Error: rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
File:                     HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft (raw, json)
Hash identifier:          tKA/Bg1lNt13GmwfvhP/LNmgMxJuJRG3ig0Qo6SESG4=
Subject key identifier:   56:5B:DD:73:AA:0A:D9:67:94:2A:10:7A:E8:6B:61:40:A1:CD:7C:38
Authority key identifier: 1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F
Certificate issuer:       /CN=F36203F3AF/serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
Certificate serial:       07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
Manifest number:          06
Signing time:             Sat 14 Nov 2026 06:07:51 +0000
Manifest this update:     Sat 14 Nov 2026 06:07:51 +0000
Manifest next update:     Mon 16 Nov 2026 06:07:51 +0000
Files and hashes:         1: HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl (hash: Xk1V10nrag7u2vt8mBhlkClfYAba/+3uhsDgflKFL5M=)
                          2: 5306BE60DCFD11F1990D3EB1CE1D38B0.roa (hash: oXIw6uLdYeIlfEmP80wBzeBBO7PWU1qC9mxgLFsuLjA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36203F3AF, serialNumber=1CF1B961709243E1B01EAB0B1341F77E14B5901F
        Validity
            Not Before: Nov 14 06:07:51 2026 GMT
            Not After : Nov 16 06:07:51 2026 GMT
        Subject: CN=6af7fab7-e396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:66:23:7f:b8:b0:b1:1e:2d:b7:c5:04:f9:
                    f7:57:2a:eb:4e:91:dc:06:1f:e6:4a:e5:27:76:d6:
                    03:02:e1:46:f5:f7:e2:2b:ba:b4:e6:95:0c:08:a1:
                    4f:41:af:ab:99:ab:15:48:df:0a:ff:76:d9:c9:dd:
                    81:6b:db:94:80:67:6c:a4:7e:0a:05:b3:3f:4d:76:
                    97:fc:ce:dc:8e:ba:d0:ac:89:bd:c5:fb:95:9d:17:
                    0d:1b:3f:b2:37:24:04:23:81:58:0b:99:5f:31:5b:
                    d7:76:db:c2:31:5a:5a:bc:9b:2e:06:af:d1:bf:a6:
                    1a:26:18:bf:b2:05:7b:c7:2e:ea:56:d3:5b:cd:6d:
                    68:50:cf:dc:b8:04:a9:0f:84:27:8d:db:eb:6a:d0:
                    a7:7c:69:c2:be:35:7d:2d:59:ed:e3:5e:0b:4b:f9:
                    3f:51:31:80:89:a9:84:15:17:63:72:b1:b2:bf:0a:
                    d8:2e:12:9b:a6:c7:18:1e:f6:db:9f:db:93:c9:21:
                    a0:18:5e:66:39:03:48:78:5d:d3:c9:ec:21:37:81:
                    e5:93:80:be:f3:6b:c3:0b:82:f4:45:0e:54:17:2b:
                    83:9a:ed:42:26:4a:49:e7:06:18:c3:73:04:41:e4:
                    02:90:09:75:78:a3:78:86:e9:7a:2b:d1:b3:bd:cd:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:DD:73:AA:0A:D9:67:94:2A:10:7A:E8:6B:61:40:A1:CD:7C:38
            X509v3 Authority Key Identifier:
                keyid:1C:F1:B9:61:70:92:43:E1:B0:1E:AB:0B:13:41:F7:7E:14:B5:90:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36203F3/794AE46CDCFC11F18B1CDFAACE1D38B0/HPG5YXCSQ-GwHqsLE0H3fhS1kB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:3b:30:2d:0d:91:6e:4c:d2:a3:16:69:b3:a4:d5:9d:f2:
         cd:21:66:7d:41:46:7f:d5:4d:10:c7:a6:1d:60:07:6d:27:5a:
         3d:b7:34:98:9f:81:2a:90:3c:45:80:00:a1:06:3a:db:ff:9c:
         af:7a:a2:2a:b6:b9:e4:34:45:8a:7d:dd:6e:2f:c4:01:8e:65:
         10:69:7a:29:5d:b7:49:af:fc:9e:af:27:f8:0e:80:6c:32:23:
         c4:77:93:0a:cc:e2:91:9c:2e:5d:57:af:c1:85:ea:9a:50:45:
         25:fd:9c:c2:2c:eb:5e:05:0f:9c:c7:41:46:2b:27:d6:4e:6f:
         4d:0f:21:c6:0d:66:7b:9f:4d:80:79:72:c3:e5:56:1d:ec:ad:
         b9:36:bd:cb:2f:8a:ca:f2:32:fe:18:fd:4a:06:ab:26:40:04:
         31:37:3e:74:21:df:51:de:75:06:4b:90:3d:70:0e:d5:4e:fa:
         67:c7:51:5d:40:65:54:58:2c:72:c5:b0:ec:a2:38:6a:79:59:
         fe:43:41:6d:fc:41:b1:10:be:85:16:62:d9:e2:36:58:b3:fb:
         51:e2:5f:82:f0:16:87:f5:51:77:40:af:93:36:df:98:40:f1:
         5a:8b:7b:a6:34:37:23:62:d1:d5:01:fd:1d:55:9a:d8:3b:ac:
         6e:e4:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:20 2026 by rpki-client