Error: rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
File:                     fdXEm3fH1Lf97amkdPdSEWYtoRw.mft (raw, json)
Hash identifier:          ZEovlp1uAThcMPydLC0Mgdc1b6DpsBvG/300oDryzCI=
Subject key identifier:   1C:4D:7E:99:4E:E4:BB:47:BD:69:D1:87:18:9E:FE:F9:9A:3D:85:32
Authority key identifier: 7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C
Certificate issuer:       /CN=F36B32D3AF/serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
Manifest number:          1A
Signing time:             Mon 21 Sep 2026 05:51:45 +0000
Manifest this update:     Mon 21 Sep 2026 05:51:44 +0000
Manifest next update:     Wed 23 Sep 2026 05:51:44 +0000
Files and hashes:         1: fdXEm3fH1Lf97amkdPdSEWYtoRw.crl (hash: ouHc/nsezCbAZoC7ha3gYKJMEalIK9EYh+CZudqnA0E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B32D3AF, serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
        Validity
            Not Before: Sep 21 05:51:44 2026 GMT
            Not After : Sep 23 05:51:44 2026 GMT
        Subject: CN=6ab0c5f1-56de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:d5:64:68:6d:f8:59:55:39:2b:c7:8c:bf:
                    2d:0f:39:22:24:62:6c:8b:a6:a7:56:52:49:fa:99:
                    91:63:8d:5d:98:2d:69:b8:78:67:e8:e0:d6:cb:b9:
                    59:0f:b1:c5:50:98:a0:88:e7:9e:7b:2f:ed:9e:31:
                    ca:01:7e:4b:87:b2:ca:f6:7d:a9:cb:99:99:b5:ad:
                    ee:79:b1:d2:9b:71:bf:79:c9:9c:99:60:0e:3f:70:
                    22:fb:8c:b0:29:ef:5a:d7:06:2e:d8:c6:dd:3d:29:
                    fc:7d:aa:cd:b9:9e:43:60:0d:aa:d8:51:26:35:a0:
                    de:00:66:c5:16:60:fb:8f:e3:e2:f8:5f:37:66:59:
                    9a:2b:3e:08:49:a0:33:7e:27:ee:e3:c5:e5:11:45:
                    70:cb:84:a8:60:4d:b9:05:76:ff:94:bc:89:58:da:
                    d2:bd:e8:23:e7:84:4c:48:46:c3:40:6e:63:f3:9a:
                    24:ef:25:26:a7:65:0c:08:3f:0a:43:ff:f7:cf:fa:
                    9f:42:15:d4:36:dd:46:1d:56:e3:ad:5f:0c:46:bd:
                    29:e7:ba:93:4f:1e:81:b2:42:6f:37:93:a8:93:ee:
                    ed:5b:19:d2:a1:36:b1:19:1a:94:64:a5:b5:fb:e4:
                    d5:6c:3b:0e:f3:35:90:d5:90:e4:9f:ad:9d:de:d2:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:7E:99:4E:E4:BB:47:BD:69:D1:87:18:9E:FE:F9:9A:3D:85:32
            X509v3 Authority Key Identifier:
                keyid:7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:3b:f7:dd:70:8f:73:83:a9:5e:cc:b9:4d:7a:4d:f7:07:
         56:ef:46:4a:6b:c8:61:f4:9d:61:ca:d9:67:eb:eb:2c:37:cc:
         cf:c0:ba:b6:94:be:71:dd:80:84:a6:20:0f:13:4e:e5:36:e2:
         50:3d:37:e8:f5:67:62:eb:76:4c:05:47:03:bf:d4:d6:51:c6:
         33:3d:dd:3c:7f:02:47:49:26:a2:3d:6d:b4:8a:b6:5a:4a:2b:
         59:61:4b:54:57:93:28:66:09:ef:23:c7:74:10:9a:09:f9:80:
         5c:32:45:20:d4:4d:2d:d4:4e:79:9e:21:e4:3a:2c:2f:1e:f7:
         b3:3b:56:31:71:9a:f0:ba:6b:61:3f:92:06:45:4c:de:39:e8:
         37:ed:bb:ff:87:dc:ed:c0:71:68:e6:66:2c:95:28:7a:90:63:
         81:77:1e:20:a6:56:67:fb:7b:f4:e5:35:94:54:46:d5:55:e7:
         ac:a6:ad:54:91:f2:54:a9:40:0d:4c:8d:d5:98:fd:ae:cc:f7:
         02:b9:f8:b5:37:87:70:0d:20:8e:e2:4e:29:70:1e:12:d4:b2:
         38:e9:2f:2e:b4:9c:4d:2f:c6:86:2f:f1:57:83:46:ba:37:20:
         45:42:5d:08:25:15:41:cc:3e:32:59:ea:7c:24:28:b5:5e:4b:
         bd:37:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:09 2026 by rpki-client