Error: rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft
File:                     M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft (raw, json)
Hash identifier:          T23KKKMq8CocAphwXGDBQsPlXKbXS0Q4kU7ymTaHQSc=
Subject key identifier:   C0:83:0B:9A:39:1F:33:15:70:4E:DF:B0:51:93:FC:26:80:3B:70:6E
Authority key identifier: 33:52:95:D3:2E:65:D2:82:FB:25:39:B3:C6:68:F0:15:8E:8E:0E:5A
Certificate issuer:       /CN=F366C4C3AF/serialNumber=335295D32E65D282FB2539B3C668F0158E8E0E5A
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1KV0y5l0oL7JTmzxmjwFY6ODlo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft
Manifest number:          B1
Signing time:             Wed 14 Oct 2026 05:33:46 +0000
Manifest this update:     Wed 14 Oct 2026 05:33:46 +0000
Manifest next update:     Fri 16 Oct 2026 05:33:46 +0000
Files and hashes:         1: M1KV0y5l0oL7JTmzxmjwFY6ODlo.crl (hash: ALSif86TqL19pdtERr/R4D4AD5DT3GfqhLHv3LtiMb8=)
                          2: 565865783EDD11F1B2D4F80CCF1D38B0.roa (hash: IUp7s3Cgg6XVcektWZxP0D8lEhaEz2t2Nni+2HSHtqM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1KV0y5l0oL7JTmzxmjwFY6ODlo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 05:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C4C3AF, serialNumber=335295D32E65D282FB2539B3C668F0158E8E0E5A
        Validity
            Not Before: Oct 14 05:33:46 2026 GMT
            Not After : Oct 16 05:33:46 2026 GMT
        Subject: CN=6acf143a-ea00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:fd:85:a7:e5:a0:a2:12:7b:41:f3:4a:86:
                    a7:39:70:3f:17:4f:74:f1:ae:f0:ce:ee:c0:40:25:
                    58:32:bb:9d:e1:1a:12:74:f2:d4:5b:b2:ac:22:b6:
                    a4:b8:ce:08:f4:c3:8c:94:1c:a1:22:3e:fe:6f:4b:
                    c0:f1:dd:77:45:92:6b:03:ac:cc:89:06:17:93:02:
                    7b:16:1b:57:64:5c:40:19:db:08:e2:fd:50:0e:0d:
                    63:a6:4c:0b:c4:44:9f:a9:9a:61:68:c1:93:c5:04:
                    74:e4:58:0f:ee:f8:55:8d:0f:d0:77:a5:fa:47:22:
                    c0:a3:26:af:ec:2b:40:e3:cf:43:40:87:5a:c3:12:
                    41:1f:b4:21:e9:73:27:99:ad:4a:1c:de:7e:d5:b4:
                    a1:8f:49:ec:9d:58:51:96:75:6e:a5:73:15:1d:ce:
                    e5:45:14:d0:c9:dc:c0:98:ce:b0:75:e5:55:51:a0:
                    94:c2:66:eb:8c:ce:c6:be:ae:fb:eb:29:41:04:cc:
                    18:f7:68:6d:00:e0:3f:93:fc:49:70:76:f2:a5:85:
                    cf:e0:c5:ef:e9:eb:33:92:bf:f1:9b:39:07:04:52:
                    1b:8c:2e:01:a4:5c:37:9d:e6:a1:31:6e:d0:36:96:
                    fb:d8:05:b7:07:b7:37:41:81:f4:d9:19:ed:de:50:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:0B:9A:39:1F:33:15:70:4E:DF:B0:51:93:FC:26:80:3B:70:6E
            X509v3 Authority Key Identifier:
                keyid:33:52:95:D3:2E:65:D2:82:FB:25:39:B3:C6:68:F0:15:8E:8E:0E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1KV0y5l0oL7JTmzxmjwFY6ODlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C4C3/AE002D483E3C11F1BFDE20B0CE1D38B0/M1KV0y5l0oL7JTmzxmjwFY6ODlo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c0:b0:ef:64:14:49:e5:c0:27:e1:d7:1a:29:bc:ec:4f:7c:
         58:26:ab:1d:d9:a1:c3:ae:2c:61:fa:62:9e:7d:33:20:34:32:
         4a:09:6a:07:58:86:e8:6d:e5:a7:13:74:f9:ed:12:25:41:bb:
         a4:81:dd:b3:36:ef:f6:a4:3d:fc:71:30:42:80:f9:1b:48:0b:
         57:4e:c9:e0:f6:7d:fa:8d:5e:d3:20:65:b2:99:1f:95:28:32:
         85:e1:c5:c0:bb:b4:94:f4:f9:dc:21:c2:5c:64:1f:43:c7:65:
         8c:61:ed:f2:06:95:d6:db:d4:3b:0e:47:2a:e6:ec:a3:10:20:
         50:93:14:5e:b3:9b:3c:3f:33:dc:a6:8b:58:e9:8b:5f:66:7d:
         e5:f2:0a:3b:26:dc:f9:68:53:47:12:bc:f5:ae:28:8a:c1:a9:
         bd:3a:40:ef:9c:6f:e0:3f:a3:4e:45:02:77:d9:a7:13:32:66:
         6c:16:13:88:11:5c:df:2f:07:53:40:6c:bb:61:f9:64:29:f4:
         85:3c:8f:51:4a:2e:9e:4a:6e:28:dd:fa:ca:f7:40:ea:59:4f:
         9e:27:53:93:c2:39:d5:7f:b7:ce:df:72:5a:9e:d3:a5:ca:2b:
         a7:04:9a:32:97:1d:37:61:04:0c:9e:d2:9c:4d:2d:44:77:6a:
         89:0e:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:23:39 2026 by rpki-client