Error: rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft
File:                     9e1xWUebR2aqfd4tEt3JdvbRht0.mft (raw, json)
Hash identifier:          8lQwtU9LpWLGJEd/J1PwnkuNuqO7FD3tn+wNe7puTKU=
Subject key identifier:   76:2E:17:AE:75:FA:D6:77:10:75:C1:B2:25:9B:A8:50:C6:98:6F:63
Authority key identifier: F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD
Certificate issuer:       /CN=F36B10B8AF/serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
Certificate serial:       08AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft
Manifest number:          08AA
Signing time:             Tue 22 Sep 2026 01:55:32 +0000
Manifest this update:     Tue 22 Sep 2026 01:55:31 +0000
Manifest next update:     Thu 24 Sep 2026 01:55:31 +0000
Files and hashes:         1: 9e1xWUebR2aqfd4tEt3JdvbRht0.crl (hash: C3eDyqZZXmQf2ZwW2kSTgFkA3RgVf8g09WgnDkvWmno=)
                          2: 23D4257A20FB11F0900F649ADAE4EC9C.roa (hash: 8smFVw72lA8BnnfFGzknWQqrmzQF/6hSOlIgx/+A4vM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B10B8AF, serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
        Validity
            Not Before: Sep 22 01:55:31 2026 GMT
            Not After : Sep 24 01:55:31 2026 GMT
        Subject: CN=6ab1e013-3e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:8e:0e:79:bf:5d:2c:d3:6c:dd:83:9c:75:
                    05:6b:fa:39:90:d3:75:f7:61:77:4a:02:9f:64:1f:
                    75:ee:50:9a:3e:b5:a5:ce:aa:3f:eb:fa:4a:35:1d:
                    73:61:0f:68:fe:6a:1c:3f:d7:03:ac:28:1d:f3:54:
                    d4:be:4a:c1:ec:3b:a9:6a:ed:58:59:ae:7c:35:65:
                    2e:a7:bf:27:2d:e1:7c:03:8f:b8:05:b6:4a:31:80:
                    fe:38:94:f9:bd:0c:94:ef:18:bc:e7:e0:af:98:0a:
                    52:9d:33:8e:43:22:f7:bc:07:9d:4c:c0:eb:3a:f5:
                    5a:9f:bb:f9:86:e3:60:2c:f5:6b:06:2c:3b:60:4c:
                    23:47:4d:72:bc:ec:33:68:35:4f:9c:ee:6d:17:a6:
                    4e:4d:be:04:b6:4f:a4:04:61:2a:b3:9f:50:e3:69:
                    6f:96:0d:ed:ea:fa:5c:94:53:aa:dc:24:c0:7a:3a:
                    82:e2:15:78:aa:c7:29:2b:f6:67:4b:91:a3:7e:ac:
                    99:ae:3b:78:0f:fa:39:f9:60:b9:70:77:e4:83:aa:
                    fe:21:15:aa:cc:27:b9:1e:c6:a4:d0:4a:c0:20:ba:
                    19:96:57:ae:7e:2e:07:25:e4:56:be:86:47:09:81:
                    55:8a:b0:7b:7b:a2:e4:08:70:30:f9:22:6e:fb:f1:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:17:AE:75:FA:D6:77:10:75:C1:B2:25:9B:A8:50:C6:98:6F:63
            X509v3 Authority Key Identifier:
                keyid:F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:49:4c:52:75:5a:0e:be:cc:48:df:16:07:ff:93:4a:a5:
         82:a8:b1:51:5e:9c:7f:61:d7:fc:ae:7f:b0:be:1f:fc:57:e5:
         67:2b:3b:60:46:05:b5:e2:9d:69:4b:fe:67:d9:82:a2:80:f4:
         1a:3b:3c:e8:f6:90:83:26:61:17:c4:86:bd:1c:b2:b4:3d:1f:
         6a:fc:1f:11:89:be:4f:00:62:74:9e:49:8b:da:4f:3d:9b:44:
         83:1c:6e:1d:92:af:70:21:bf:e8:e8:9d:59:a5:c1:5c:58:bd:
         68:cf:16:94:9d:e9:6c:ae:8a:a6:19:83:97:f5:74:81:4f:a9:
         f4:57:22:78:2e:e9:e0:ef:87:27:a6:5d:32:e2:41:c4:c9:17:
         6d:84:75:04:83:15:f0:bc:24:b8:b1:28:34:4b:2c:39:9a:a8:
         b4:e6:d1:ad:c0:c9:4d:cf:68:2c:a5:c1:37:8d:cb:59:66:b9:
         a8:69:6f:c9:fc:b0:37:bf:cf:36:5f:3a:93:f5:78:ce:6e:00:
         59:9f:0d:9c:42:7a:64:fb:8c:e4:c8:ec:5a:cf:47:91:3c:ca:
         d0:44:68:eb:7a:5e:cf:ef:a6:ca:38:73:90:48:05:88:a1:07:
         83:cc:a6:74:56:1d:ac:ad:18:f3:b7:c9:68:5e:eb:82:30:88:
         51:77:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:48 2026 by rpki-client