Error: rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
File:                     fdXEm3fH1Lf97amkdPdSEWYtoRw.mft (raw, json)
Hash identifier:          i5mPFpJaDL/QRFmDJArGRsXJEuzkcqJ6fdG6MXIsMFM=
Subject key identifier:   44:FA:24:7E:2C:3D:B6:C7:82:C8:67:BA:56:E0:B5:F3:C8:BF:A3:65
Authority key identifier: 7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C
Certificate issuer:       /CN=F36B32D3AF/serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
Manifest number:          50
Signing time:             Sat 14 Nov 2026 05:50:20 +0000
Manifest this update:     Sat 14 Nov 2026 05:50:20 +0000
Manifest next update:     Mon 16 Nov 2026 05:50:20 +0000
Files and hashes:         1: fdXEm3fH1Lf97amkdPdSEWYtoRw.crl (hash: Z1ee4ihnTMzyOdYh4CJEVeWtrsyNgUsjv6lldOlq89o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B32D3AF, serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
        Validity
            Not Before: Nov 14 05:50:20 2026 GMT
            Not After : Nov 16 05:50:20 2026 GMT
        Subject: CN=6af7f69c-accb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:07:30:d2:c8:30:2e:b2:48:1c:54:f2:d2:
                    03:9b:b5:58:53:a7:16:c6:e9:6f:7d:e6:1f:35:8e:
                    17:0a:b8:32:57:17:a5:d2:51:58:37:ba:6e:77:a4:
                    3c:d4:dd:17:02:dd:68:48:00:83:02:ec:20:8b:81:
                    5d:6e:4c:9c:c9:0b:47:08:18:ed:75:80:95:af:f6:
                    0a:32:b0:55:d9:d7:db:2a:c4:22:62:04:34:84:35:
                    8a:1a:f3:21:28:d2:9f:3e:c3:31:e1:70:73:3b:ce:
                    2a:11:75:e5:dc:8f:6e:1c:a8:2e:39:fd:d3:5c:44:
                    be:08:4c:aa:4e:9e:c3:f2:1c:4d:6d:43:1a:da:21:
                    2b:f1:64:f0:d5:3f:5b:d1:47:fd:4f:94:ec:0f:78:
                    4f:7d:3e:31:e6:2d:63:a6:c1:23:c9:f3:24:6f:a1:
                    92:ba:a5:ff:91:5b:06:7a:f9:c7:57:b9:12:9d:de:
                    58:8e:66:62:e4:46:74:9b:b5:d0:d0:19:61:14:c1:
                    86:84:64:63:88:ec:92:97:96:bd:cb:f5:be:a1:5d:
                    f4:c0:b6:0a:9e:1a:06:53:df:28:ca:a7:2b:2f:30:
                    95:28:0d:69:bf:63:b9:f1:48:4a:ea:14:7d:7d:af:
                    b5:19:d9:dd:c4:8d:d2:e2:b2:3b:57:3e:b3:16:22:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FA:24:7E:2C:3D:B6:C7:82:C8:67:BA:56:E0:B5:F3:C8:BF:A3:65
            X509v3 Authority Key Identifier:
                keyid:7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:52:59:8b:17:36:23:52:65:0a:a2:c0:42:a0:59:a1:6b:
         f8:50:96:41:88:a1:dd:a4:f4:d0:00:ef:9d:43:32:ae:4d:d0:
         19:a7:a2:c0:92:ce:bd:fa:f1:30:c6:1c:0f:c7:2a:c2:19:98:
         5a:cd:37:c3:05:9e:6b:84:6a:5a:41:0c:ea:2f:01:e6:e3:c7:
         13:53:aa:1a:82:12:be:d5:86:75:92:37:a9:e6:b0:f0:29:36:
         c5:23:18:bf:e9:a4:de:e3:62:5a:bc:b5:70:b4:ca:f1:ad:63:
         ec:d3:0e:c2:1b:1a:e6:09:56:29:19:f1:74:0c:3e:9a:fa:46:
         05:3b:56:1f:07:49:5d:6e:64:87:95:73:31:1a:6c:52:a6:59:
         ff:62:c2:16:e1:4d:d4:9e:2f:37:ae:8d:db:2c:f9:37:46:00:
         7d:1e:21:db:2a:7e:76:6e:01:c0:e5:b1:3b:8a:9c:c9:be:49:
         a6:68:8c:65:43:55:71:7c:dd:6f:06:3d:9f:8c:5f:37:bd:c9:
         71:ef:b6:66:a5:a0:06:2c:49:e2:68:f3:cc:b6:5d:50:4c:8b:
         4e:2b:29:95:00:e5:5c:2d:61:e4:56:69:fd:89:f9:26:70:27:
         a7:2c:cb:f2:f0:13:cc:cc:a9:2a:19:78:00:5b:1e:d1:31:c4:
         c1:18:a6:9c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
MzJEM0FGMTEwLwYDVQQFEyg3REQ1QzQ5Qjc3QzdENEI3RkRFREE5QTQ3NEY3NTIx
MTY2MkRBMTFDMB4XDTI2MTExNDA1NTAyMFoXDTI2MTExNjA1NTAyMFowGDEWMBQG
A1UEAxMNNmFmN2Y2OWMtYWNjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0VBzDSyDAuskgcVPLSA5u1WFOnFsbpb33mHzWOFwq4MlcXpdJRWDe6bnek
PNTdFwLdaEgAgwLsIIuBXW5MnMkLRwgY7XWAla/2CjKwVdnX2yrEImIENIQ1ihrz
ISjSnz7DMeFwczvOKhF15dyPbhyoLjn901xEvghMqk6ew/IcTW1DGtohK/Fk8NU/
W9FH/U+U7A94T30+MeYtY6bBI8nzJG+hkrql/5FbBnr5x1e5Ep3eWI5mYuRGdJu1
0NAZYRTBhoRkY4jskpeWvcv1vqFd9MC2Cp4aBlPfKMqnKy8wlSgNab9jufFISuoU
fX2vtRnZ3cSN0uKyO1c+sxYiYQECAwEAAaOCArgwggK0MB0GA1UdDgQWBBRE+iR+
LD22x4LIZ7pW4LXzyL+jZTAfBgNVHSMEGDAWgBR91cSbd8fUt/3tqaR091IRZi2h
HDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjMyRDMvQURFQkRGQ0FBMUU1MTFGMTkwQkNEQ0NBQ0UxRDM4QjAvZmRYRW0z
ZkgxTGY5N2Fta2RQZFNFV1l0b1J3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZmRYRW0zZkgxTGY5N2Fta2RQZFNFV1l0b1J3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZCMzJEMy9BREVCREZDQUExRTUxMUYxOTBCQ0RDQ0FDRTFE
MzhCMC9mZFhFbTNmSDFMZjk3YW1rZFBkU0VXWXRvUncubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKj2UlmLFzYjUmUKosBCoFmha/hQlkGI
od2k9NAA751DMq5N0BmnosCSzr368TDGHA/HKsIZmFrNN8MFnmuEalpBDOovAebj
xxNTqhqCEr7VhnWSN6nmsPApNsUjGL/ppN7jYlq8tXC0yvGtY+zTDsIbGuYJVikZ
8XQMPpr6RgU7Vh8HSV1uZIeVczEabFKmWf9iwhbhTdSeLzeujdss+TdGAH0eIdsq
fnZuAcDlsTuKnMm+SaZojGVDVXF83W8GPZ+MXze9yXHvtmaloAYsSeJo88y2XVBM
i04rKZUA5VwtYeRWaf2J+SZwJ6csy/LwE8zMqSoZeABbHtExxMEYppw=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:55:34 2026 by rpki-client