Error: rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
File:                     Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft (raw, json)
Hash identifier:          5pepeO5MYcVKf1Zj5pwGz9VQZmRkqiRkPGUPWe18Bo0=
Subject key identifier:   58:55:4E:4A:69:1C:DF:C8:56:90:A9:F5:6E:E8:7A:B3:7C:FE:BF:EB
Authority key identifier: 16:CE:53:FB:BF:95:B5:5E:29:1E:23:A1:FD:CA:43:7B:66:A5:84:D0
Certificate issuer:       /CN=F368EFA9AF/serialNumber=16CE53FBBF95B55E291E23A1FDCA437B66A584D0
Certificate serial:       6F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
Manifest number:          6E
Signing time:             Fri 25 Sep 2026 05:40:23 +0000
Manifest this update:     Fri 25 Sep 2026 05:40:22 +0000
Manifest next update:     Sun 27 Sep 2026 05:40:22 +0000
Files and hashes:         1: Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl (hash: SLvBwd7aG+6Z6EhIWeWadXcMtCKQc00weOP8tLR47z4=)
                          2: 3FEDDEF663DD11F190C6BEB3CE1D38B0.roa (hash: 3xvDuGuPm+PDeZR/Wm7c96ujoWhROffy2SCsDzfKouA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368EFA9AF, serialNumber=16CE53FBBF95B55E291E23A1FDCA437B66A584D0
        Validity
            Not Before: Sep 25 05:40:22 2026 GMT
            Not After : Sep 27 05:40:22 2026 GMT
        Subject: CN=6ab60947-2dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:be:4e:3a:15:78:08:79:fe:5c:88:a9:4c:
                    c8:21:b5:f3:ca:8d:8e:fd:2a:8c:11:d8:fc:a8:f1:
                    fe:e6:89:25:7d:a3:35:a2:23:ed:08:5a:9e:3d:d8:
                    e4:cb:46:cd:63:7c:8b:6e:cf:c0:d5:07:b7:e7:aa:
                    3e:4b:09:db:65:6e:04:96:1b:ed:bf:8c:17:c0:79:
                    e5:0d:3e:90:6b:47:3e:25:57:ba:e6:64:f4:54:b4:
                    96:d6:59:63:98:e0:06:f9:8d:1a:9f:42:4d:2e:60:
                    55:ac:cf:86:8b:e9:c9:bc:80:0d:23:e6:2f:37:a3:
                    e4:d0:90:e5:85:ba:7e:24:8c:1a:9c:87:5e:93:d3:
                    04:a6:57:7f:34:65:9d:0e:64:aa:bb:23:1b:87:07:
                    5d:d6:2b:fe:50:0a:dd:d9:6e:eb:56:dd:5b:74:04:
                    66:75:07:78:11:72:a3:37:ca:cd:6c:5b:02:60:b3:
                    fc:75:1a:33:05:c3:0d:c4:ab:6a:cb:8e:1f:ee:22:
                    e6:a9:9c:a8:b9:86:1b:5d:4d:5b:8d:2e:9b:63:23:
                    25:fa:ce:71:0c:39:ed:a6:fe:91:39:d1:23:9c:95:
                    2b:e4:c0:21:f9:99:54:a6:1a:2d:22:3f:3c:11:61:
                    1c:63:b8:41:e5:07:da:26:4b:68:8d:f2:23:69:54:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:4E:4A:69:1C:DF:C8:56:90:A9:F5:6E:E8:7A:B3:7C:FE:BF:EB
            X509v3 Authority Key Identifier:
                keyid:16:CE:53:FB:BF:95:B5:5E:29:1E:23:A1:FD:CA:43:7B:66:A5:84:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Fs5T-7-VtV4pHiOh_cpDe2alhNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368EFA9/8124FF2C63DC11F1B03DA0AFCE1D38B0/Fs5T-7-VtV4pHiOh_cpDe2alhNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:25:7e:7d:b8:05:b4:d7:b7:ea:42:6d:86:38:fb:cb:58:
         9d:f0:47:fe:a5:58:82:75:e0:af:7b:94:1c:97:45:37:03:9c:
         12:6d:83:fa:96:9f:cf:c6:78:77:5c:fc:8d:78:d2:61:7d:b8:
         0d:e4:ad:99:94:3b:3e:35:fd:fb:e5:44:11:0d:20:de:8e:51:
         aa:a7:86:eb:ce:8b:ac:72:78:13:41:fa:80:f4:9f:3a:d2:f3:
         d3:fe:7d:1f:f0:78:f1:08:92:f9:37:99:a5:b6:cd:b5:de:f8:
         15:fe:0c:a7:ef:98:af:64:d6:0c:b3:2a:b5:1e:75:3d:17:dd:
         01:82:aa:8f:a1:d2:eb:ac:d7:58:95:03:62:55:19:f1:39:bc:
         68:26:0d:04:0d:02:c6:8c:dc:d8:9f:5b:52:4c:05:7d:80:1a:
         1c:a5:1a:46:88:94:e2:a8:72:0e:56:5a:50:b3:38:9e:3d:dc:
         89:89:77:09:2d:48:90:17:2a:eb:87:2f:68:9f:ac:ae:81:5f:
         ba:e4:f7:6c:13:64:e6:27:c5:99:c9:f1:a1:a2:1d:99:d1:11:
         f7:0f:9b:ef:b4:b1:e8:52:6c:87:23:17:1b:d8:ea:5f:38:24:
         cd:62:63:20:a6:49:81:81:f6:9c:a6:70:b4:75:fd:cd:4f:35:
         2f:ba:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:11 2026 by rpki-client