f9:38:37:02:5b:
         6c:d8:15:4e:9b:0f:df:d5:9b:28:9b:84:1a:57:01:1c:73:48:
         63:bb:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:28 2026 by rpki-client