Error: rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
File:                     cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft (raw, json)
Hash identifier:          gSqLzsb4kPmhqmdrRyohl4SL/t5BwZguf9PXF33ZHNM=
Subject key identifier:   0C:CA:DD:9D:3F:18:0A:78:F8:B7:D7:A9:6D:22:25:D2:DE:00:3D:75
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Certificate issuer:       /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
Manifest number:          01E4
Signing time:             Sat 14 Nov 2026 05:02:49 +0000
Manifest this update:     Sat 14 Nov 2026 05:02:49 +0000
Manifest next update:     Mon 16 Nov 2026 05:02:49 +0000
Files and hashes:         1: cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl (hash: LGrlca9EZSMuGpT95mlfXejjUf/GFjhVWAAPTeCF/5U=)
                          2: 3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa (hash: f4YLBLBfUAXogyJhvZl0y7IkPqGGccMi1xOkCatN5G4=)
                          3: 57F5BEAAAC3C11F0BA850FBCDAE4EC9C.roa (hash: IRGVkC9Iwq4nwlm7oviEXl6YvRhsAZYUzYeVzQbE4lQ=)
                          4: 184BE21ACAFB11F097897982DAE4EC9C.roa (hash: VaMK+/dT2Q6pDxfaF/gb2r5AdyUutWWBmZfNWyJNyIQ=)
                          5: 9B100136CF6511F0A8BB93B4DAE4EC9C.roa (hash: OoN9sLhlpjdIHQAcjkQ8yi7gfir0O9MQgOPylY1+tIQ=)
                          6: B177409E197D11F1891FCAB1DAE4EC9C.roa (hash: oJM5riwTTw47G+aPvRoCqTaKUBHOKzqcOeNm+3lWbog=)
                          7: 536D1BDCCF6711F0B4C1ABBDDAE4EC9C.roa (hash: e3D4BVYWp1fgK7pZxSoviypldsbzYne17HJZDzOOKXc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
        Validity
            Not Before: Nov 14 05:02:49 2026 GMT
            Not After : Nov 16 05:02:49 2026 GMT
        Subject: CN=6af7eb79-4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:36:80:6a:0c:0c:be:bc:62:97:bc:0f:c1:
                    e5:88:25:4c:69:da:b5:7b:f2:da:55:97:18:7b:28:
                    61:b9:ff:8f:e9:05:f5:5d:0e:52:dd:2e:47:04:be:
                    9d:dd:84:c0:80:42:4a:5d:ca:dd:99:bf:5c:71:a9:
                    3e:60:35:20:13:ff:32:3b:c5:77:de:7b:43:51:c8:
                    7a:24:1f:4b:3c:fe:3a:6e:7d:fc:ee:e0:cc:62:d6:
                    47:e9:9a:6d:d5:2e:70:28:83:fc:c6:0b:64:04:a1:
                    48:23:bc:9c:e5:47:6b:c2:b0:fc:3d:24:37:00:44:
                    63:04:3b:88:85:9c:5b:2b:d5:b4:d3:ad:58:4c:ca:
                    bc:9e:f1:f7:64:3f:18:db:5a:0f:36:88:36:c5:96:
                    85:1b:58:99:98:c9:b5:aa:48:f4:7d:f9:6b:2e:b1:
                    14:16:8c:6b:18:df:72:76:52:39:fe:fc:c7:91:97:
                    c0:65:f9:6b:05:bd:7f:71:ba:85:17:f8:05:9a:b8:
                    c3:ae:99:8c:d7:94:72:67:9c:a1:32:2f:74:85:5b:
                    d3:c3:54:f8:a3:8d:22:9d:71:68:d7:a7:70:cf:e4:
                    83:96:e8:df:85:a1:75:89:21:e4:6b:55:86:df:67:
                    17:61:ec:8e:7c:cb:c0:c4:e8:78:b8:d7:1a:19:cc:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:DD:9D:3F:18:0A:78:F8:B7:D7:A9:6D:22:25:D2:DE:00:3D:75
            X509v3 Authority Key Identifier:
                keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:f1:36:23:60:98:33:dc:cd:c3:1c:09:68:94:8b:88:ab:
         10:e1:14:31:48:94:b2:47:d0:93:8c:11:a1:6f:2e:a3:ef:84:
         ba:d9:cb:7b:16:9d:f7:52:7d:eb:a1:5d:c6:ce:3f:cb:8e:c4:
         09:b6:d6:ff:97:75:fc:6e:ee:ec:57:ce:1b:dc:7d:e6:37:21:
         97:57:96:ac:62:3e:70:ca:af:0c:92:1e:c5:d4:3e:9f:80:e1:
         a0:32:dc:29:1b:0f:8a:e6:26:23:ea:30:aa:6a:15:b5:09:32:
         05:de:81:66:cb:28:50:8d:84:d7:66:28:47:e4:c4:f2:0a:92:
         96:3a:af:21:cb:2a:ae:85:12:ce:f8:1b:3f:2f:e1:9e:43:05:
         c0:b4:cd:fc:61:80:08:4d:ad:1e:30:73:5a:b0:5e:09:4c:72:
         26:bd:12:f1:38:cd:f2:52:56:f9:14:cd:60:9c:af:03:f5:a0:
         35:f6:f0:96:2d:20:76:a2:36:1b:05:14:2c:cf:4b:e8:63:60:
         5a:fa:64:94:3d:ea:9b:ef:3c:35:cb:b7:af:80:4c:db:70:ad:
         e0:49:82:e6:fc:3d:06:89:0f:d0:18:f5:3b:fe:a6:13:d6:75:
         38:e1:49:58:5e:0a:ad:4c:bf:a7:ac:09:2b:20:45:08:5a:5f:
         82:cf:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:49 2026 by rpki-client