Error: rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
File:                     yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft (raw, json)
Hash identifier:          t6PWWMC/i+W/WzsoxtzANMNca+IjY+dTjCwLBLzYi+s=
Subject key identifier:   DA:3C:BE:DA:20:11:49:7F:BF:C4:16:70:62:F0:CF:B1:97:B6:B5:34
Authority key identifier: CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F
Certificate issuer:       /CN=F36B905AAF/serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
Certificate serial:       0207
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
Manifest number:          0207
Signing time:             Sun 11 Oct 2026 04:53:15 +0000
Manifest this update:     Sun 11 Oct 2026 04:53:14 +0000
Manifest next update:     Tue 13 Oct 2026 04:53:14 +0000
Files and hashes:         1: yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl (hash: awj0SOZ4rwe88dUPEjqO+06ATepVAodCW1ZSyUCztR4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B905AAF, serialNumber=CAF325BC7E48D97CA3A17409351A8AF27476511F
        Validity
            Not Before: Oct 11 04:53:14 2026 GMT
            Not After : Oct 13 04:53:14 2026 GMT
        Subject: CN=6acb163a-4486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:d3:92:63:ca:b9:00:dc:7b:8e:73:0e:b3:
                    a2:9f:f7:77:29:aa:3a:b1:86:e5:69:40:6d:f4:e0:
                    01:9b:b9:a3:5e:cf:75:35:6c:e7:08:76:de:63:2a:
                    32:9b:82:b1:cb:73:e2:0f:cd:e7:7b:46:d0:ef:d2:
                    8c:a8:d4:22:bb:5a:0c:03:94:4f:d1:a5:68:2c:6d:
                    6d:bf:f4:60:cf:b5:e1:cd:18:d1:34:c4:5a:92:59:
                    a1:f7:45:5e:62:be:f9:f8:b5:ba:e1:36:db:11:9a:
                    3a:29:1a:57:b3:78:75:2f:c5:90:95:de:43:10:ff:
                    f5:7b:de:81:67:34:82:4f:88:9f:3f:ab:63:cd:6a:
                    73:b8:36:77:29:2f:6d:95:15:5b:a5:05:93:33:42:
                    8a:bd:7b:c7:6f:60:e9:02:9b:9c:ea:ef:5a:b8:36:
                    17:5e:a7:d4:cb:d3:a2:6f:06:7a:55:35:a0:ea:6d:
                    b6:c2:6f:01:35:9c:57:3d:09:a4:0a:0c:80:43:17:
                    f7:42:09:ca:dd:94:39:62:a8:0e:93:12:4c:1e:12:
                    fe:a6:f2:2e:d1:e8:96:c4:5a:d4:50:72:33:44:7a:
                    59:e0:46:dd:2a:a3:88:e6:04:e7:3c:80:f1:7f:d6:
                    75:6d:3d:4d:50:db:23:43:c2:ad:51:8b:9c:40:30:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:BE:DA:20:11:49:7F:BF:C4:16:70:62:F0:CF:B1:97:B6:B5:34
            X509v3 Authority Key Identifier:
                keyid:CA:F3:25:BC:7E:48:D9:7C:A3:A1:74:09:35:1A:8A:F2:74:76:51:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yvMlvH5I2XyjoXQJNRqK8nR2UR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B905A/C5E925C2324E11F0B4BF2D8CDAE4EC9C/yvMlvH5I2XyjoXQJNRqK8nR2UR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:fa:8c:83:39:ab:87:6f:c3:e7:e7:ee:b5:a1:dd:51:32:
         69:bf:ea:b1:3a:e2:ac:c9:6b:3f:d3:c0:0f:3b:5a:6c:bc:3a:
         71:41:ea:ce:04:31:3f:ec:a9:a7:bd:e7:6f:a3:d8:5a:52:8a:
         1f:e6:55:80:d0:aa:1f:40:6c:ab:0c:bf:96:45:fe:4e:86:d7:
         13:44:f2:f2:d9:74:0a:88:60:60:d3:a6:c0:91:e1:5b:ad:19:
         9c:f2:f0:ec:5e:b1:50:cd:0d:c6:9b:b8:b7:fb:39:d3:9f:f9:
         70:9a:e4:e2:46:79:6c:29:76:fd:66:4b:10:07:25:e6:61:e4:
         4d:ad:ce:8f:59:1a:74:7a:56:97:80:1a:a5:3f:7b:87:0a:f4:
         57:9a:28:cb:11:9e:e9:5d:d3:fd:f9:e6:e0:1c:d9:d0:7e:7b:
         dc:0a:5f:34:d8:3b:12:47:22:8d:39:ba:57:5e:90:00:14:51:
         7b:f9:70:b0:eb:99:82:45:4a:ff:7f:97:44:f0:fb:89:7f:b6:
         b4:cc:71:0e:46:f8:9f:b0:ae:08:ca:a5:d8:08:f8:ec:32:40:
         86:18:d6:a5:c5:c1:c1:6c:49:84:8b:06:27:c7:a3:f9:e1:aa:
         f1:a2:ae:bd:5f:2d:3f:e7:bb:87:5d:32:24:c6:30:47:bf:60:
         7a:82:15:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:39:03 2026 by rpki-client