Error: rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
File:                     uzo1Sy60WgeXNxMywh_IM9si2bE.mft (raw, json)
Hash identifier:          odegQ/0fYbnehawQ2wviN9dpJrBbNQpuLhVLmAS7ws8=
Subject key identifier:   6D:0C:D9:BF:D2:9D:EB:40:27:7C:25:94:70:C6:2B:6A:95:A5:B3:0F
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Certificate issuer:       /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial:       0713
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
Manifest number:          070D
Signing time:             Wed 23 Sep 2026 02:32:24 +0000
Manifest this update:     Wed 23 Sep 2026 02:32:23 +0000
Manifest next update:     Fri 25 Sep 2026 02:32:23 +0000
Files and hashes:         1: uzo1Sy60WgeXNxMywh_IM9si2bE.crl (hash: 0i/ejRTlgD7aRXpvZUjkuKbThRHk6kGkXC7vjntofOE=)
                          2: 8E90E6161CD111EFAD3E6F387DDC24C2.roa (hash: Acxu0DX0x7zOnZo/d29ZFhmVVZhtQ4DjKj+Qddi4oY8=)
                          3: 556D1DA01CD111EF9997F1117DDC24C2.roa (hash: TUGWF0iT2TWYNHrRW0ntCFeOp6mPEZVXlZ0YLlE22V0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBCCDAF, serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
        Validity
            Not Before: Sep 23 02:32:23 2026 GMT
            Not After : Sep 25 02:32:23 2026 GMT
        Subject: CN=6ab33a38-1458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:51:ff:3a:6a:e8:95:59:26:29:85:fd:f4:
                    13:ad:69:48:07:8a:86:9f:7d:43:7b:51:dc:df:79:
                    69:aa:9b:d4:a3:37:f7:13:c7:7d:a4:9b:ab:31:43:
                    37:5b:60:ce:f1:6c:2e:60:65:4c:1d:e3:70:3e:d6:
                    ed:ed:e4:13:7a:7a:70:54:39:63:8b:65:8e:b3:4d:
                    05:a7:1b:fc:16:c9:da:dc:5f:4c:ea:fa:9a:ce:7b:
                    75:9e:e7:4b:65:b1:a3:3a:5e:03:21:d6:0f:85:04:
                    87:f4:8e:a5:07:2d:8e:11:34:53:ef:b5:5f:76:44:
                    df:21:84:09:42:6a:a1:e4:f3:56:07:4d:76:71:7f:
                    18:ab:67:64:87:b3:2a:d7:7e:5b:12:05:58:09:7d:
                    54:2f:8c:d3:68:1c:3f:98:20:ea:a0:09:11:b1:c2:
                    d0:0f:b5:5d:83:68:a0:b4:00:18:54:17:18:4c:c9:
                    08:5f:e6:d0:83:cf:1e:6d:8a:66:38:4b:90:3b:c1:
                    25:9f:9f:d1:ee:26:a3:35:10:a3:99:81:f2:02:b0:
                    06:dc:72:55:41:fe:2f:53:18:da:a4:09:23:3d:7d:
                    a7:3b:57:c0:21:38:71:04:10:27:a4:4a:2e:1f:06:
                    9f:37:72:9a:40:e5:cf:84:04:39:69:19:22:e7:46:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:D9:BF:D2:9D:EB:40:27:7C:25:94:70:C6:2B:6A:95:A5:B3:0F
            X509v3 Authority Key Identifier:
                keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:77:70:8a:5f:c8:6a:96:d1:aa:a5:c3:57:78:00:74:92:20:
         25:08:92:1d:45:47:d8:3e:83:99:8f:5d:cf:28:06:f8:1f:12:
         fd:85:9d:f1:9a:10:26:2c:dd:bf:b5:fa:10:2a:28:3f:fd:df:
         e6:d9:f3:40:9f:9f:72:6b:df:93:3d:62:25:31:c9:52:a4:0f:
         81:0b:f3:80:40:2e:dd:10:93:1b:02:2d:4c:f2:50:6c:2d:73:
         2e:10:aa:e9:68:88:a7:c2:8e:c5:06:61:8c:14:db:11:99:37:
         7a:ce:5d:a1:1f:61:00:fe:62:f2:8f:75:e6:2e:89:4e:28:46:
         da:6e:26:df:5f:c1:46:1c:0d:82:74:f2:b7:69:fb:57:66:5c:
         f4:46:2d:d3:bc:72:fa:31:6a:64:40:2c:69:19:0e:76:a0:e4:
         27:67:fa:27:b6:43:8a:2b:44:ab:de:73:d5:42:77:9b:9f:c0:
         a6:80:b1:58:4a:2e:ea:97:a4:12:4b:01:7b:d4:3d:03:9b:f6:
         12:ef:84:93:e4:b8:5c:bc:d8:b0:3e:b1:e8:30:ed:34:66:af:
         b9:cf:73:20:40:77:94:0b:49:8e:d2:45:c0:1d:08:d8:b2:ff:
         39:48:95:51:80:e4:59:8f:78:48:20:03:1c:cd:ea:65:87:73:
         e0:d5:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:22 2026 by rpki-client