Error: rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
File:                     DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft (raw, json)
Hash identifier:          szuIy/tv0Z4y6MZekjalkxzC23VJuJWO0pln0CbSEnA=
Subject key identifier:   02:40:F2:1D:A3:B4:99:B1:DE:A8:96:88:9B:5F:72:48:25:6E:1F:65
Authority key identifier: 0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
Certificate issuer:       /CN=F36382EDAF/serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
Certificate serial:       04D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
Manifest number:          04D6
Signing time:             Mon 28 Sep 2026 03:29:58 +0000
Manifest this update:     Mon 28 Sep 2026 03:29:57 +0000
Manifest next update:     Wed 30 Sep 2026 03:29:57 +0000
Files and hashes:         1: DrLmbWwSK_P-qDtsu3uMrq4Rww4.crl (hash: boRTOuO5XTNfZmv32uINB8nj1Mj1erzH60mKq1YK7AQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36382EDAF, serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
        Validity
            Not Before: Sep 28 03:29:57 2026 GMT
            Not After : Sep 30 03:29:57 2026 GMT
        Subject: CN=6ab9df36-b05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:60:0f:75:ff:fd:c5:04:76:b6:ba:29:c1:c7:
                    a9:ed:14:c7:f6:26:37:26:71:ae:5e:0b:33:a9:4e:
                    1e:19:79:b8:11:7b:a5:d9:ce:c5:cf:4d:53:ac:5d:
                    64:d1:74:77:b5:38:3a:5d:00:a6:15:a0:16:fb:32:
                    5a:f7:2d:d0:48:e3:06:59:28:cb:52:15:94:98:41:
                    37:e6:3d:9d:7f:15:85:28:b2:4a:d4:e4:27:d5:94:
                    10:4e:9a:d0:7b:03:a7:93:14:20:87:cb:4d:14:c4:
                    67:4b:26:ec:0d:53:01:8a:3b:48:b9:ef:9a:f3:3e:
                    db:74:4f:72:a4:83:b5:77:3c:76:67:59:3e:b9:b6:
                    55:5c:81:05:b3:77:36:bd:b2:d1:ef:8c:3f:a1:b9:
                    dc:1c:75:ee:42:7e:41:2f:9a:ba:ed:cb:9d:e0:32:
                    e1:91:50:90:0c:3c:ed:03:a1:15:eb:fe:83:c4:41:
                    e4:39:2f:7e:5f:32:f2:b5:8b:8f:a8:00:1e:c3:5a:
                    01:50:16:78:1d:09:61:a5:96:30:01:2b:82:95:99:
                    6c:09:eb:c3:a1:3d:bb:ea:cd:4d:51:dd:8a:ed:22:
                    49:6b:cd:26:5c:e6:ff:83:c4:d7:ec:d4:58:ec:89:
                    bc:f7:20:4b:2c:79:9d:c4:71:f8:fe:81:1e:0a:39:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:F2:1D:A3:B4:99:B1:DE:A8:96:88:9B:5F:72:48:25:6E:1F:65
            X509v3 Authority Key Identifier:
                keyid:0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:e2:7e:d1:23:5c:c8:53:74:bc:94:70:49:7e:90:9a:2b:
         0f:9c:6e:e7:64:2b:fc:2e:26:e8:f0:75:11:47:35:2e:90:b7:
         4d:32:7a:84:fe:dc:f8:38:b6:26:5d:e8:73:da:5d:b8:d5:6a:
         ae:e4:bf:77:6c:2e:2d:98:2d:a8:fa:75:be:b4:3d:44:94:ba:
         64:de:4d:d2:dd:b0:ed:ab:f8:82:96:43:de:e0:86:69:84:93:
         d8:a0:81:aa:c7:2f:38:bd:b3:dd:ea:cb:d5:72:7e:b5:7f:ce:
         a7:37:1d:83:b3:80:5d:4f:5f:68:64:6f:89:f6:f4:dc:f3:1e:
         50:0b:16:e4:38:c8:a7:d4:25:2f:95:62:37:5a:63:b2:f9:fe:
         df:d8:30:6f:c3:3a:20:77:47:a9:76:22:c8:3a:65:68:69:32:
         2b:c1:bd:94:78:70:97:0f:fb:07:8a:d2:e8:40:6e:3a:f2:f6:
         aa:4c:8e:a0:47:9d:37:30:52:9c:c0:32:15:27:dd:c8:d7:20:
         54:8d:ce:43:1f:d4:6a:71:6b:8e:93:cc:cc:44:7f:e4:d4:58:
         e6:b9:51:5f:09:c4:69:0d:64:e9:2b:28:36:b0:45:a3:13:af:
         4c:56:c7:cd:87:28:e6:25:1f:cb:7a:e7:53:88:93:cd:2c:1c:
         f0:9f:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:40:15 2026 by rpki-client