Error: rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
File:                     2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft (raw, json)
Hash identifier:          JOzzpScAJpskNMRa6T/rBf/NaW9nvuhtt+6K6tDJXHY=
Subject key identifier:   C4:74:34:39:0D:2D:F5:DA:1F:6C:21:09:C3:78:8D:03:92:1B:A2:C1
Authority key identifier: D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8
Certificate issuer:       /CN=F362B5C8AR/serialNumber=D9E55AA8BC3464BF493D866072EF30BC46861AA8
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
Manifest number:          040A
Signing time:             Tue 03 Nov 2026 03:57:53 +0000
Manifest this update:     Tue 03 Nov 2026 03:57:52 +0000
Manifest next update:     Thu 05 Nov 2026 03:57:52 +0000
Files and hashes:         1: 2eVaqLw0ZL9JPYZgcu8wvEaGGqg.crl (hash: skg00neHeKVSNJJth4i3ujkILv0cRP40t+M1Pwgzoto=)
                          2: 11104E62CEF111EE974B8EA0775412E6.roa (hash: w21QuXfiAGMWAFRhYp69TKHPA+2TQ5S4OV5lrYqZQPY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
                          rsync://rpki.afrinic.net/repository/arin/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5C8AR, serialNumber=D9E55AA8BC3464BF493D866072EF30BC46861AA8
        Validity
            Not Before: Nov  3 03:57:52 2026 GMT
            Not After : Nov  5 03:57:52 2026 GMT
        Subject: CN=6ae95bc1-e9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:8f:29:24:bf:35:31:37:94:62:b4:f2:85:
                    3c:6c:2b:b8:62:b5:08:b6:31:3c:2e:a6:2f:4d:05:
                    6f:1d:71:96:eb:22:e8:f7:79:3e:46:06:c4:32:a7:
                    f3:19:09:f2:cd:18:ef:c8:9c:46:af:aa:e6:98:6e:
                    77:3f:4b:5f:a0:da:b0:2a:eb:2b:68:ff:b2:e8:79:
                    98:83:6e:37:73:7f:50:04:f0:1c:56:97:44:cd:e9:
                    80:28:e1:36:2d:2e:d9:bf:19:7e:b2:35:e4:49:2b:
                    a0:99:e6:be:f9:d0:74:6e:0b:22:87:5d:2b:0d:5c:
                    b6:7e:2b:74:3c:1f:4e:58:0d:c4:a0:8a:5c:d7:2f:
                    91:98:f4:bc:a8:25:a8:ee:98:44:a3:24:42:7e:65:
                    b6:23:8e:51:a0:16:4c:74:d1:2e:25:d6:07:e1:13:
                    48:15:d4:36:a9:b2:83:fb:6b:98:34:a7:e3:09:3c:
                    eb:ee:02:26:bb:30:76:c6:75:5d:1c:a0:d8:df:3f:
                    35:ec:49:5f:ab:9d:69:11:aa:9c:2a:50:f8:12:7f:
                    85:60:79:dd:e9:bb:fa:34:dc:7e:b4:db:9a:34:3d:
                    fb:26:4c:73:92:0b:c3:c0:0f:28:b6:d2:a9:70:04:
                    63:6a:4c:0d:38:44:af:01:30:f5:52:cc:2f:2f:e9:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:34:39:0D:2D:F5:DA:1F:6C:21:09:C3:78:8D:03:92:1B:A2:C1
            X509v3 Authority Key Identifier:
                keyid:D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:e7:77:9d:19:35:5b:4e:91:1b:c2:ec:78:09:36:9f:a5:
         18:31:e3:ce:bc:b4:90:8b:6d:27:c7:f2:64:0c:1b:a9:e4:1e:
         21:db:72:63:c0:c0:09:be:1b:15:2c:98:9a:00:e2:6a:bd:d1:
         13:aa:f9:28:e6:06:9a:07:13:ce:0e:8c:f3:1c:c7:fa:c8:d8:
         4f:7a:dc:10:9f:55:13:01:64:2c:91:27:93:71:1e:04:2c:60:
         e0:35:58:43:00:2f:32:99:a2:e8:f4:ee:73:fe:42:02:7c:c4:
         95:2b:b6:aa:0f:86:70:2e:24:09:73:30:0e:95:25:eb:6f:e8:
         28:1c:05:59:b5:6c:c7:4e:2c:69:72:a9:5b:75:a7:04:4c:c8:
         64:5f:61:e6:c1:ea:25:33:0c:7c:a6:ff:21:c5:00:a8:c1:77:
         96:c2:06:84:30:f2:2d:29:c3:1e:ef:42:8b:1a:69:a7:39:23:
         77:14:6d:db:55:2a:d7:d0:df:3e:0e:7f:ad:4b:af:27:3a:0f:
         ed:45:3e:58:bf:89:5b:55:99:92:b7:19:65:45:a7:a5:e9:f0:
         70:ab:9f:8c:54:e3:8f:72:76:b8:6e:31:0b:a6:e1:b6:5a:42:
         39:43:c7:f9:9e:81:4a:a6:88:cb:99:40:dc:c6:0e:dc:00:86:
         52:c3:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:42:13 2026 by rpki-client