Error: rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
File:                     e1iV_2kARwqoGjQt5flx5dPHR3c.mft (raw, json)
Hash identifier:          vv5npQSP+6+mP05PYh/xbH27Wv0U6qWeddWlUiKn9P0=
Subject key identifier:   2F:9F:57:F8:33:45:E5:65:94:4F:FB:DF:51:F0:AA:87:12:21:08:0C
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Certificate issuer:       /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial:       04ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
Manifest number:          04E5
Signing time:             Fri 25 Sep 2026 03:27:23 +0000
Manifest this update:     Fri 25 Sep 2026 03:27:22 +0000
Manifest next update:     Sun 27 Sep 2026 03:27:22 +0000
Files and hashes:         1: e1iV_2kARwqoGjQt5flx5dPHR3c.crl (hash: gaWairinI3JV+g6uxW2mQAXcinczEMgya24Uq8kjcAw=)
                          2: DC35A5700A9C11EE858690314AD9E6FC.roa (hash: kgYyy6flMlYfObZnYV9e+HUynGelZVH2UDelqXJZlPU=)
                          3: 12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa (hash: MkJTfBrBOzSWuJsHZrjclrv6ki4SKSbL2gRo3ZL+5k0=)
                          4: B54AC7C80A9D11EE985BF2334AD9E6FC.roa (hash: 5GeL0Czu/2etXZ5gA3VSe87hGnbfOU48c/oQ6DlZFyk=)
                          5: 63A562B60A9D11EE92A6DD324AD9E6FC.roa (hash: 3b9GaVwGq6W0niXUTfZp8msqwmz7KJ9S2n6bL+Jfmo8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE536AF, serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
        Validity
            Not Before: Sep 25 03:27:22 2026 GMT
            Not After : Sep 27 03:27:22 2026 GMT
        Subject: CN=6ab5ea1b-c4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:3b:15:59:5e:8d:a9:6f:43:c6:2b:b2:62:
                    69:9d:91:45:e1:c0:5a:0a:9d:37:bf:f5:f2:37:91:
                    27:ee:4b:d2:d5:29:69:13:53:59:c2:53:3e:0f:2a:
                    f9:bf:f8:7d:25:e4:46:6b:93:04:40:72:f8:62:4d:
                    ab:76:b9:25:8a:12:f1:3b:c0:c0:91:d8:bc:e4:10:
                    44:0d:7d:2b:8b:a3:29:fa:dc:59:bf:de:aa:47:18:
                    eb:c3:3b:fe:e4:af:53:94:69:87:6f:f1:27:3a:43:
                    a4:72:cc:dd:71:1b:25:dc:f7:fd:32:66:ce:32:30:
                    72:f9:6b:8a:68:76:e7:d2:41:2e:71:98:fa:dc:9e:
                    6d:c4:40:cd:b6:f1:3e:6f:45:d1:d2:62:12:fa:4c:
                    f9:2a:f1:49:1c:e6:b1:e3:14:12:40:41:d8:17:1b:
                    fa:18:7c:0f:a0:6c:6f:23:79:31:42:0b:73:f1:01:
                    0f:8a:44:10:61:09:4d:4b:0b:e9:6e:ba:28:e3:4b:
                    cc:f9:4a:66:9d:22:85:dc:6e:1d:4e:40:94:5c:08:
                    67:3b:07:f9:e7:29:49:de:e5:a7:6b:3d:42:97:b5:
                    23:65:09:a5:1f:af:8e:86:18:8d:42:1c:fb:e3:3f:
                    6b:f0:85:d2:14:80:24:38:7a:81:72:f3:40:10:3b:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9F:57:F8:33:45:E5:65:94:4F:FB:DF:51:F0:AA:87:12:21:08:0C
            X509v3 Authority Key Identifier:
                keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6e:8d:91:bd:bc:30:42:40:15:7c:72:41:9b:f1:95:00:e1:
         4c:84:ed:12:41:42:e2:7c:a5:0f:37:9b:b3:07:03:57:70:5a:
         6e:c9:e1:0e:f5:b3:9d:8b:77:69:1f:8c:9b:44:87:ee:2d:fe:
         c3:24:96:dd:15:2e:b6:3c:90:d7:51:70:35:90:6b:8e:23:83:
         5f:29:d1:fd:7e:09:42:56:b3:17:4c:4a:f4:7e:69:6c:35:5c:
         ea:4e:1b:06:ac:19:4f:6a:68:1f:ea:fe:1e:f4:52:97:93:fb:
         ea:f4:c2:6b:54:c4:7a:3a:00:36:40:a4:0b:7f:9f:73:3c:eb:
         b4:4b:25:69:cb:b5:d5:14:bf:c5:d7:f8:4b:d0:3f:f5:01:2e:
         61:e2:ec:e5:14:11:79:6e:e2:12:10:32:15:12:d6:97:5a:06:
         4b:f0:13:5b:5c:f2:1f:9c:07:a2:25:6d:82:84:a2:d2:90:3b:
         37:23:58:97:07:c6:ba:4a:81:f7:6c:40:87:20:47:58:f0:66:
         40:9a:bd:6e:91:cf:3e:2f:02:a8:99:c0:1b:ee:f7:eb:f5:f0:
         85:70:17:cf:07:6f:a6:29:30:55:89:15:c3:8d:22:99:81:c8:
         0a:23:32:f6:d3:bb:4c:6d:27:15:28:b3:fe:f3:31:c5:09:1d:
         ba:67:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:42:13 2026 by rpki-client