Error: rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
File:                     e1iV_2kARwqoGjQt5flx5dPHR3c.mft (raw, json)
Hash identifier:          DERL81F15MR0YKKq64yu9h3BWq03zheKg7Q16ewP9/s=
Subject key identifier:   FB:C5:57:2C:D0:E0:1D:7C:F9:27:E6:F3:F1:A4:16:56:31:35:34:AB
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Certificate issuer:       /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial:       04EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
Manifest number:          04E3
Signing time:             Wed 23 Sep 2026 03:27:26 +0000
Manifest this update:     Wed 23 Sep 2026 03:27:25 +0000
Manifest next update:     Fri 25 Sep 2026 03:27:25 +0000
Files and hashes:         1: e1iV_2kARwqoGjQt5flx5dPHR3c.crl (hash: otMHEtyqA1bi7rJfYwacidUo7nhNjrKFA1CcMyZvGDw=)
                          2: DC35A5700A9C11EE858690314AD9E6FC.roa (hash: kgYyy6flMlYfObZnYV9e+HUynGelZVH2UDelqXJZlPU=)
                          3: 12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa (hash: MkJTfBrBOzSWuJsHZrjclrv6ki4SKSbL2gRo3ZL+5k0=)
                          4: B54AC7C80A9D11EE985BF2334AD9E6FC.roa (hash: 5GeL0Czu/2etXZ5gA3VSe87hGnbfOU48c/oQ6DlZFyk=)
                          5: 63A562B60A9D11EE92A6DD324AD9E6FC.roa (hash: 3b9GaVwGq6W0niXUTfZp8msqwmz7KJ9S2n6bL+Jfmo8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 03:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE536AF, serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
        Validity
            Not Before: Sep 23 03:27:25 2026 GMT
            Not After : Sep 25 03:27:25 2026 GMT
        Subject: CN=6ab3471e-dde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:f5:c4:fd:ca:63:11:27:c0:73:e2:e4:26:
                    c3:48:3b:54:cb:02:af:67:98:6b:8a:ec:3c:da:35:
                    03:de:1b:15:33:06:af:a9:b3:7b:9d:29:d2:fd:28:
                    54:8c:f8:8d:e9:60:79:50:42:9f:e4:72:a3:1b:70:
                    2c:b0:00:7b:bc:cb:fc:c9:4c:09:a8:23:07:5d:56:
                    43:99:7b:e9:bc:eb:7f:d4:cb:51:5e:a3:ed:b9:e4:
                    d4:5d:3c:5d:35:bd:40:63:18:27:79:b3:03:4c:93:
                    7d:c0:d1:2d:7b:08:9e:ce:1f:9a:58:67:92:3c:9d:
                    b4:a8:2f:e1:d1:64:b3:e0:79:39:01:ae:90:ff:92:
                    dc:3f:41:0a:30:76:12:62:d4:6b:bd:0c:23:2d:b2:
                    29:6d:14:dd:4f:de:d9:f1:5e:2d:2e:fb:aa:f9:90:
                    a3:1d:ee:66:f4:fa:ff:af:49:ff:8c:3e:b9:a0:8e:
                    67:b1:53:0f:f1:c0:ad:af:52:51:1d:4e:06:84:4b:
                    98:4f:17:b9:4f:d5:fd:ad:4e:9e:4b:df:ec:89:2d:
                    c6:42:e9:8d:ed:72:9c:32:3f:18:57:f0:3f:e4:35:
                    fc:52:17:be:dd:c4:1d:d6:c8:94:c1:fa:a9:77:5f:
                    74:1e:b3:88:8a:d6:4f:8f:4e:f9:dd:f4:91:dd:79:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:57:2C:D0:E0:1D:7C:F9:27:E6:F3:F1:A4:16:56:31:35:34:AB
            X509v3 Authority Key Identifier:
                keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:43:00:e9:06:fd:2b:7c:43:2a:0f:25:3a:9d:ee:48:8c:
         32:8c:77:2e:23:b0:ed:4d:1d:85:22:bb:9a:1a:eb:22:d4:95:
         97:f2:94:77:ed:3e:5f:05:44:62:8e:c2:5f:e6:15:00:cb:e8:
         42:9e:10:b5:22:27:35:84:4d:e2:0f:a6:65:29:1f:e3:0e:79:
         6e:72:c5:33:39:b1:67:77:1a:ae:66:e3:d3:cc:e9:52:48:6a:
         fa:69:c5:5f:42:85:9a:5f:5f:e5:e0:c9:2c:52:81:68:2d:6a:
         44:b4:b0:47:38:bf:fa:f5:9f:b6:ca:96:c9:09:c6:69:01:4a:
         00:e8:2e:ae:49:60:93:ac:57:94:4c:a5:6a:7a:98:2a:38:9d:
         29:e4:e5:c0:fc:cc:51:d7:67:ea:32:5c:4b:ac:a6:96:b0:e7:
         f6:a0:70:24:b6:21:2a:12:f4:af:b8:b9:9e:65:7b:e1:d4:41:
         f7:b3:bb:b9:b3:e6:e2:71:cc:c9:0a:82:16:cd:2f:5b:f4:c7:
         fb:59:ff:1b:ae:c4:81:22:4a:ce:4d:1a:8c:29:d4:e1:3c:69:
         7d:45:b6:93:e1:22:3c:10:b4:75:ac:41:03:f2:c9:c3:74:43:
         09:2a:8c:4b:61:22:e6:4f:56:dd:a2:e1:2b:06:93:a5:9e:b6:
         be:b9:c0:7f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkU1MzZBRjExMC8GA1UEBRMoN0I1ODk1RkY2OTAwNDcwQUE4MUEzNDJERTVGOTcx
RTVEM0M3NDc3NzAeFw0yNjA5MjMwMzI3MjVaFw0yNjA5MjUwMzI3MjVaMBgxFjAU
BgNVBAMTDTZhYjM0NzFlLWRkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO4fXE/cpjESfAc+LkJsNIO1TLAq9nmGuK7DzaNQPeGxUzBq+ps3udKdL9
KFSM+I3pYHlQQp/kcqMbcCywAHu8y/zJTAmoIwddVkOZe+m863/Uy1Feo+255NRd
PF01vUBjGCd5swNMk33A0S17CJ7OH5pYZ5I8nbSoL+HRZLPgeTkBrpD/ktw/QQow
dhJi1Gu9DCMtsiltFN1P3tnxXi0u+6r5kKMd7mb0+v+vSf+MPrmgjmexUw/xwK2v
UlEdTgaES5hPF7lP1f2tTp5L3+yJLcZC6Y3tcpwyPxhX8D/kNfxSF77dxB3WyJTB
+ql3X3Qes4iK1k+PTvnd9JHdeYAZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+8VX
LNDgHXz5J+bz8aQWVjE1NKswHwYDVR0jBBgwFoAUe1iV/2kARwqoGjQt5flx5dPH
R3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFNTM2LzRBN0UyQzNFRkRFOTExRUQ5QTlERkEzQTRBRDlFNkZDL2UxaVZf
MmtBUndxb0dqUXQ1Zmx4NWRQSFIzYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2UxaVZfMmtBUndxb0dqUXQ1Zmx4NWRQSFIzYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkU1MzYvNEE3RTJDM0VGREU5MTFFRDlBOURGQTNBNEFE
OUU2RkMvZTFpVl8ya0FSd3FvR2pRdDVmbHg1ZFBIUjNjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeEkMA6Qb9K3xDKg8lOp3uSIwyjHcu
I7DtTR2FIruaGusi1JWX8pR37T5fBURijsJf5hUAy+hCnhC1Iic1hE3iD6ZlKR/j
DnlucsUzObFndxquZuPTzOlSSGr6acVfQoWaX1/l4MksUoFoLWpEtLBHOL/69Z+2
ypbJCcZpAUoA6C6uSWCTrFeUTKVqepgqOJ0p5OXA/MxR12fqMlxLrKaWsOf2oHAk
tiEqEvSvuLmeZXvh1EH3s7u5s+bicczJCoIWzS9b9Mf7Wf8brsSBIkrOTRqMKdTh
PGl9RbaT4SI8ELR1rEED8snDdEMJKoxLYSLmT1bdouErBpOlnra+ucB/
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:58:28 2026 by rpki-client