Error: rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
File:                     U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft (raw, json)
Hash identifier:          ppm+6+rLQfmjABqBEvYMqD9jzl1POsKO9qmU3wj14R8=
Subject key identifier:   4A:AB:B4:71:92:85:E4:43:92:CC:FB:B5:A2:18:92:CC:ED:96:2F:95
Authority key identifier: 53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24
Certificate issuer:       /CN=F36E1EE5AR/serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
Certificate serial:       0572
Authority info access:    rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
Manifest number:          0570
Signing time:             Sat 26 Sep 2026 03:09:35 +0000
Manifest this update:     Sat 26 Sep 2026 03:09:35 +0000
Manifest next update:     Mon 28 Sep 2026 03:09:35 +0000
Files and hashes:         1: U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl (hash: Orl5vvkMX0NY9gGR+dkwNW/cpiGZakSBx80SoaJFPMA=)
                          2: C3AB8C528A6611F1A79EE8E7CE1D38B0.roa (hash: 5Q3aTotP8tzCbDAvO7MJbrrOC1kFDcK3iRGQv1v9UEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
                          rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1EE5AR, serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
        Validity
            Not Before: Sep 26 03:09:35 2026 GMT
            Not After : Sep 28 03:09:35 2026 GMT
        Subject: CN=6ab7376f-dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:0d:7f:c8:05:29:79:08:65:57:c8:6d:25:
                    18:d8:8d:ad:8b:d7:a6:8f:3b:0d:16:90:93:6b:c9:
                    58:44:00:e0:98:c2:8c:a6:88:56:e3:ea:9f:ce:9d:
                    8c:47:12:90:9a:37:22:96:e6:1d:0d:6b:ef:65:c1:
                    11:81:c1:61:f7:c5:ea:3c:ff:ce:4c:57:fc:ab:d3:
                    b8:97:b0:05:7f:b6:ab:5b:16:5f:dd:cb:0e:93:ee:
                    7f:2e:cb:38:c1:fb:07:31:2e:c6:3e:16:07:f7:2a:
                    db:ef:52:08:57:0b:b1:1f:04:0a:6b:f0:4f:b9:31:
                    0e:09:a6:59:bf:4e:96:5b:c5:d5:21:64:5b:40:30:
                    1d:bb:c4:92:3d:d5:af:97:6a:f6:d1:d0:9f:18:8c:
                    eb:35:23:f3:36:23:b2:13:ca:a0:06:a3:76:84:e9:
                    e1:7f:1a:5d:26:40:0f:4e:68:ed:fd:c5:e9:d8:cd:
                    71:61:cd:91:0c:e9:55:75:f0:82:87:ed:99:ae:d7:
                    52:da:3d:83:5e:55:b4:9a:3e:c7:4a:fb:49:cd:54:
                    a7:07:f9:2c:33:5b:db:f2:90:a0:0f:05:67:e4:88:
                    fc:b2:13:1d:50:04:6a:23:51:31:2c:3e:47:8c:93:
                    d0:1c:b5:ee:12:97:85:08:c5:44:8a:d6:e6:40:78:
                    ae:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AB:B4:71:92:85:E4:43:92:CC:FB:B5:A2:18:92:CC:ED:96:2F:95
            X509v3 Authority Key Identifier:
                keyid:53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:7a:b6:76:86:70:99:f2:3e:30:08:04:8c:ce:4c:78:56:
         e3:d1:ad:cb:01:94:d5:1e:90:29:1b:35:83:9b:fa:55:41:da:
         6c:37:6c:a0:1b:26:c9:8b:29:15:00:65:38:54:7c:d5:b1:ba:
         2c:74:e8:cf:c9:3f:3c:d8:77:aa:ca:36:5d:49:b3:26:8f:5b:
         c3:94:c4:13:84:fd:5a:0a:b5:76:e9:6b:c7:47:25:26:d4:a1:
         8b:88:7c:7c:92:c3:27:79:47:18:ed:a1:8c:1a:09:ea:6c:a9:
         8b:6c:42:3e:ac:b4:77:f9:fa:2e:a3:6e:8a:63:b3:27:12:2c:
         86:ca:0c:54:f7:24:4c:b1:4d:4f:9f:8e:3c:46:c9:93:df:c8:
         2e:1d:8c:6c:a7:d1:d0:c3:72:0e:e8:bd:5f:35:57:1e:e7:e5:
         ce:dd:6d:10:f9:a7:ad:09:09:ac:47:e2:85:df:eb:b0:b8:f3:
         8e:cf:c3:85:2c:5c:00:9b:86:2e:23:f8:c1:97:e7:7c:2c:04:
         23:a9:6b:e3:ee:08:f7:e0:fa:8c:86:9f:cf:15:b1:3f:ae:a6:
         77:96:37:e8:ee:bd:c5:0e:b8:c6:eb:df:c5:4b:a5:85:85:51:
         e9:8a:57:c2:ff:0a:35:ff:d3:7a:b7:a9:bf:cd:c5:94:7e:42:
         de:8a:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:13 2026 by rpki-client