Error: rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
File:                     SBnPn32B-6etRokY9hUM1Ly83Ac.mft (raw, json)
Hash identifier:          T+3HcOsT9+Rv/pypuLLCBW3TJCH0bIE98+2I2PO+Dys=
Subject key identifier:   9B:33:0C:8F:39:CE:3B:EE:A7:60:42:D6:BD:83:A4:88:AF:9D:A6:B3
Authority key identifier: 48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07
Certificate issuer:       /CN=F366C1FCAF/serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
Certificate serial:       17
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
Manifest number:          16
Signing time:             Tue 03 Nov 2026 06:04:27 +0000
Manifest this update:     Tue 03 Nov 2026 06:04:26 +0000
Manifest next update:     Thu 05 Nov 2026 06:04:26 +0000
Files and hashes:         1: SBnPn32B-6etRokY9hUM1Ly83Ac.crl (hash: UBr80F+3ImdDgtKtm2rZWUkps4KndKmc/jNEcyTLs9A=)
                          2: E12332E6C7AE11F1A98CF6DBCE1D38B0.roa (hash: LkxUb/2kG/qcaw2E5m9e+l2TxbZ1epEA25XMv5pYoEk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 06:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C1FCAF, serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
        Validity
            Not Before: Nov  3 06:04:26 2026 GMT
            Not After : Nov  5 06:04:26 2026 GMT
        Subject: CN=6ae9796b-0934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:ad:60:6f:cb:53:65:ae:da:a5:df:29:81:
                    c9:4a:b4:c3:79:58:b7:50:85:5a:6e:ee:7e:e1:d5:
                    40:af:5c:44:4e:88:44:b5:4d:8a:f8:24:bd:99:ee:
                    81:e0:1a:ff:81:04:08:28:ac:6b:51:06:23:88:a0:
                    4a:a6:d7:65:79:81:cf:90:01:f8:90:a5:b6:99:4f:
                    9f:26:66:7d:c3:af:aa:c1:f8:51:59:0d:be:70:03:
                    da:38:76:41:83:95:c1:ee:99:94:d8:69:88:4f:78:
                    fe:6d:b5:a5:f4:96:be:20:5b:62:16:6e:22:90:9c:
                    be:ce:e6:6f:ca:2f:4b:ea:16:3f:01:c1:0d:da:68:
                    e1:3b:bb:11:2f:31:7a:58:8f:d2:5d:56:49:99:37:
                    6f:41:5c:d0:74:9e:07:73:59:2d:40:60:b1:29:8d:
                    87:a7:09:98:76:cd:21:cb:e5:cc:89:cf:cf:ec:33:
                    85:cd:46:df:6c:b3:1c:89:f0:02:f8:45:a9:9c:8e:
                    43:48:6e:e9:0e:0e:19:4a:c5:11:cc:db:3a:76:58:
                    68:6f:be:bd:6a:b1:0e:bb:8e:f7:11:c4:83:d1:c6:
                    8e:ed:10:25:8e:9a:65:b6:36:60:46:40:54:bb:a3:
                    e7:e5:36:3e:2f:37:8e:4d:41:52:c7:5a:88:f8:ae:
                    38:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:0C:8F:39:CE:3B:EE:A7:60:42:D6:BD:83:A4:88:AF:9D:A6:B3
            X509v3 Authority Key Identifier:
                keyid:48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:f9:04:19:06:cf:c6:cc:6a:44:2c:9c:dd:65:ad:e1:4d:
         5a:ee:47:e6:ea:6c:c4:9d:ea:79:a7:9e:af:9f:db:b8:1a:98:
         60:76:6c:bd:0d:26:35:2b:19:25:c6:7f:dc:4a:fd:3f:0f:2d:
         59:82:1e:40:d4:db:c6:b8:f7:df:c5:56:f5:01:69:6f:90:fa:
         37:fa:d7:8b:ac:64:85:12:9d:26:18:f7:7b:b8:02:88:34:6b:
         7a:c0:36:ff:4e:e8:2a:69:6e:ef:67:6c:b3:69:41:68:34:17:
         10:1d:e7:96:31:62:b6:87:b9:01:94:76:26:25:bd:f5:14:dd:
         df:7e:a0:c1:df:25:3e:c3:54:33:6f:5e:49:12:a7:29:09:f3:
         af:52:07:20:92:7b:2b:99:65:81:ea:04:f7:b1:a0:6f:b6:6f:
         6d:f4:b0:d0:00:74:dd:5d:ac:03:c1:ba:df:c8:5a:3f:ed:51:
         7f:81:9d:39:6f:d2:d2:fd:53:dd:89:1e:bf:8c:36:a2:8b:11:
         2c:25:42:d4:e1:bf:7f:90:cc:09:b4:95:76:97:14:33:cd:57:
         75:bb:64:ea:fc:7c:09:a7:72:d1:96:0c:3b:1b:22:df:07:54:
         ee:14:03:4f:cd:82:bb:ab:10:61:f2:c8:91:57:de:50:79:dd:
         d8:71:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:47:32 2026 by rpki-client