Error: rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
File:                     sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft (raw, json)
Hash identifier:          lr7QsJRZN3Nakx7QI6oMinvcOvBP4STv+LzIwZ6IpMg=
Subject key identifier:   A8:A9:59:6C:BF:5A:E1:5E:EB:0B:2D:BA:D5:E0:7C:64:EB:A0:07:2B
Authority key identifier: B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14
Certificate issuer:       /CN=F36BD97CAF/serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
Certificate serial:       0735
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
Manifest number:          0735
Signing time:             Tue 22 Sep 2026 02:29:24 +0000
Manifest this update:     Tue 22 Sep 2026 02:29:23 +0000
Manifest next update:     Thu 24 Sep 2026 02:29:23 +0000
Files and hashes:         1: sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl (hash: 6REsVT+0fLqxeJjBi8Jvqn+iCdjfyGxcbeUdTyIJd7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAF, serialNumber=B1B3DDCE5530720010A99E14F252B974308AB714
        Validity
            Not Before: Sep 22 02:29:23 2026 GMT
            Not After : Sep 24 02:29:23 2026 GMT
        Subject: CN=6ab1e804-8935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:21:3d:06:55:68:64:35:08:f6:d1:ce:fd:
                    ab:91:b1:66:d4:6c:e1:7e:58:b6:59:4a:fd:64:4a:
                    1e:28:0d:12:cb:8c:08:1e:90:32:d6:01:9d:0c:30:
                    b3:48:33:8b:5d:f3:65:a7:d4:56:63:cb:49:5d:a4:
                    a2:03:85:70:00:fb:c6:33:49:8c:cf:39:4d:3a:5e:
                    6d:89:fe:95:9c:34:48:a5:4d:2c:36:f7:79:fa:58:
                    44:29:77:0a:51:13:07:ee:3c:ba:1e:43:0d:27:4e:
                    2a:40:c8:ab:91:ee:ab:d1:28:d6:a2:ff:46:e0:15:
                    9c:6c:b8:75:14:68:d9:ee:ab:56:19:f8:31:98:ab:
                    35:5b:77:5e:4d:da:8c:db:13:2b:81:2c:5a:2e:bb:
                    01:ce:ed:f1:67:bd:78:a2:4a:03:4d:e0:ee:50:00:
                    29:5c:9d:bb:ba:5f:c8:c1:6f:72:91:ef:89:53:87:
                    7d:b6:3b:c5:36:65:6e:a4:03:df:b8:1b:65:d1:51:
                    30:c8:a9:61:c7:1a:81:e7:98:03:ad:5a:d9:cd:03:
                    c3:52:62:21:93:dd:5b:f5:66:95:e2:32:c7:74:84:
                    12:51:e5:b1:58:ed:e9:70:32:56:ad:01:61:78:fe:
                    9d:fb:e9:4f:7d:0f:a0:45:00:cd:7d:4c:34:5f:4d:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A9:59:6C:BF:5A:E1:5E:EB:0B:2D:BA:D5:E0:7C:64:EB:A0:07:2B
            X509v3 Authority Key Identifier:
                keyid:B1:B3:DD:CE:55:30:72:00:10:A9:9E:14:F2:52:B9:74:30:8A:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/C43845CC2D9411ECA2AA6345D8A014CE/sbPdzlUwcgAQqZ4U8lK5dDCKtxQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:01:cd:e1:07:3d:e8:b1:52:aa:1d:0e:53:e0:87:ab:8c:
         38:92:07:4d:51:22:79:74:a3:0f:d1:9b:bb:74:36:28:d2:5c:
         b3:64:b2:38:78:2b:e3:0b:4a:01:27:ef:89:8d:2f:0f:4a:32:
         7d:02:77:27:33:c9:8b:cc:b2:31:04:0a:96:90:a7:e4:d5:c8:
         10:21:95:47:8f:32:7d:89:97:ea:f5:4c:4e:8f:11:d1:b4:99:
         52:f4:c7:af:a8:ae:11:08:a5:b4:ba:ae:6e:c3:fe:2c:74:b0:
         d9:82:3a:6a:6a:91:77:98:85:67:08:9a:29:5c:fe:3a:e4:fb:
         59:4b:80:f2:26:d2:68:fc:31:42:06:87:4d:da:d5:04:e0:d5:
         6e:9d:0f:16:de:4a:f9:2d:f8:d6:aa:49:14:de:61:08:89:a0:
         12:f4:75:25:07:0a:ee:87:7d:59:84:8c:b6:09:a6:b7:0d:77:
         17:a7:85:60:9c:15:0c:ee:91:2c:99:a3:44:47:26:9e:97:24:
         3e:37:ec:07:27:9c:6c:c2:28:74:49:6f:c3:f8:d5:19:3a:4b:
         9b:42:f7:a1:dd:13:f6:c0:5b:0c:6e:43:c8:e8:8b:80:70:7e:
         61:62:50:ed:86:cf:c4:f5:8a:65:f5:e0:84:a9:b0:f9:c1:72:
         9a:48:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:12:12 2026 by rpki-client