Error: rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          VMEQV75XSqR6jAChArrTyMjWbs/8/3ouzgPg7MGt7qo=
Subject key identifier:   26:82:A5:A7:F7:07:9D:74:2A:C8:59:5D:DB:A5:29:7F:13:02:FC:5B
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       062C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          062B
Signing time:             Tue 22 Sep 2026 02:50:06 +0000
Manifest this update:     Tue 22 Sep 2026 02:50:05 +0000
Manifest next update:     Thu 24 Sep 2026 02:50:05 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: WaLjaT52JCSG/dqgooAo1peSIf3xpB7pDfJ6t9OmZY8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Sep 22 02:50:05 2026 GMT
            Not After : Sep 24 02:50:05 2026 GMT
        Subject: CN=6ab1ecdd-ea0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:c5:15:62:ad:35:e7:c6:e8:3d:b2:2c:5e:
                    ba:c2:30:dd:74:5c:3e:4c:5d:16:88:30:4e:90:0d:
                    1b:65:5d:37:53:a3:a7:85:90:7e:d5:79:9d:19:1f:
                    9f:98:98:f9:7a:f1:66:a0:cf:16:0d:1d:dc:3b:70:
                    93:fe:e4:2f:43:13:07:0e:6e:cb:55:6c:32:64:20:
                    e5:7c:5b:b1:44:42:42:56:e1:65:cc:cc:4f:2b:93:
                    91:5d:50:c9:f7:e7:9d:21:86:52:a3:bc:32:25:35:
                    3a:a5:40:32:3d:25:e3:0c:a8:6a:ca:a2:f0:af:10:
                    74:34:a6:8a:b8:fe:b5:77:c3:71:58:a7:6e:41:88:
                    d8:22:c3:26:aa:3e:a7:16:00:4b:02:ca:34:8b:ed:
                    18:ab:58:19:d7:84:4e:ad:50:dd:b8:34:94:00:a2:
                    65:6f:f0:be:9b:6b:2c:10:d8:c7:14:b1:44:e8:30:
                    5c:66:8a:13:06:98:fd:40:b9:72:c5:02:c3:46:37:
                    d6:bf:7a:c4:a7:8e:7a:af:51:2c:9c:ba:5c:eb:a6:
                    4a:ac:b0:1a:a0:b8:30:af:9d:9f:a4:11:f6:24:21:
                    7c:6b:33:39:54:b9:60:7f:3d:45:5e:e7:98:49:30:
                    3f:af:f6:ce:59:e9:b5:3d:59:ce:d4:44:01:cd:f3:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:A5:A7:F7:07:9D:74:2A:C8:59:5D:DB:A5:29:7F:13:02:FC:5B
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:eb:ec:3b:7b:23:c6:82:d5:d6:91:61:74:18:2f:19:1d:
         98:0d:ef:ec:bf:a2:09:cf:f4:ab:ba:bd:8b:9e:f5:2d:fe:73:
         b2:15:ae:f7:28:70:11:3e:12:f5:99:67:8e:89:00:ea:8e:92:
         3c:79:16:5d:77:c7:bb:4e:43:20:1f:e6:43:f9:07:f2:b1:e3:
         3f:4a:74:26:2a:0f:c3:cb:68:a5:7f:08:77:41:fc:6a:ac:ba:
         94:b0:0b:32:5a:56:fe:2e:e4:e9:3c:17:5e:1a:2d:49:90:f4:
         e4:87:0d:d9:60:3f:da:96:6f:f6:50:c9:1b:c9:b3:51:78:f4:
         6e:20:1c:c9:37:58:f2:01:9f:0b:d9:9e:68:b7:bc:56:e5:5c:
         63:93:3f:d3:bd:01:d6:ec:fd:14:61:fa:46:61:48:7d:c8:af:
         49:3d:7e:ed:c9:64:c8:61:b2:d8:e4:6a:b3:0f:67:27:a9:e8:
         b8:95:d5:2b:53:d5:d4:29:54:a5:70:d4:41:4d:56:48:a0:3a:
         91:af:60:16:3e:e3:13:c8:2f:ac:ba:e5:6e:f2:4b:33:23:e4:
         e8:1a:29:bc:f2:91:35:e1:b1:18:9b:5f:d7:b4:22:ad:53:47:
         cf:36:e3:a7:09:f5:1a:56:53:82:15:25:b8:fa:39:30:f9:80:
         22:e8:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:46:30 2026 by rpki-client