Error: rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
File:                     fdXEm3fH1Lf97amkdPdSEWYtoRw.mft (raw, json)
Hash identifier:          iwjHuQNAlymlvLTjxOfjUNy7iy53+crkopfnjCOBgs8=
Subject key identifier:   3F:CA:7B:7E:A5:C8:DC:83:9F:54:7C:5D:DC:C2:5A:F7:AF:43:FC:85
Authority key identifier: 7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C
Certificate issuer:       /CN=F36B32D3AF/serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
Certificate serial:       47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
Manifest number:          47
Signing time:             Thu 05 Nov 2026 05:50:57 +0000
Manifest this update:     Thu 05 Nov 2026 05:50:56 +0000
Manifest next update:     Sat 07 Nov 2026 05:50:56 +0000
Files and hashes:         1: fdXEm3fH1Lf97amkdPdSEWYtoRw.crl (hash: n2U2XGHyydKpzr0kPzQ+XjeR2orAD2HThX9mZCDkOiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B32D3AF, serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
        Validity
            Not Before: Nov  5 05:50:56 2026 GMT
            Not After : Nov  7 05:50:56 2026 GMT
        Subject: CN=6aec1941-453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:d9:2a:93:d9:f8:e8:26:e1:97:6c:a7:f8:
                    cb:96:c0:1c:cf:73:1a:c9:23:f1:ad:fa:be:49:2f:
                    51:5e:7d:25:84:99:0b:38:c9:b0:9a:f4:6c:a4:13:
                    9d:da:f8:e0:e7:05:f3:b4:ab:d5:83:4c:f9:41:e0:
                    d3:47:51:a8:77:7f:2b:af:ad:eb:8c:8d:8f:f6:13:
                    88:84:a8:55:6a:be:48:1a:38:9c:7d:09:f8:5a:25:
                    57:57:f3:3e:ec:9f:08:06:57:38:4f:1a:ad:0d:30:
                    77:80:20:77:24:63:27:cc:f2:e8:33:44:ab:79:73:
                    4f:b7:b2:cb:49:73:82:b0:76:30:3d:28:67:f4:ee:
                    31:9b:9a:67:ab:0a:a4:28:4e:9e:a9:4f:cf:0e:4c:
                    07:02:82:ca:bc:1e:22:83:fc:8a:c9:13:a8:6b:23:
                    34:5d:05:15:d8:e6:cd:b1:f9:0f:2d:56:c6:71:ff:
                    b0:e8:54:4e:05:79:c9:f2:ea:43:ac:93:6c:15:0a:
                    c4:3f:59:97:cc:23:c0:6a:c3:16:dc:8a:bf:fe:f9:
                    f1:c2:9d:62:91:72:22:fc:46:74:40:e1:ce:03:c6:
                    92:31:50:98:28:6e:c9:ae:7e:a1:67:f4:4a:a7:f6:
                    7c:f5:b8:aa:3e:34:66:1d:61:08:42:bc:5b:a6:a3:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:7B:7E:A5:C8:DC:83:9F:54:7C:5D:DC:C2:5A:F7:AF:43:FC:85
            X509v3 Authority Key Identifier:
                keyid:7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8e:27:45:c1:29:e7:20:76:40:e3:a7:df:c8:11:c8:f4:0a:
         81:ac:9c:09:18:3b:d7:8b:e0:f4:bd:3c:56:5b:18:1f:70:61:
         8f:4f:78:98:0d:be:c0:19:2d:5f:b5:e3:73:72:bb:2e:21:17:
         fe:41:86:fb:f1:27:ef:a5:ea:b7:bb:e7:7f:48:3b:eb:ab:9c:
         2d:9e:92:10:09:f4:fe:3c:91:52:37:1e:7a:e1:98:15:d4:6a:
         45:ee:ec:e5:8c:9a:ce:66:12:7a:ad:4c:aa:87:7b:60:7f:4b:
         4e:f6:45:fb:12:84:7f:a3:99:46:49:19:b3:95:ea:57:3d:4f:
         7c:b2:59:58:8f:ff:60:aa:fe:4f:a1:de:86:2c:e2:c0:d4:c8:
         e7:41:9c:bd:ae:f7:e5:ae:ad:f9:46:f4:3a:f6:a1:2e:6b:f2:
         e5:a8:08:be:c2:9b:61:ca:e0:2b:58:16:3e:f7:bc:92:b4:1d:
         1a:b4:0e:7a:d0:44:76:e5:5e:54:e3:95:f9:45:01:d1:d9:0a:
         27:84:cb:98:82:1e:93:8d:f4:9a:c0:ca:90:1f:c5:71:54:be:
         98:81:56:96:13:dc:e6:a7:b7:39:00:e6:f9:9e:94:5b:09:6d:
         91:07:ca:8f:5f:b0:9c:64:05:dd:08:3c:c3:0b:85:a3:98:5b:
         75:4a:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:01:40 2026 by rpki-client