Error: rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
File:                     Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft (raw, json)
Hash identifier:          flYsVu6DYvh5HPQWBGgJKxf1j1unv0LVOUUGGmM/fd4=
Subject key identifier:   4E:EB:01:80:9F:BF:82:52:9A:45:FE:A9:69:65:47:1F:1A:A0:37:EC
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Certificate issuer:       /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial:       0131
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
Manifest number:          012C
Signing time:             Fri 25 Sep 2026 05:18:35 +0000
Manifest this update:     Fri 25 Sep 2026 05:18:34 +0000
Manifest next update:     Sun 27 Sep 2026 05:18:34 +0000
Files and hashes:         1: Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl (hash: omGBIx6mtGCpLZpr5AsAkix7F1kKfPFGLRq5En/bqKQ=)
                          2: D84805CA842911F1A87FADD3CE1D38B0.roa (hash: Bb8BvIkxNfUEG8CAuLAlAE29AWUszoCKzzlh0ch3r/w=)
                          3: 0DBF4A56842A11F1957CDAD3CE1D38B0.roa (hash: Fgl+emJScu5akPkuue+0W6zA/h0FF95KqJIyjubrPFc=)
                          4: 4A5868D04DD911F1ABB268C4CE1D38B0.roa (hash: u0pAqj+9c5bW6sNCCZBPt13ns/bNVxnzw0j3JVWmkPI=)
                          5: ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa (hash: J8FadMK7Ea9bvlPNiTTJTPLhHgQY+iwpbXSBMwmh9Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
        Validity
            Not Before: Sep 25 05:18:34 2026 GMT
            Not After : Sep 27 05:18:34 2026 GMT
        Subject: CN=6ab6042b-3b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:1c:49:ba:54:04:26:16:bf:dc:8d:88:79:
                    9c:27:f5:0b:b0:56:a1:21:aa:dd:13:f0:61:2f:6c:
                    14:dd:b5:5e:45:32:ce:f9:c0:0e:be:78:a0:2c:1e:
                    57:15:1c:cc:13:ad:fe:69:08:45:e0:e8:05:c8:a7:
                    c4:43:cd:88:f7:1d:c4:0d:55:9d:01:a8:85:6d:49:
                    04:a7:f3:f0:3e:81:e3:48:06:cb:00:a5:f1:bf:d5:
                    03:6b:4a:4d:61:c6:46:08:06:66:64:3c:c9:94:04:
                    9e:12:a1:08:cd:d4:de:aa:3b:56:a1:03:45:74:cf:
                    a6:cf:14:ff:c1:ea:9f:58:5d:e3:8a:b3:ed:d4:27:
                    ff:77:1a:47:70:9d:53:e1:af:50:af:dd:13:ac:cc:
                    fc:b4:8d:ce:a0:1a:49:10:aa:47:40:d5:ed:85:2f:
                    35:37:49:5b:19:3c:63:26:65:79:16:32:05:37:3c:
                    ab:8e:3b:1a:b0:5d:bc:0c:ec:8e:fc:43:2b:40:a8:
                    72:3e:a5:09:d0:39:61:22:42:e5:3c:91:c4:47:5f:
                    8c:3f:fd:81:19:a1:8e:4f:56:62:36:72:0a:43:24:
                    23:6f:ac:a0:30:39:51:f4:eb:96:0e:96:d9:62:67:
                    8f:e5:08:0a:0a:11:08:c0:03:e5:9f:f3:4b:20:54:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:01:80:9F:BF:82:52:9A:45:FE:A9:69:65:47:1F:1A:A0:37:EC
            X509v3 Authority Key Identifier:
                keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:17:0d:37:a0:c6:ae:8d:23:00:c0:12:bb:6c:71:ae:21:
         63:3e:8d:8e:5a:de:94:35:02:61:1d:b1:60:89:d9:ca:ca:b7:
         9a:e1:b3:d5:51:71:02:e7:2f:51:ae:ae:f8:f6:c6:8a:66:18:
         71:30:3a:3f:bd:70:34:4c:49:8c:7b:62:34:92:fb:58:54:71:
         28:28:7f:22:4b:97:bd:82:4d:e7:db:b4:b5:f6:93:34:98:02:
         19:31:7e:4f:27:e6:6d:3f:72:5d:14:d7:4b:30:86:0b:ba:77:
         af:36:4f:95:fd:3b:00:ea:ae:9b:69:1a:9b:24:66:a2:75:89:
         85:30:12:14:e4:38:99:06:ca:09:1e:34:4d:5f:8c:89:49:f2:
         fc:34:44:33:30:a0:ff:25:85:c2:b0:cc:d0:6a:88:62:cb:ae:
         13:cc:36:46:8a:56:2e:db:91:26:f6:83:2b:e8:5c:06:46:6e:
         6b:3c:d7:11:22:0b:ec:61:5e:a6:d5:e3:7d:5f:83:ca:20:55:
         13:cd:ae:a3:6d:57:c4:e0:c8:a3:d0:83:f4:d8:ee:a8:32:b5:
         1e:8c:4c:07:b5:ba:94:b0:fe:1a:8d:7a:18:f2:6b:ea:e8:c9:
         68:b5:73:dc:e1:41:d3:e6:9b:86:de:e1:f3:5f:5c:fa:d9:29:
         92:f9:2e:c9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0UyOTBBRjExMC8GA1UEBRMoNDYxRkQ5Qjg2MkE2ODI5QUUxRTRGRUQyQUMxMjQ2
QjJERDBDNzkxNDAeFw0yNjA5MjUwNTE4MzRaFw0yNjA5MjcwNTE4MzRaMBgxFjAU
BgNVBAMTDTZhYjYwNDJiLTNiMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJQxxJulQEJha/3I2IeZwn9QuwVqEhqt0T8GEvbBTdtV5FMs75wA6+eKAs
HlcVHMwTrf5pCEXg6AXIp8RDzYj3HcQNVZ0BqIVtSQSn8/A+geNIBssApfG/1QNr
Sk1hxkYIBmZkPMmUBJ4SoQjN1N6qO1ahA0V0z6bPFP/B6p9YXeOKs+3UJ/93Gkdw
nVPhr1Cv3ROszPy0jc6gGkkQqkdA1e2FLzU3SVsZPGMmZXkWMgU3PKuOOxqwXbwM
7I78QytAqHI+pQnQOWEiQuU8kcRHX4w//YEZoY5PVmI2cgpDJCNvrKAwOVH065YO
ltliZ4/lCAoKEQjAA+Wf80sgVK1zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTusB
gJ+/glKaRf6paWVHHxqgN+wwHwYDVR0jBBgwFoAURh/ZuGKmgprh5P7SrBJGst0M
eRQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFMjkwLzNGOTkxM0M2RDRDMjExRjA4MjBDNzdEN0RBRTRFQzlDL1JoX1p1
R0ttZ3ByaDVQN1NyQkpHc3QwTWVSUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JoX1p1R0ttZ3ByaDVQN1NyQkpHc3QwTWVSUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0UyOTAvM0Y5OTEzQzZENEMyMTFGMDgyMEM3N0Q3REFF
NEVDOUMvUmhfWnVHS21ncHJoNVA3U3JCSkdzdDBNZVJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6BRcNN6DGro0jAMASu2xxriFjPo2O
Wt6UNQJhHbFgidnKyrea4bPVUXEC5y9Rrq749saKZhhxMDo/vXA0TEmMe2I0kvtY
VHEoKH8iS5e9gk3n27S19pM0mAIZMX5PJ+ZtP3JdFNdLMIYLunevNk+V/TsA6q6b
aRqbJGaidYmFMBIU5DiZBsoJHjRNX4yJSfL8NEQzMKD/JYXCsMzQaohiy64TzDZG
ilYu25Em9oMr6FwGRm5rPNcRIgvsYV6m1eN9X4PKIFUTza6jbVfE4Mij0IP02O6o
MrUejEwHtbqUsP4ajXoY8mvq6MlotXPc4UHT5puG3uHzX1z62SmS+S7J
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:35:37 2026 by rpki-client