Error: rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
File:                     5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft (raw, json)
Hash identifier:          rlw1bwhg6IuaLex8B3gR61DWikCZkjlwhEj0g+dinR8=
Subject key identifier:   DA:45:A4:18:65:04:E2:59:0B:87:E3:E4:AC:C2:06:7A:DD:D5:C9:EB
Authority key identifier: E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85
Certificate issuer:       /CN=F36CC8EBRI/serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
Certificate serial:       06C7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
Manifest number:          06C5
Signing time:             Sun 15 Nov 2026 02:39:11 +0000
Manifest this update:     Sun 15 Nov 2026 02:39:10 +0000
Manifest next update:     Tue 17 Nov 2026 02:39:10 +0000
Files and hashes:         1: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl (hash: nrfk4MkIzhSXC20Mb9ZSLJ35l4pjW2dhWCZMvxArMZ4=)
                          2: A0D8F85C8EFF11F1A65138F7CE1D38B0.roa (hash: teptVHQ0uPHPGBYFMoadvyUXi00pXKRL48ZoHJLP0Cs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                          rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBRI, serialNumber=E690FB656B8D7D0F0F676D9D127A32DF8D3A6D85
        Validity
            Not Before: Nov 15 02:39:10 2026 GMT
            Not After : Nov 17 02:39:10 2026 GMT
        Subject: CN=6af91b4f-7ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:54:be:cf:20:32:34:ef:b2:e2:8c:3d:ff:
                    9a:ad:f0:dd:63:80:48:a5:94:d7:2d:91:b6:d4:07:
                    8a:50:df:d2:8e:23:9b:eb:f9:ec:a3:af:dd:50:8b:
                    2f:17:11:4d:6c:98:4f:ed:08:28:d3:09:b8:63:70:
                    d0:ad:bc:41:25:d2:39:75:0a:2d:b6:ea:70:be:0e:
                    7a:c0:4c:0d:60:87:d7:e0:c2:91:6a:e5:2f:90:32:
                    a0:14:c3:9d:5a:0b:ee:65:c6:0a:31:93:c6:a7:0c:
                    0f:d9:d0:d6:6d:61:e0:08:e2:84:ae:67:25:05:a6:
                    85:f3:3a:7c:7d:ca:84:49:54:5e:34:80:f1:ec:72:
                    3b:ef:75:10:8b:0f:93:1b:57:eb:be:20:e5:18:e5:
                    a5:59:29:79:bb:b4:57:c0:12:78:1e:46:1d:be:5d:
                    e4:fe:9b:0e:67:6b:41:9d:00:92:dc:bf:d0:d3:8d:
                    49:ec:e0:61:94:0b:ff:c0:a9:5f:f8:73:f8:1b:a3:
                    d6:87:44:74:4f:0e:95:86:1d:97:43:ab:21:07:79:
                    4c:9b:97:ef:d1:1e:0b:11:62:a5:63:28:73:57:1c:
                    3d:b5:81:b9:01:61:53:a3:d7:77:ff:b4:83:44:0a:
                    5b:5d:4c:e9:93:69:7e:f8:c8:df:a4:6c:6c:e3:19:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:A4:18:65:04:E2:59:0B:87:E3:E4:AC:C2:06:7A:DD:D5:C9:EB
            X509v3 Authority Key Identifier:
                keyid:E6:90:FB:65:6B:8D:7D:0F:0F:67:6D:9D:12:7A:32:DF:8D:3A:6D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/CD40B1EAB0ED11ECA48318825A40D577/5pD7ZWuNfQ8PZ22dEnoy3406bYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:ff:69:5e:5b:60:aa:9f:18:3c:d4:4f:5c:bf:16:38:8b:
         36:d6:a4:90:4d:bc:73:13:4e:12:d2:68:8c:2d:9f:90:04:04:
         45:df:a6:31:4a:6d:0b:7e:29:d7:c7:28:06:46:ca:c3:56:db:
         44:da:f5:2d:3a:c8:1a:2f:5e:9e:0d:39:b2:6a:64:34:cb:fe:
         72:39:9c:9f:ae:c6:c1:29:02:36:09:f4:e4:63:e5:3a:17:7e:
         46:b6:39:bb:b0:e4:4c:a5:47:66:92:12:80:93:c2:72:8f:c4:
         47:40:c1:60:90:35:db:cf:56:9f:67:43:fd:21:24:b4:82:f9:
         1a:10:b2:0c:1d:17:a5:82:43:91:bb:04:a6:88:d9:03:ff:25:
         68:c1:0c:bd:06:bf:ed:fc:93:9a:87:46:9e:23:d0:e8:a9:a5:
         3b:6e:0a:d4:f1:65:eb:e3:a5:23:57:13:51:5d:11:bf:88:61:
         4d:6e:56:55:94:b9:1d:2c:73:bc:c5:7e:e8:df:5f:75:19:2c:
         ea:a0:f9:26:28:67:e0:9b:5a:40:a0:85:00:4b:75:54:3f:81:
         76:3b:7b:1a:7f:dc:6b:c4:45:56:56:ce:59:2c:78:71:57:12:
         c9:36:50:d6:2b:33:0e:51:3c:e7:b4:02:56:6c:a8:07:8f:b2:
         83:98:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:32:47 2026 by rpki-client