Error: rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
File:                     Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft (raw, json)
Hash identifier:          j/g4B/LQfh34LzvBdEAvwFhG0HtIdqw7RFXmtbya044=
Subject key identifier:   F4:CF:CB:7D:4F:B9:67:D6:8E:4D:D7:85:C7:58:1C:68:54:D0:7C:ED
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       0C00
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
Manifest number:          0BF5
Signing time:             Wed 23 Sep 2026 01:14:50 +0000
Manifest this update:     Wed 23 Sep 2026 01:14:49 +0000
Manifest next update:     Fri 25 Sep 2026 01:14:49 +0000
Files and hashes:         1: Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl (hash: TBXAKwZok/pXNSrqTskuq/vUZRaUyjqIZEaxzR7mAl8=)
                          2: 20F7E19E955B11E88F26617FF8AEA228.roa (hash: sfkjh7zAV15jSl9QHHQklWNOaiXkSZouLreAi3kdb8o=)
                          3: A41FAC428B6511F192AECEF7CE1D38B0.roa (hash: drLADxnaOEGMyqdel7G/uH1BM2flnhzBkm7jo80NuCg=)
                          4: 7E3B3DC8D0A211EE9C1C0C61775412E6.roa (hash: BmRCYuiQPjmiqgCkPMHoi7HMNfeBckz/l/PWc6bOGFU=)
                          5: 9D9A3A6C955B11E8A202E380F8AEA228.roa (hash: +I0HAW1gRUHoR+hm5FaXpkLRZEuabi7h8ckCvRV7EsI=)
                          6: 18465AD68B6511F1B80344F6CE1D38B0.roa (hash: rxp1LYHtsrztjq5zC600yur4RG+dLMJAQtCO5n3hBKY=)
                          7: CEFEEC808B6411F1936DA1F3CE1D38B0.roa (hash: XglJ0uhy4sNkIBBRSrMKRGPstU3401znCZ/NG+6Ge/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Sep 23 01:14:49 2026 GMT
            Not After : Sep 25 01:14:49 2026 GMT
        Subject: CN=6ab32809-1456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:46:da:01:06:f9:96:2b:61:2c:c0:f7:a9:
                    e2:a9:9e:68:f4:ec:41:30:a2:b0:de:ae:80:bb:91:
                    3c:d8:a6:a9:40:b3:43:6d:33:68:46:67:d5:dc:02:
                    12:6a:fa:29:c8:77:66:13:18:7a:0f:b2:5f:fe:92:
                    09:a9:0a:62:a9:27:9e:d1:d0:71:dd:1d:e6:0a:4e:
                    e9:8d:ef:20:4c:3b:b0:03:7e:af:6a:92:08:5b:62:
                    06:aa:71:ab:e5:de:3f:bf:a4:b8:ec:dd:6e:ee:14:
                    21:3e:df:2c:cc:04:0a:11:b7:a0:1c:23:17:79:ea:
                    e4:f4:a3:7b:2b:9c:45:65:47:77:69:ef:f0:c6:6f:
                    ef:ee:de:fb:88:e7:e9:31:6b:09:e5:21:5a:e7:f0:
                    ba:a1:ba:1c:df:dc:b5:4b:3b:0a:08:af:ff:de:36:
                    f0:13:74:19:19:ce:56:86:ea:a1:d0:8d:ee:3d:49:
                    65:80:b9:ca:dc:6e:36:ba:2e:24:bd:d1:5c:6b:b3:
                    8e:6e:bf:73:ea:1b:d2:ab:62:58:38:80:0f:67:20:
                    45:6c:5c:f1:f1:ec:7f:d3:7d:ad:9f:fa:82:77:92:
                    7c:95:90:e6:bd:41:52:23:0f:c7:4e:2c:7f:1f:d7:
                    ba:c5:b6:2d:2e:b7:86:3b:3e:d4:d1:bc:8c:67:38:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CF:CB:7D:4F:B9:67:D6:8E:4D:D7:85:C7:58:1C:68:54:D0:7C:ED
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:b1:4c:01:81:38:bd:63:e8:d3:c9:1f:3f:bd:cf:62:a8:
         37:b9:08:c9:4e:bf:d4:91:d5:55:da:98:26:47:63:9f:f3:65:
         87:ae:6c:a7:23:5b:85:e3:98:37:e7:27:b2:88:f4:44:7b:b6:
         ab:3a:80:a5:6b:da:5d:f1:6d:0a:3e:3b:80:af:db:43:d2:b4:
         cd:99:8e:70:0c:90:8c:6f:fb:b3:7b:7c:eb:6c:fc:03:b5:8f:
         20:d2:9d:e9:93:20:9d:64:6d:10:e7:7e:8e:39:68:88:94:01:
         b9:b3:7c:ae:5d:64:35:73:b3:15:a9:3c:de:d3:25:48:eb:ee:
         98:a2:5e:2c:eb:da:da:78:ae:49:14:18:09:d5:82:2a:57:6e:
         77:ee:d4:14:c4:14:0b:db:b2:84:b5:7b:08:ad:f3:20:98:7d:
         a3:d7:12:a0:13:c7:15:32:aa:e2:6b:b2:39:b9:29:07:4f:a1:
         7b:c3:15:78:17:d0:a6:ab:0f:6b:d9:1a:08:16:81:84:53:db:
         6d:eb:6e:5a:0e:50:ca:52:5e:0d:e5:67:00:fe:dc:0e:56:ad:
         92:75:04:b1:cb:75:f8:8f:8a:11:6f:ef:85:f0:07:44:16:df:
         1b:7d:a9:29:73:72:2f:fe:1e:32:90:7d:68:0f:b4:5c:5e:01:
         44:c2:07:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:42:45 2026 by rpki-client