Error: rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
File:                     i-zANBYqduTT-3Ze7KfFkL_PiHU.mft (raw, json)
Hash identifier:          K6CoBA5EzMipqRuYF/9e43MTr+RC4BRUwrRmjKrHMJQ=
Subject key identifier:   31:85:DF:E8:67:51:FB:E6:10:B5:B7:9F:5C:9A:C9:30:A0:14:EB:9C
Authority key identifier: 8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
Certificate issuer:       /CN=F36AD6A0AF/serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Certificate serial:       01A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
Manifest number:          01A1
Signing time:             Thu 24 Sep 2026 05:04:16 +0000
Manifest this update:     Thu 24 Sep 2026 05:04:15 +0000
Manifest next update:     Sat 26 Sep 2026 05:04:15 +0000
Files and hashes:         1: i-zANBYqduTT-3Ze7KfFkL_PiHU.crl (hash: sXR39/EJB4EEKfkkaErw47arw9r8xxYVNRA1q/HIzvE=)
                          2: 45A9EBAC776E11F0986637CDDAE4EC9C.roa (hash: 5DzDp+6CZ7DSXgCRfb2nrU32DuFDeMShxoaruyg5+fI=)
                          3: 2A440418B0E011F19CEFAAF7CE1D38B0.roa (hash: /fpYhKfar7+zP0PxTOQf1oRuU9OGmO6wuPcf7iHYbKA=)
                          4: 28EA7144776E11F0AA3B2ECDDAE4EC9C.roa (hash: z8x4zegua5aDN/K6PnuCdH+nQv873VD50NfZxOF1vT0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AD6A0AF, serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
        Validity
            Not Before: Sep 24 05:04:15 2026 GMT
            Not After : Sep 26 05:04:15 2026 GMT
        Subject: CN=6ab4af50-1411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:d5:f7:a4:f9:ba:2b:b9:d4:5e:f0:13:b5:
                    d1:5f:26:78:0d:44:e1:fe:04:19:51:87:d7:41:1f:
                    0c:95:df:a3:4f:0e:01:8b:62:e9:2a:77:38:bb:bf:
                    f1:b8:98:fc:86:70:f1:0b:74:77:95:cd:f7:87:a0:
                    a9:de:d5:82:f5:df:7a:dd:8f:85:97:e7:d6:cf:ce:
                    d9:01:49:9f:0b:ba:f3:bc:24:f9:91:e9:a1:13:9b:
                    7a:00:5f:47:e9:33:37:b1:05:ff:8e:2a:7d:08:3b:
                    5c:0b:dd:32:2f:50:ae:a1:6a:e5:74:02:44:1e:c4:
                    17:57:44:77:fb:92:f2:56:d9:9d:59:93:1e:64:bc:
                    ef:77:26:12:62:cc:c4:29:4e:89:dc:9e:f6:c6:f7:
                    fd:cd:fe:fb:41:90:ba:e7:ee:f3:b6:db:d4:60:68:
                    f4:b9:77:06:2e:86:e6:e0:5c:bc:9c:96:9a:5f:46:
                    b2:72:97:84:f4:8f:d8:83:4d:32:f1:ed:36:fe:7f:
                    79:76:7e:c4:dd:ac:79:47:a4:d8:9d:0b:2c:fe:75:
                    23:22:f9:b2:78:31:7b:98:bd:ab:b2:44:c7:d1:3f:
                    95:24:4e:26:64:4e:30:47:20:17:14:a1:62:85:32:
                    57:11:ae:fe:cb:de:86:34:da:e3:53:1e:ac:b7:87:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:DF:E8:67:51:FB:E6:10:B5:B7:9F:5C:9A:C9:30:A0:14:EB:9C
            X509v3 Authority Key Identifier:
                keyid:8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:a5:0e:f4:98:ad:56:7c:fd:3a:f4:f3:95:70:86:d9:51:
         61:72:c4:24:2d:49:fa:ca:20:3b:3b:d1:40:f5:d1:cc:32:e2:
         de:04:76:c2:e6:9f:79:be:2f:5b:9e:94:64:f6:fa:7e:9f:12:
         dc:d7:55:4b:88:d7:c6:07:e3:ce:c3:ad:00:53:50:3e:d5:35:
         54:f0:5d:20:90:63:99:a3:3d:5e:ed:93:54:ae:35:3e:59:09:
         27:5a:6f:db:56:6e:dd:75:86:e6:44:bd:89:51:35:65:67:ed:
         b5:35:56:58:e5:6c:4d:33:d7:7d:68:e7:88:2d:11:b1:4b:43:
         b7:26:5d:c2:5d:82:f5:0f:2d:f7:7d:52:1b:3f:7b:e8:47:51:
         b9:0b:d6:4b:7e:ae:27:29:b8:41:f5:40:a4:db:bf:4e:9f:93:
         4b:0b:b1:16:bf:eb:24:db:0e:6d:d1:1d:81:82:7f:05:d0:f1:
         f7:58:30:93:86:77:90:55:56:d0:49:24:c1:44:0e:bd:a9:11:
         cb:a2:e0:77:f4:e4:d3:b7:1a:76:ae:f6:3b:08:79:ff:f8:68:
         29:b6:7c:50:9d:a7:c2:ed:8b:fa:ef:99:23:71:7d:ea:ab:88:
         29:68:88:d1:2b:9c:2e:73:86:af:28:5e:e2:a8:5b:68:dc:ca:
         6e:47:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:34 2026 by rpki-client