Error: rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft
File:                     0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft (raw, json)
Hash identifier:          GXq5G95dQK+3JBnh5cLSSzP7yjficsg/EkGz+oW/G9Q=
Subject key identifier:   57:9F:6C:1B:DE:D1:04:AC:A4:66:B9:51:D0:2F:F0:C1:44:EE:37:29
Authority key identifier: D0:4C:AD:68:C5:51:9E:A2:13:42:5D:06:7F:A6:40:8F:4F:E3:FC:BA
Certificate issuer:       /CN=F367496AAF/serialNumber=D04CAD68C5519EA213425D067FA6408F4FE3FCBA
Certificate serial:       0183
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft
Manifest number:          0180
Signing time:             Fri 25 Sep 2026 05:09:55 +0000
Manifest this update:     Fri 25 Sep 2026 05:09:54 +0000
Manifest next update:     Sun 27 Sep 2026 05:09:54 +0000
Files and hashes:         1: 0EytaMVRnqITQl0Gf6ZAj0_j_Lo.crl (hash: UFZu6YgbGCRSv1Sgs31AwtWU18JZa8WWqizTi00dj+4=)
                          2: 6205CF98945E11F0A9CA76DFDAE4EC9C.roa (hash: LTBB5DFwzBz7GZCmwt+3z0UKOPiX3GACqZ6yGZV+Njc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367496AAF, serialNumber=D04CAD68C5519EA213425D067FA6408F4FE3FCBA
        Validity
            Not Before: Sep 25 05:09:54 2026 GMT
            Not After : Sep 27 05:09:54 2026 GMT
        Subject: CN=6ab60223-1c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:ba:1c:65:8e:82:4c:14:a5:6f:21:27:e1:
                    09:b8:26:ee:38:7d:53:09:9f:ee:a9:cf:51:7c:12:
                    67:42:94:f9:78:83:69:eb:7b:61:28:b3:e9:8a:71:
                    47:2e:1f:c5:d3:32:55:1c:13:0e:74:71:a1:4a:cd:
                    e0:25:38:23:65:5f:8e:a2:0b:b5:6e:b3:1c:46:03:
                    ae:db:56:77:c1:64:c7:12:54:ce:90:2b:d1:76:5d:
                    37:49:1e:ac:b3:31:30:08:1a:c3:7e:21:41:63:f8:
                    59:1c:90:0b:a9:31:1c:0e:fd:ec:42:61:5c:47:15:
                    66:69:89:3a:68:d4:87:86:80:28:6a:16:f0:31:b9:
                    a4:8c:30:b8:e7:ec:c3:6c:7b:99:9c:5f:c5:3b:39:
                    fb:72:69:65:90:09:37:89:af:4d:8f:62:4f:1b:12:
                    01:b7:07:8f:50:86:95:3f:ef:96:1a:cb:5c:af:ef:
                    ee:d6:b3:a3:54:9d:09:c0:28:7f:e7:c4:78:c9:29:
                    52:15:bf:2b:f7:25:64:6d:d6:aa:bd:44:50:01:99:
                    37:d2:ab:13:fa:b2:23:51:32:0d:17:a4:52:eb:5a:
                    37:5a:66:88:7e:b2:ed:6b:c6:07:4f:56:12:db:1f:
                    e7:73:c0:b8:19:45:6c:03:b4:ce:d8:9a:6f:e5:96:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9F:6C:1B:DE:D1:04:AC:A4:66:B9:51:D0:2F:F0:C1:44:EE:37:29
            X509v3 Authority Key Identifier:
                keyid:D0:4C:AD:68:C5:51:9E:A2:13:42:5D:06:7F:A6:40:8F:4F:E3:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367496A/2A8B6E7A938111F09DB8CAC8DAE4EC9C/0EytaMVRnqITQl0Gf6ZAj0_j_Lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:aa:14:93:1c:2e:72:cf:17:5c:44:2e:76:12:29:c0:47:
         da:4e:71:52:c5:d1:a8:d2:2f:70:ce:46:24:63:b4:47:42:ba:
         a3:c2:b2:ff:3b:09:a9:53:c6:19:9a:eb:95:e8:a6:79:fa:35:
         9b:7a:af:52:5d:86:6b:8f:c6:ac:22:fa:ac:b1:b2:34:90:9a:
         67:a4:e1:fb:87:19:8c:1f:df:63:19:fa:88:17:56:09:8c:03:
         35:86:27:e9:d2:26:c6:dd:2f:51:3f:71:ed:54:ae:3d:10:53:
         01:b5:40:c0:1b:b7:0b:8a:4d:1c:c6:13:0c:51:82:bc:3b:3c:
         f8:a2:ef:fa:bb:f6:92:4f:25:ad:d9:76:5b:dd:6f:5f:c7:21:
         f7:5e:96:b7:7b:c4:ef:56:27:be:2d:de:f7:62:65:ef:3f:7b:
         60:96:a0:05:b7:ca:32:4c:85:c5:e2:b7:74:0d:e7:f5:42:2a:
         e9:cf:99:3e:3f:07:50:0e:26:07:dc:28:fb:61:80:8b:7e:89:
         e0:4f:a1:3b:f0:37:cf:85:37:b8:bf:36:07:00:b1:37:ae:59:
         67:68:7c:2c:42:b4:b6:2b:f1:5f:44:24:76:1e:2e:c3:95:8c:
         0f:95:e0:9c:29:20:8b:14:c4:73:da:d3:db:8c:eb:4d:2b:9c:
         f4:5c:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:09 2026 by rpki-client