Error: rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
File:                     4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft (raw, json)
Hash identifier:          LwKN4N1o3gR0DvI0I8Xx2C+Q9EG34U71yNqSCLorLQY=
Subject key identifier:   49:53:A9:A5:64:67:8B:4E:06:E6:52:70:44:75:1F:AF:81:5B:50:70
Authority key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
Certificate issuer:       /CN=F36EEB6BAF/serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
Certificate serial:       0265
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
Manifest number:          0264
Signing time:             Tue 22 Sep 2026 04:45:52 +0000
Manifest this update:     Tue 22 Sep 2026 04:45:51 +0000
Manifest next update:     Thu 24 Sep 2026 04:45:51 +0000
Files and hashes:         1: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl (hash: PhRw50p6y35t+JHcAGpl9Dd4qOHITJq2V6tBO9ovSeI=)
                          2: 70FA4310DCE111EF90F8E0A3762E951A.roa (hash: qc0AnixuJmucaaftQ/LyI87IbNHlxudRS98tlTGyyas=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EEB6BAF, serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
        Validity
            Not Before: Sep 22 04:45:51 2026 GMT
            Not After : Sep 24 04:45:51 2026 GMT
        Subject: CN=6ab207ff-b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:f5:64:09:03:c8:d1:59:24:71:b0:02:63:
                    12:8a:26:e0:1f:b7:1d:b6:42:67:ea:08:48:73:ef:
                    30:89:e8:85:20:61:93:f7:91:b4:d1:a9:2a:23:02:
                    5b:c5:3d:49:51:38:f3:76:21:8b:42:e5:4e:ba:57:
                    b7:42:2f:67:ff:a0:58:99:93:21:e5:86:c8:5f:3c:
                    b9:7f:f8:a6:83:72:df:ca:ce:ab:1d:ee:a3:30:64:
                    77:1f:66:ab:50:19:37:51:61:a8:44:f3:30:d8:dc:
                    5c:24:09:1b:94:b8:70:11:67:85:99:39:6d:2c:b2:
                    a9:b7:53:21:15:b7:0b:31:49:f2:78:5d:89:53:ff:
                    32:36:db:48:fa:ac:70:22:59:ca:20:ac:30:f7:65:
                    cb:78:1b:c3:12:39:9a:2f:07:ba:04:ae:a8:65:9b:
                    69:40:8c:91:61:0b:74:41:e5:1f:69:eb:23:38:8e:
                    aa:be:85:f1:41:35:4e:8c:5e:8c:00:2c:49:3b:52:
                    7b:ac:f0:4c:ac:99:83:af:86:cd:93:6c:8d:77:d5:
                    34:f6:77:80:53:64:09:f3:24:72:62:53:9a:30:5d:
                    18:97:9f:57:f6:89:7f:03:8c:8a:a9:3c:3c:9c:13:
                    5e:f7:12:d6:5d:a3:f5:4b:be:dd:65:5c:5f:34:5b:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:53:A9:A5:64:67:8B:4E:06:E6:52:70:44:75:1F:AF:81:5B:50:70
            X509v3 Authority Key Identifier:
                keyid:E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:6d:f9:24:74:8b:6f:d6:d3:e6:fc:53:e3:61:af:5d:7b:
         59:f8:d9:87:98:3e:da:4f:23:cc:2e:87:78:05:c7:49:d3:c8:
         12:2b:b7:e6:c9:6d:92:9a:22:9f:3b:b5:c9:c8:4a:fa:3b:f8:
         f7:4f:9f:9b:ff:07:f1:bb:ff:2c:fd:00:2b:af:c7:c4:d0:24:
         4a:1d:5f:c0:79:49:81:41:b4:ea:b0:20:fb:68:87:8c:f1:5f:
         c4:d5:1c:2b:7c:5e:5f:1f:56:27:56:7e:4b:6c:a5:92:15:87:
         b8:de:fb:b0:fd:d2:a5:e3:11:c7:c6:dc:a4:8a:b6:6e:8c:e7:
         b9:1a:d6:eb:cf:8b:51:80:75:2b:9a:22:c7:84:94:b0:df:a9:
         82:e8:b3:a2:6b:1a:24:85:31:25:de:ad:54:44:ab:ce:95:6e:
         c9:cf:7d:f2:b8:70:17:c4:41:de:4d:a2:7c:10:47:1f:0a:84:
         16:d9:1f:af:f7:34:c0:2a:ae:87:46:80:7f:bb:fe:c1:7d:66:
         8d:24:24:ec:95:0b:8b:dd:db:8c:de:1a:2f:1b:09:27:c9:0a:
         51:45:f5:7a:40:7d:4b:50:e0:03:e7:0d:fb:c2:5a:a9:94:17:
         47:e0:ed:1f:7b:82:74:10:aa:59:4d:29:3f:e1:74:56:b0:7e:
         89:e2:46:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUVCNkJBRjExMC8GA1UEBRMoRTE2NTMzQkFGOTBGREZFNjFGODgyMDdFREFFMDA0
RkRDQjUyRkEzMDAeFw0yNjA5MjIwNDQ1NTFaFw0yNjA5MjQwNDQ1NTFaMBgxFjAU
BgNVBAMTDTZhYjIwN2ZmLWIwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4/fVkCQPI0VkkcbACYxKKJuAftx22QmfqCEhz7zCJ6IUgYZP3kbTRqSoj
AlvFPUlROPN2IYtC5U66V7dCL2f/oFiZkyHlhshfPLl/+KaDct/Kzqsd7qMwZHcf
ZqtQGTdRYahE8zDY3FwkCRuUuHARZ4WZOW0ssqm3UyEVtwsxSfJ4XYlT/zI220j6
rHAiWcogrDD3Zct4G8MSOZovB7oErqhlm2lAjJFhC3RB5R9p6yM4jqq+hfFBNU6M
XowALEk7Unus8EysmYOvhs2TbI131TT2d4BTZAnzJHJiU5owXRiXn1f2iX8DjIqp
PDycE173EtZdo/VLvt1lXF80WxMXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSVOp
pWRni04G5lJwRHUfr4FbUHAwHwYDVR0jBBgwFoAU4WUzuvkP3+YfiCB+2uAE/ctS
+jAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVFQjZCLzJBRDA4RjFDRENEQjExRUZCNDZCNDE3QTc2MkU5NTFBLzRXVXp1
dmtQMy1ZZmlDQi0ydUFFX2N0Uy1qQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRXVXp1dmtQMy1ZZmlDQi0ydUFFX2N0Uy1qQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUVCNkIvMkFEMDhGMUNEQ0RCMTFFRkI0NkI0MTdBNzYy
RTk1MUEvNFdVenV2a1AzLVlmaUNCLTJ1QUVfY3RTLWpBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbv235JHSLb9bT5vxT42GvXXtZ+NmH
mD7aTyPMLod4BcdJ08gSK7fmyW2SmiKfO7XJyEr6O/j3T5+b/wfxu/8s/QArr8fE
0CRKHV/AeUmBQbTqsCD7aIeM8V/E1RwrfF5fH1YnVn5LbKWSFYe43vuw/dKl4xHH
xtykirZujOe5Gtbrz4tRgHUrmiLHhJSw36mC6LOiaxokhTEl3q1URKvOlW7Jz33y
uHAXxEHeTaJ8EEcfCoQW2R+v9zTAKq6HRoB/u/7BfWaNJCTslQuL3duM3hovGwkn
yQpRRfV6QH1LUOAD5w37wlqplBdH4O0fe4J0EKpZTSk/4XRWsH6J4kam
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:08:33 2026 by rpki-client