Error: rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft
File:                     JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft (raw, json)
Hash identifier:          Cq8D3e+KVF/iGFTEmeAmg3rDQ/sngWKUwRWVrfn5WnM=
Subject key identifier:   1D:2E:8F:FF:6B:B5:23:CB:71:9D:88:87:70:8A:A4:79:08:27:7D:9B
Authority key identifier: 25:61:E4:49:66:F6:26:5B:7A:10:1D:27:3B:CC:1F:E3:FD:EF:DC:F1
Certificate issuer:       /CN=F3615AB6AF/serialNumber=2561E44966F6265B7A101D273BCC1FE3FDEFDCF1
Certificate serial:       61
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft
Manifest number:          5F
Signing time:             Wed 23 Sep 2026 05:42:05 +0000
Manifest this update:     Wed 23 Sep 2026 05:42:04 +0000
Manifest next update:     Fri 25 Sep 2026 05:42:04 +0000
Files and hashes:         1: JWHkSWb2Jlt6EB0nO8wf4_3v3PE.crl (hash: di2YuGqquKWZvTc9AC1NN534hBt8rk33idX4fybqk1Y=)
                          2: F72BDD006FBF11F19FA10EAACE1D38B0.roa (hash: q1BSIJaNrDUIniPmM0lbA3tl+9CWOODxwD+sTWhy1FQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615AB6AF, serialNumber=2561E44966F6265B7A101D273BCC1FE3FDEFDCF1
        Validity
            Not Before: Sep 23 05:42:04 2026 GMT
            Not After : Sep 25 05:42:04 2026 GMT
        Subject: CN=6ab366ad-11e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:b3:df:81:3a:17:c9:0a:b0:86:4b:2e:90:
                    93:b3:00:f0:cc:5e:1b:3e:56:a8:15:52:4d:86:80:
                    f7:0c:1b:22:fb:17:00:3e:f2:8c:14:94:60:fc:43:
                    ef:e6:5d:50:b1:09:af:f9:bc:eb:62:fc:ce:00:d2:
                    5b:22:bd:59:23:a9:d6:bd:43:57:87:80:94:48:d6:
                    c0:2a:cb:c8:89:9f:7c:3f:f0:27:c9:0c:7c:dd:45:
                    e2:42:f0:36:f6:c1:a8:b2:74:ed:83:01:86:15:2e:
                    23:45:1b:e0:8f:60:05:3b:ce:90:3d:d5:5e:0a:bc:
                    65:38:59:55:f5:2e:6b:c7:be:a6:3b:d8:81:d0:c0:
                    a4:cb:ea:0f:9c:53:f9:8b:2e:c5:a5:a7:d3:da:69:
                    98:b7:84:43:a6:7b:cb:21:95:2f:6a:a8:3a:3e:4c:
                    7b:0b:c9:0f:d1:d6:0a:89:72:8a:a8:3e:ef:71:a1:
                    82:b7:70:a6:35:dd:84:e5:cf:15:15:1b:76:5a:24:
                    e1:7a:d2:97:45:7f:40:ec:08:a9:b8:7e:40:ff:d0:
                    fd:a7:df:de:13:38:20:a9:87:6e:74:c6:6d:0f:72:
                    9b:36:8c:3f:15:e5:6b:83:8f:4d:22:ad:7f:5e:ee:
                    57:47:8d:ec:1f:34:5e:63:fc:9d:4d:fe:a0:00:15:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2E:8F:FF:6B:B5:23:CB:71:9D:88:87:70:8A:A4:79:08:27:7D:9B
            X509v3 Authority Key Identifier:
                keyid:25:61:E4:49:66:F6:26:5B:7A:10:1D:27:3B:CC:1F:E3:FD:EF:DC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615AB6/CB0EFBFA6FA911F1AECE50A5CE1D38B0/JWHkSWb2Jlt6EB0nO8wf4_3v3PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1e:16:37:3a:0b:88:82:1d:af:34:fd:b7:af:32:93:55:10:
         eb:bd:cd:01:26:6b:70:3b:8a:78:93:4a:b3:1a:7b:f8:6f:db:
         16:7f:0a:e0:b3:38:8c:f5:5c:f4:ce:fd:c0:f6:c2:1c:01:89:
         62:81:98:80:1c:7d:83:f9:7f:5e:b6:67:c2:14:ec:6a:2f:a5:
         15:43:eb:09:b6:a1:dd:f5:eb:0c:a5:fb:0b:8f:aa:04:77:43:
         9c:4f:dc:4e:e6:20:d7:1f:be:78:8b:db:a4:dc:cf:e3:d3:73:
         f6:99:c7:17:d3:57:cc:2b:97:f0:0a:44:0a:c7:e2:aa:69:0b:
         c0:e7:cb:f0:c6:87:11:9c:47:3f:20:8e:4c:4a:a8:bf:9e:30:
         92:75:3d:a4:cf:d2:3b:7a:6b:73:11:be:64:01:19:68:50:6c:
         7e:ec:3f:0b:a0:bd:c5:42:c8:10:43:f4:c6:47:8d:a5:49:51:
         6c:27:0c:0f:d6:49:f5:86:00:f8:ed:ae:27:5a:c8:ff:0d:e0:
         35:64:c4:c0:3e:26:a2:1b:4b:06:60:18:b5:56:f1:aa:c6:f1:
         35:28:68:44:cd:29:fb:c2:48:15:70:22:0b:56:5d:62:6a:99:
         18:9e:56:1f:48:20:a5:44:bf:c5:52:ff:bf:f4:d8:74:fb:25:
         99:07:b7:73
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBYTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
NUFCNkFGMTEwLwYDVQQFEygyNTYxRTQ0OTY2RjYyNjVCN0ExMDFEMjczQkNDMUZF
M0ZERUZEQ0YxMB4XDTI2MDkyMzA1NDIwNFoXDTI2MDkyNTA1NDIwNFowGDEWMBQG
A1UEAxMNNmFiMzY2YWQtMTFlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMPls9+BOhfJCrCGSy6Qk7MA8MxeGz5WqBVSTYaA9wwbIvsXAD7yjBSUYPxD
7+ZdULEJr/m862L8zgDSWyK9WSOp1r1DV4eAlEjWwCrLyImffD/wJ8kMfN1F4kLw
NvbBqLJ07YMBhhUuI0Ub4I9gBTvOkD3VXgq8ZThZVfUua8e+pjvYgdDApMvqD5xT
+YsuxaWn09ppmLeEQ6Z7yyGVL2qoOj5MewvJD9HWColyiqg+73GhgrdwpjXdhOXP
FRUbdlok4XrSl0V/QOwIqbh+QP/Q/aff3hM4IKmHbnTGbQ9ymzaMPxXla4OPTSKt
f17uV0eN7B80XmP8nU3+oAAV9N0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQdLo//
a7Ujy3GdiIdwiqR5CCd9mzAfBgNVHSMEGDAWgBQlYeRJZvYmW3oQHSc7zB/j/e/c
8TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTVBQjYvQ0IwRUZCRkE2RkE5MTFGMUFFQ0U1MEE1Q0UxRDM4QjAvSldIa1NX
YjJKbHQ2RUIwbk84d2Y0XzN2M1BFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSldIa1NXYjJKbHQ2RUIwbk84d2Y0XzN2M1BFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxNUFCNi9DQjBFRkJGQTZGQTkxMUYxQUVDRTUwQTVDRTFE
MzhCMC9KV0hrU1diMkpsdDZFQjBuTzh3ZjRfM3YzUEUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALYeFjc6C4iCHa80/bevMpNVEOu9zQEm
a3A7iniTSrMae/hv2xZ/CuCzOIz1XPTO/cD2whwBiWKBmIAcfYP5f162Z8IU7Gov
pRVD6wm2od316wyl+wuPqgR3Q5xP3E7mINcfvniL26Tcz+PTc/aZxxfTV8wrl/AK
RArH4qppC8Dny/DGhxGcRz8gjkxKqL+eMJJ1PaTP0jt6a3MRvmQBGWhQbH7sPwug
vcVCyBBD9MZHjaVJUWwnDA/WSfWGAPjtridayP8N4DVkxMA+JqIbSwZgGLVW8arG
8TUoaETNKfvCSBVwIgtWXWJqmRieVh9IIKVEv8VS/7/02HT7JZkHt3M=
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:25:12 2026 by rpki-client