Error: rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
File:                     uzo1Sy60WgeXNxMywh_IM9si2bE.mft (raw, json)
Hash identifier:          kvBW7kOyO33R7+qDli1MpVxb+CC9nnF3kX5TqwwSkvI=
Subject key identifier:   23:4E:46:C7:18:D0:7D:46:75:12:12:C8:C6:9D:F1:71:62:0F:B5:72
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Certificate issuer:       /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial:       0747
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
Manifest number:          0741
Signing time:             Sat 14 Nov 2026 02:30:57 +0000
Manifest this update:     Sat 14 Nov 2026 02:30:56 +0000
Manifest next update:     Mon 16 Nov 2026 02:30:56 +0000
Files and hashes:         1: uzo1Sy60WgeXNxMywh_IM9si2bE.crl (hash: wHYljzBCGFvzUmkJokZASCZK4QnThE0wI8XQrbtAvjU=)
                          2: 8E90E6161CD111EFAD3E6F387DDC24C2.roa (hash: Acxu0DX0x7zOnZo/d29ZFhmVVZhtQ4DjKj+Qddi4oY8=)
                          3: 556D1DA01CD111EF9997F1117DDC24C2.roa (hash: TUGWF0iT2TWYNHrRW0ntCFeOp6mPEZVXlZ0YLlE22V0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBCCDAF, serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
        Validity
            Not Before: Nov 14 02:30:56 2026 GMT
            Not After : Nov 16 02:30:56 2026 GMT
        Subject: CN=6af7c7e1-f51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:fa:15:2a:d7:9b:74:f6:fd:0d:e1:18:42:
                    16:a3:5d:37:07:40:49:61:6d:87:a9:91:89:00:9e:
                    f0:dc:68:c2:b7:db:e8:e4:26:41:5d:50:0b:ef:a5:
                    d3:57:b6:f8:57:66:61:0a:5b:d2:22:8b:55:e9:a7:
                    fc:58:dd:08:53:29:5d:a0:6f:9f:cd:62:c4:7a:17:
                    02:88:92:e6:10:2f:40:af:44:32:60:65:35:f6:21:
                    74:1d:15:25:b5:81:76:34:8a:d1:0b:84:ab:a6:c5:
                    8a:fe:59:bd:c1:a6:c9:21:9c:f4:d4:3d:01:d5:74:
                    1f:8f:0f:dd:2f:2d:70:98:5c:e4:fc:54:7e:5e:f9:
                    38:85:6b:e6:2d:86:49:a9:bf:79:87:80:3e:03:fa:
                    6f:3f:2e:f5:81:0d:99:f3:11:5d:25:39:7a:f1:6d:
                    4f:79:a6:d9:cf:15:9e:09:18:7c:fc:5d:c9:6c:f6:
                    75:6f:03:2d:b4:7a:5a:e1:44:e4:47:d3:f6:64:83:
                    97:8d:02:b9:ae:1e:4b:c2:cb:d5:49:3b:84:2a:6b:
                    16:47:b3:58:a8:85:c2:af:ab:81:d6:85:a2:bd:bb:
                    a7:b5:db:cd:5d:16:7b:c7:23:4f:b2:ba:bc:1a:6b:
                    ae:66:7e:52:f6:e8:de:c3:de:8d:6b:dd:84:71:7e:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:46:C7:18:D0:7D:46:75:12:12:C8:C6:9D:F1:71:62:0F:B5:72
            X509v3 Authority Key Identifier:
                keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:d6:7d:a4:1d:af:f9:38:22:84:8c:e2:58:03:22:80:57:
         02:29:49:92:ff:54:31:90:bc:7f:e8:44:c7:9f:65:9f:a7:fe:
         34:1a:87:f9:53:b0:ef:8c:c9:22:ae:1b:c2:14:63:e1:16:9d:
         c1:28:de:c6:bc:97:b1:79:a1:9b:b3:f1:1b:82:0b:fc:1a:a3:
         69:d2:00:c0:37:3f:37:4b:d3:58:2d:82:23:0b:4f:99:bb:d8:
         1c:43:a2:01:53:53:93:f2:f6:ce:95:96:6a:56:6d:81:09:af:
         48:c2:ba:df:cb:a1:98:cc:91:91:43:94:8a:72:b8:1f:54:eb:
         7c:e0:7f:e6:ac:ed:14:d2:27:ea:96:97:03:50:7a:23:58:ad:
         4a:09:13:e6:0c:f5:3d:fb:20:3b:5d:e7:ca:c7:00:27:09:fa:
         73:ad:f3:9b:9f:1b:b1:ed:c6:cb:2e:35:c9:80:b2:20:36:fa:
         8d:b1:70:51:48:bd:80:44:5c:4d:41:d6:66:4c:29:91:c8:6e:
         10:20:a2:6a:1f:df:5d:5e:0c:40:5b:4d:47:e6:90:92:77:be:
         f3:fc:a8:d9:5e:3a:28:9b:e9:18:63:26:f1:4f:44:97:56:40:
         34:ba:27:52:de:61:f6:98:9b:c1:12:f1:a5:4c:d2:8d:20:2c:
         ed:08:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:25 2026 by rpki-client