Error: rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          Z76YmSIF4l5KMlLT4VJieEd3eBFTYpJMnNWfi4ysCJ0=
Subject key identifier:   1B:26:66:EB:48:DF:8A:9E:DA:50:06:43:62:F6:19:57:A0:55:DB:ED
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       1068
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          1063
Signing time:             Tue 22 Sep 2026 00:51:47 +0000
Manifest this update:     Tue 22 Sep 2026 00:51:46 +0000
Manifest next update:     Thu 24 Sep 2026 00:51:46 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: 3XUfUASr9f0THKkGJEglWu8SQVgcoJD95/53o5fbJp4=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4200 (0x1068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Sep 22 00:51:46 2026 GMT
            Not After : Sep 24 00:51:46 2026 GMT
        Subject: CN=6ab1d123-0f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:d6:6c:f7:5f:20:36:d7:6e:41:b6:8a:db:
                    5c:4b:1c:53:96:0f:bf:15:4e:51:72:6c:e4:bd:b0:
                    0e:de:37:6c:0b:2a:82:ba:10:f1:48:d8:78:5e:dd:
                    d6:27:52:8b:9e:cd:35:9a:5a:ff:b5:e0:7e:eb:c9:
                    d7:47:28:ab:84:86:f0:4b:d1:cb:74:c1:07:b0:4d:
                    b8:03:22:bf:7b:3b:19:99:f0:64:22:74:dc:43:62:
                    74:92:91:34:22:15:8e:77:58:4b:be:11:35:d2:ee:
                    3a:b8:b3:5b:69:0a:62:cb:3f:21:4b:46:f1:83:96:
                    89:a9:40:89:53:94:d7:12:3f:9c:05:25:b5:54:cb:
                    b1:43:64:d1:c6:cb:1d:28:74:57:cc:17:4e:bc:3d:
                    2c:25:f2:2b:95:7c:f5:88:ca:50:9f:97:b2:da:2c:
                    07:74:83:e4:eb:cc:08:2f:9b:67:2f:96:d7:0e:68:
                    6d:25:e4:63:7a:57:4a:cd:d9:fc:7b:ab:cc:1e:9f:
                    33:f7:82:38:b2:eb:84:8e:46:64:68:bd:0f:d1:a1:
                    99:00:91:65:42:4e:3a:df:96:b4:2f:4f:a2:ce:b8:
                    61:0c:64:87:32:ab:b6:dd:e0:a7:37:7b:29:48:15:
                    67:c5:43:09:e0:b5:e9:ac:a1:4e:81:fc:1c:09:82:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:66:EB:48:DF:8A:9E:DA:50:06:43:62:F6:19:57:A0:55:DB:ED
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:97:a7:25:83:05:7f:d1:eb:56:d5:e2:cb:32:ac:3a:55:82:
         44:bb:c6:51:cc:7a:0f:0e:c2:79:81:ac:2d:90:ef:62:74:98:
         62:bc:41:c7:87:8a:2f:00:29:54:84:5c:d6:84:d8:f6:e5:01:
         f3:25:35:2d:fd:4c:d0:73:1b:73:fb:c8:60:00:0b:a8:43:af:
         c2:a0:86:3f:01:c7:9c:54:23:66:c7:ad:87:de:81:5c:c5:85:
         cc:dd:68:65:67:d0:81:97:56:73:84:4c:90:ac:43:fa:1a:ef:
         c8:16:d2:76:82:7a:11:b9:ae:07:4d:22:ac:a9:55:15:8e:3f:
         09:73:87:92:2a:90:5e:ee:00:8f:29:ba:1c:ea:b4:3a:6b:59:
         b8:db:d9:da:78:db:ce:19:91:35:fa:96:c4:e7:45:3e:38:e7:
         92:46:65:9a:f4:55:ef:7a:5e:5f:36:17:ff:19:db:9b:a9:85:
         03:a3:74:5a:84:00:92:41:ac:2f:5f:1c:c3:70:d1:38:76:18:
         39:d4:e7:ab:87:d8:f7:02:8a:39:40:51:12:43:e2:c3:0c:18:
         08:9a:d1:30:45:60:c6:53:e0:f5:49:d7:3c:89:8a:39:5e:2c:
         43:7a:02:d7:bd:45:b7:4e:b2:d7:2b:6a:fb:3e:f7:68:99:f5:
         d1:81:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:49 2026 by rpki-client