Error: rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
File:                     pTjdXtaOO2Wy07oa0USnQKUu7iA.mft (raw, json)
Hash identifier:          Yzr5j1edDZW1ELg/QKxW6VYQLsrE5ml39h3craFLPZg=
Subject key identifier:   62:D5:34:B8:9D:BB:C1:08:3F:7F:99:EC:78:D4:24:D9:F1:0D:24:EA
Authority key identifier: A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20
Certificate issuer:       /CN=F362DADDAF/serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
Manifest number:          FC
Signing time:             Sat 26 Sep 2026 05:23:58 +0000
Manifest this update:     Sat 26 Sep 2026 05:23:57 +0000
Manifest next update:     Mon 28 Sep 2026 05:23:57 +0000
Files and hashes:         1: pTjdXtaOO2Wy07oa0USnQKUu7iA.crl (hash: E/4zRk/rHVekDTUeKXT0sAlsZn3UsCrHBqdx/TOpTrw=)
                          2: E72B9468F5F311F08EFD37C7DAE4EC9C.roa (hash: 1C/7HOab3vyutf0SGY+FlZjRvHSbsMFtBxbIEsIXzQY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362DADDAF, serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
        Validity
            Not Before: Sep 26 05:23:57 2026 GMT
            Not After : Sep 28 05:23:57 2026 GMT
        Subject: CN=6ab756ee-3f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:dd:47:fd:a0:80:86:b3:2d:b9:0b:ed:10:
                    21:3f:de:19:2b:eb:8f:86:cb:f5:f4:56:e3:e8:e9:
                    c5:73:e4:ae:d0:d1:f6:9f:61:96:9c:28:99:86:d6:
                    2c:3b:14:5a:bf:cc:9c:0d:08:0c:f7:59:1e:ad:09:
                    b6:48:73:75:e0:68:ff:95:3f:bb:27:2f:60:31:e5:
                    2a:32:79:d2:af:96:73:9a:c7:f5:d4:63:ed:eb:61:
                    db:67:55:d2:fd:05:ab:7e:45:bf:3d:56:26:3b:18:
                    c3:7e:96:1d:ef:c2:eb:87:e9:67:70:00:e4:4f:be:
                    d2:54:71:a0:db:d0:ec:d2:bf:fe:e7:57:fe:0f:22:
                    7f:e6:37:a3:3a:16:2a:36:55:cc:6f:66:70:82:c4:
                    6d:5c:61:0c:ca:93:46:c1:d9:c8:48:79:29:5e:aa:
                    b2:f5:bb:b7:3b:b5:90:cd:be:c7:26:c2:bc:35:81:
                    5b:ec:18:21:4f:c5:84:44:2b:e6:29:ff:57:65:11:
                    31:e6:9c:35:81:fe:a5:7b:e3:1c:6d:4f:cf:4e:9b:
                    29:8d:33:ca:5e:05:e2:93:d1:9d:10:e6:69:3e:de:
                    04:fe:19:56:e5:b2:2e:24:32:1c:9d:ee:ef:5a:95:
                    05:2d:f1:db:2e:48:51:d4:5b:16:69:8e:d8:55:b3:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D5:34:B8:9D:BB:C1:08:3F:7F:99:EC:78:D4:24:D9:F1:0D:24:EA
            X509v3 Authority Key Identifier:
                keyid:A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:97:95:07:7f:0a:83:02:2a:95:dd:ce:ae:0f:78:f8:ef:
         ce:42:45:86:9a:73:3e:7f:b4:87:c2:4d:8e:e7:1c:dc:bd:cc:
         a1:98:45:9a:e0:64:c8:68:25:d8:94:ee:92:35:21:de:2f:6e:
         8f:0a:76:45:4e:cd:74:44:cd:e4:11:76:a0:5c:10:a1:80:9b:
         c1:48:7f:3b:24:87:b5:a9:0e:93:52:8b:1f:0c:44:16:98:45:
         f5:3b:ac:20:32:d7:89:be:7c:ac:d7:a4:f4:1b:93:19:e4:24:
         61:d5:5c:1b:80:b9:72:ef:db:a0:f6:87:28:18:0c:9e:0c:24:
         43:d5:90:d8:59:d3:98:d2:16:82:09:a4:30:8c:10:e3:9e:36:
         43:bb:af:e7:7b:44:40:ce:ce:59:50:87:3a:1c:86:ce:02:70:
         ae:02:1a:02:0b:a5:40:4e:ab:33:d9:dc:dc:0f:f6:3f:32:da:
         e9:90:cb:d6:92:52:51:c6:d9:88:57:ba:e9:3b:af:92:6f:6e:
         37:e3:04:3e:66:6b:4d:d8:d2:5a:6b:82:7e:9d:b2:fb:21:fb:
         01:2b:2f:39:24:5c:82:53:a2:05:ba:82:99:d7:4b:4c:b9:f3:
         1f:2a:01:75:5f:f4:28:a1:de:f8:20:d1:de:af:51:c3:98:26:
         70:cc:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:57 2026 by rpki-client