Error: rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
File:                     pfjRvVkiC4dTo3nUoz0jv0IysTY.mft (raw, json)
Hash identifier:          WIAl7Fnrdqkti7q14GdFPeNya9wUqCZcRCIaQjc/gs4=
Subject key identifier:   67:07:84:34:F8:96:4E:1C:96:25:4C:DD:80:02:5D:B2:3B:FF:9A:0E
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       080B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
Manifest number:          0806
Signing time:             Sun 15 Nov 2026 02:10:46 +0000
Manifest this update:     Sun 15 Nov 2026 02:10:46 +0000
Manifest next update:     Tue 17 Nov 2026 02:10:46 +0000
Files and hashes:         1: pfjRvVkiC4dTo3nUoz0jv0IysTY.crl (hash: hiid5TykicwtPfXjNAEcvT0JKTRz95lMU0nryPT3oSQ=)
                          2: AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (hash: AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=)
                          3: 709C9AF07E9611F1B670E8A0CE1D38B0.roa (hash: kULxAx5OQMS8RRQIFyZkaRuPIeQUE8SFLSbtCir4i1Q=)
                          4: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (hash: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF, serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Nov 15 02:10:46 2026 GMT
            Not After : Nov 17 02:10:46 2026 GMT
        Subject: CN=6af914a6-46fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:48:db:25:7c:e9:ba:72:3f:b2:16:35:93:
                    45:ff:19:79:7d:b5:70:63:4a:05:4f:5b:ec:49:bb:
                    a5:c6:af:95:73:87:ca:de:bc:e4:97:02:a7:8a:32:
                    75:31:64:a7:2d:e8:f3:09:9c:62:60:d5:1a:36:3d:
                    2f:a9:f6:22:8a:29:d8:33:a8:17:ef:36:67:b2:30:
                    5d:59:91:0e:60:a6:33:4f:56:a4:86:3d:c3:21:93:
                    76:71:c4:ad:6b:bf:6a:15:90:6c:d8:68:5e:2d:cf:
                    9c:eb:f7:0e:2b:95:1b:33:3b:f1:e3:c9:60:42:76:
                    f8:6f:4c:e5:21:68:d7:71:fe:44:d4:fa:0c:5d:76:
                    f7:5a:4c:9f:dc:df:a0:0d:99:48:db:a4:4b:1e:2a:
                    36:e0:b4:f1:92:55:97:7e:64:dc:de:84:bc:c7:3e:
                    17:68:b5:4c:37:2f:93:4b:bf:37:4a:67:ee:17:a5:
                    bd:e8:6c:15:fa:36:be:81:6b:65:24:59:c5:f5:8e:
                    c7:a7:e5:c5:20:9b:d3:d3:d8:9e:a8:c8:f4:b1:64:
                    4c:87:f2:60:0d:7a:93:a6:3f:86:d2:47:76:59:d9:
                    ef:a3:ce:fb:ad:ca:f6:96:d5:c1:bb:f9:b2:44:d5:
                    11:04:12:bc:7d:35:64:1d:a8:f7:27:09:20:7e:a0:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:07:84:34:F8:96:4E:1C:96:25:4C:DD:80:02:5D:B2:3B:FF:9A:0E
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:06:12:ae:ef:84:6c:f0:d5:9f:f1:6c:44:1d:f8:8c:64:23:
         c8:22:50:66:a4:fc:90:6a:0d:59:4a:6d:6e:74:5d:af:7c:1c:
         0b:72:fc:5f:e3:5c:34:b8:06:58:31:e1:32:df:d6:e4:91:3d:
         f8:56:87:3b:19:13:20:47:21:96:76:78:48:30:42:7c:f8:df:
         05:b4:62:64:a8:31:51:70:29:65:e7:a0:8e:33:d6:6c:d3:eb:
         4a:73:61:81:ad:15:43:1c:52:3d:8c:ea:44:79:ab:43:0c:e5:
         49:5c:aa:a4:03:de:c6:f6:9f:bc:fb:79:f1:a7:2f:20:94:d3:
         14:5e:33:12:34:22:7e:66:2d:ff:84:46:00:24:52:a3:35:a9:
         aa:7f:80:6d:a0:2a:f6:e9:66:25:d6:3d:dc:1e:41:16:53:92:
         47:f8:1b:64:7e:41:cf:e9:d1:2d:86:9e:ea:b8:9a:ce:07:69:
         de:89:4f:19:74:5d:a6:e3:76:83:15:b6:8e:73:5c:90:97:28:
         f9:0d:3e:52:5d:90:4d:80:24:69:8f:ca:10:02:b9:4c:0e:e5:
         ad:21:43:25:d6:74:9a:06:b6:8a:4f:fb:0c:f7:94:74:4e:a0:
         8d:0d:f5:2d:e5:1f:dd:56:c4:1d:05:45:f7:0f:05:e7:90:f5:
         b8:f2:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:07:38 2026 by rpki-client