Error: rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
File:                     1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft (raw, json)
Hash identifier:          fehDACXq05dH1GeNiGWSJkF5lshRgkFnOncsi8n+dj0=
Subject key identifier:   5B:99:06:42:A6:59:9C:93:1F:8F:54:13:D0:1A:70:7C:E9:56:88:35
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       106B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
Manifest number:          1066
Signing time:             Fri 25 Sep 2026 00:51:48 +0000
Manifest this update:     Fri 25 Sep 2026 00:51:47 +0000
Manifest next update:     Sun 27 Sep 2026 00:51:47 +0000
Files and hashes:         1: 1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl (hash: T5/BkrIztqFe6IgXZeO0xY9PXnDeBYnsfk8FBbHEsas=)
                          2: 88EE59C2520511F0838F9DC4DAE4EC9C.roa (hash: FNAcobe0yOGwnLd0ymzGwbW/jHGE2cTudiyiweVPang=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4203 (0x106b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF, serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Sep 25 00:51:47 2026 GMT
            Not After : Sep 27 00:51:47 2026 GMT
        Subject: CN=6ab5c5a4-83d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:d2:8b:6d:82:37:8b:12:d4:ab:e0:71:16:
                    91:55:d3:ac:d4:13:97:da:f3:71:65:cb:d8:23:18:
                    c1:0d:f7:fb:cb:df:48:1f:0d:12:fb:c1:76:5b:89:
                    07:df:03:89:82:b8:51:6c:dd:8b:e8:4e:c9:af:d5:
                    02:bd:be:03:2e:d2:5b:27:96:f3:29:30:15:3b:cf:
                    ca:2c:9f:d0:fd:93:72:de:73:3d:14:5d:8b:3d:9e:
                    bb:f0:7d:70:52:b1:a6:be:de:8b:8e:24:5c:c6:8f:
                    12:6c:99:60:fd:8c:d5:c3:cb:1a:a6:a5:8e:2a:c1:
                    68:ab:ed:d9:36:80:dd:ac:b0:15:31:ff:09:de:d6:
                    cb:5d:cd:2d:bf:71:2b:de:53:bc:37:c1:2c:68:e8:
                    f6:ed:1a:ec:76:8a:48:37:ce:9e:89:bd:84:ac:60:
                    9e:73:49:ab:ff:2b:96:44:a8:7f:b6:27:4f:39:11:
                    44:3d:c1:04:c1:07:e8:a9:9f:4f:57:90:4b:0e:50:
                    c3:c9:79:55:3b:d5:1f:80:0f:b3:72:43:ea:f0:a0:
                    9e:91:40:89:f8:54:c3:40:e3:2e:8b:09:3d:86:4c:
                    6a:6a:cb:26:09:d8:09:30:ee:f4:fc:98:2f:83:e8:
                    e8:48:ba:86:3c:24:4f:d7:bf:ae:ab:4c:af:ec:86:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:99:06:42:A6:59:9C:93:1F:8F:54:13:D0:1A:70:7C:E9:56:88:35
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:30:0c:1d:49:64:b3:49:4b:b5:a7:4d:78:39:e4:25:9a:aa:
         de:a3:db:35:7c:7c:01:9e:47:52:c2:a1:ae:3f:ec:8c:13:fe:
         0b:50:4c:a2:26:13:7e:07:a8:c0:6a:e7:4c:f4:90:c0:14:22:
         0a:1f:2b:4c:41:22:0f:db:c2:a0:35:f6:c9:2d:c0:55:74:95:
         8e:44:ff:00:1c:4e:73:61:f2:b1:4b:6e:2c:51:6b:c3:b7:33:
         b0:f7:d0:cd:4d:2e:f6:65:26:18:dd:3d:af:99:c0:f1:df:41:
         48:dd:2a:a4:00:ca:f0:f0:ac:d2:f0:7f:04:52:51:9f:c7:01:
         5d:61:78:e6:20:3f:a0:9d:d9:e1:d1:83:ae:1e:1d:d1:22:d7:
         ce:a8:fc:0d:d8:8d:db:2b:ac:9c:56:ad:7f:9f:00:8d:2a:6e:
         07:8c:ba:42:ea:f7:94:b7:56:37:43:9e:c4:ca:8b:00:0c:86:
         30:98:a0:f2:f8:14:5e:4e:54:71:ed:93:76:ca:58:d1:1c:2c:
         17:8a:72:09:de:b4:97:1b:b5:11:5d:bd:03:86:77:bf:a4:1a:
         d2:e3:76:f4:ac:8d:e8:9d:4d:fd:45:38:51:a4:58:23:9c:56:
         b9:40:47:12:17:11:a4:13:8d:fa:d2:2b:6c:6b:43:7d:37:35:
         c6:a9:05:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhERkFBRjExMC8GA1UEBRMoRDY2OEJFQ0FGM0NCMTREQjYyNEEzNDI1RDY2NjYw
OUJGMjdCNTJFRTAeFw0yNjA5MjUwMDUxNDdaFw0yNjA5MjcwMDUxNDdaMBgxFjAU
BgNVBAMTDTZhYjVjNWE0LTgzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIrNKLbYI3ixLUq+BxFpFV06zUE5fa83Fly9gjGMEN9/vL30gfDRL7wXZb
iQffA4mCuFFs3YvoTsmv1QK9vgMu0lsnlvMpMBU7z8osn9D9k3Lecz0UXYs9nrvw
fXBSsaa+3ouOJFzGjxJsmWD9jNXDyxqmpY4qwWir7dk2gN2ssBUx/wne1stdzS2/
cSveU7w3wSxo6PbtGux2ikg3zp6JvYSsYJ5zSav/K5ZEqH+2J085EUQ9wQTBB+ip
n09XkEsOUMPJeVU71R+AD7NyQ+rwoJ6RQIn4VMNA4y6LCT2GTGpqyyYJ2Akw7vT8
mC+D6OhIuoY8JE/Xv66rTK/shtUBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUW5kG
QqZZnJMfj1QT0BpwfOlWiDUwHwYDVR0jBBgwFoAU1mi+yvPLFNtiSjQl1mZgm/J7
Uu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4REZBLzBFOUIxOUJBMTQwQTExRTVBN0Y1RkM0Q0Y4QUVBMjI4LzFtaS15
dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFtaS15dlBMRk50aVNqUWwxbVpnbV9KN1V1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhERkEvMEU5QjE5QkExNDBBMTFFNUE3RjVGQzRDRjhB
RUEyMjgvMW1pLXl2UExGTnRpU2pRbDFtWmdtX0o3VXU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzMAwdSWSzSUu1p014OeQlmqreo9s1
fHwBnkdSwqGuP+yME/4LUEyiJhN+B6jAaudM9JDAFCIKHytMQSIP28KgNfbJLcBV
dJWORP8AHE5zYfKxS24sUWvDtzOw99DNTS72ZSYY3T2vmcDx30FI3SqkAMrw8KzS
8H8EUlGfxwFdYXjmID+gndnh0YOuHh3RItfOqPwN2I3bK6ycVq1/nwCNKm4HjLpC
6veUt1Y3Q57EyosADIYwmKDy+BReTlRx7ZN2yljRHCwXinIJ3rSXG7URXb0Dhne/
pBrS43b0rI3onU39RThRpFgjnFa5QEcSFxGkE4360itsa0N9NzXGqQXw
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:13 2026 by rpki-client