Error: rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
File:                     ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft (raw, json)
Hash identifier:          dPiEWQO3ys5bU/OPJm0AfM7eoIfMOIJ1JGjGY/sTdXg=
Subject key identifier:   5C:0C:E4:65:F7:CF:0A:E5:62:78:DD:0B:DF:0C:65:CA:8E:B4:E5:DB
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Certificate issuer:       /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial:       0430
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
Manifest number:          042A
Signing time:             Mon 21 Sep 2026 03:50:55 +0000
Manifest this update:     Mon 21 Sep 2026 03:50:55 +0000
Manifest next update:     Wed 23 Sep 2026 03:50:55 +0000
Files and hashes:         1: ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl (hash: ueYPJBLwVv25yCPSE0vnBTxBLerczvGNvytmw3PW7oI=)
                          2: D2D5989A012611F1AF5A24A3DAE4EC9C.roa (hash: b5e3Xr4FElcnG0n1zf+ZSNFE0ma2SCk8L9aDroGv95g=)
                          3: ACBC7B985EE711EFA0CEB651762E951A.roa (hash: Lm7KJ7SFgJLbSpFAPyUvvIcKQ0yWjLdyzLN+7Alu3nM=)
                          4: 5A355A62893511EE97A33A2E4AD9E6FC.roa (hash: kPbY6+n82PzSuYMNz5etY7+wyw41vKBIiDkHhSXp1iU=)
                          5: 5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa (hash: Ra9ioWH8m0JON7faI4MqWl7L3OBqBQaOD8Z/MCluy1M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
        Validity
            Not Before: Sep 21 03:50:55 2026 GMT
            Not After : Sep 23 03:50:55 2026 GMT
        Subject: CN=6ab0a99f-e1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:05:09:9d:8a:0b:f3:54:a2:9e:82:30:64:
                    36:2a:6d:8f:fa:4c:6e:59:c4:f3:a1:48:75:09:07:
                    cd:a6:3c:96:1d:44:e6:d7:58:4d:85:79:1e:23:4a:
                    ea:04:b8:36:e7:ad:4a:c4:94:e1:a5:8e:f7:13:af:
                    bd:05:9e:f3:46:bd:b9:00:a8:79:43:31:49:02:3a:
                    4c:66:4d:44:ca:f2:f6:6d:e3:a8:de:36:b9:e3:ee:
                    c4:96:d5:11:2b:02:2f:37:3b:15:a1:1d:4e:e2:f7:
                    7e:f1:f0:7a:84:75:db:e9:a7:26:2f:02:b5:53:76:
                    d3:eb:ac:94:61:6c:38:48:8a:b3:26:11:98:95:d2:
                    c8:70:ef:23:55:5f:bd:29:db:e1:85:19:35:9b:0e:
                    03:d1:d6:5c:c5:80:64:67:9f:e5:ba:28:1f:fa:6a:
                    c0:ab:7c:4d:02:43:0f:f9:93:1e:bc:da:5a:b6:97:
                    60:d9:66:64:66:b1:a4:6a:3a:63:30:89:d4:11:f5:
                    a7:de:05:ff:12:67:7f:88:6c:67:00:7c:1a:ea:e8:
                    fd:a3:bc:2c:81:26:42:c6:b2:a4:51:b7:5c:1c:f2:
                    53:60:65:47:47:d5:92:e4:fc:eb:99:eb:f5:3b:13:
                    df:5d:2d:9e:26:bd:20:c1:e5:f8:0f:7b:1e:cf:ae:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:E4:65:F7:CF:0A:E5:62:78:DD:0B:DF:0C:65:CA:8E:B4:E5:DB
            X509v3 Authority Key Identifier:
                keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:48:31:70:06:a2:c1:fe:6a:44:ab:0b:6d:47:ae:37:e3:a8:
         e2:81:72:17:ef:21:da:71:ed:24:08:41:47:34:cd:cf:e9:c6:
         0d:f1:ce:7e:32:48:6c:d5:2d:01:0a:8f:96:b6:7b:a9:03:3c:
         b0:e5:ab:f0:44:06:5e:ba:86:ff:68:ec:c1:f2:7c:b3:f4:35:
         30:cd:57:fa:70:ee:d3:3b:bb:8f:4f:ab:b0:0d:a7:5c:75:24:
         69:f5:71:8c:0b:59:e4:b7:62:61:b6:93:1d:06:58:ec:63:8b:
         16:2a:a3:55:ef:bd:a0:94:06:76:62:e0:e1:8b:fc:a7:d7:2d:
         87:f7:b0:ad:f8:b5:7d:29:82:7b:1a:e9:13:b6:80:27:4f:e6:
         6a:7f:ac:98:2f:74:fb:03:d3:5d:e3:af:45:27:f9:70:de:3c:
         b5:9f:a7:7f:3f:45:f0:0c:91:30:07:bd:a2:fe:22:8d:c1:20:
         ef:f4:10:0a:8d:62:21:bb:ce:f7:86:6b:3c:8d:7a:d8:b0:8e:
         00:19:ae:c1:b5:dd:1b:5b:20:5b:2b:b8:de:db:d6:60:f6:01:
         95:8c:59:f3:13:92:a0:1b:0d:d6:fc:ff:b4:1a:e0:d5:12:62:
         e1:bf:b2:1c:d8:b7:02:a9:6c:67:87:21:6d:db:c5:7a:aa:b9:
         41:bf:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:24 2026 by rpki-client