Error: rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
File:                     i-zANBYqduTT-3Ze7KfFkL_PiHU.mft (raw, json)
Hash identifier:          NpmcoYgduTbXwbLO/Y5kAzz0xsY/PIP5F3id7KoL1JI=
Subject key identifier:   FF:B7:CB:46:21:85:1F:7A:76:42:24:07:13:33:B1:8B:31:BF:CD:C2
Authority key identifier: 8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75
Certificate issuer:       /CN=F36AD6A0AF/serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
Certificate serial:       01CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
Manifest number:          01CA
Signing time:             Wed 04 Nov 2026 05:03:55 +0000
Manifest this update:     Wed 04 Nov 2026 05:03:54 +0000
Manifest next update:     Fri 06 Nov 2026 05:03:54 +0000
Files and hashes:         1: i-zANBYqduTT-3Ze7KfFkL_PiHU.crl (hash: JiIOT3eV2m6bfAvbD5l8ZWFMgFmXt8jGBLpulXasvvQ=)
                          2: 45A9EBAC776E11F0986637CDDAE4EC9C.roa (hash: 5DzDp+6CZ7DSXgCRfb2nrU32DuFDeMShxoaruyg5+fI=)
                          3: 2A440418B0E011F19CEFAAF7CE1D38B0.roa (hash: /fpYhKfar7+zP0PxTOQf1oRuU9OGmO6wuPcf7iHYbKA=)
                          4: 28EA7144776E11F0AA3B2ECDDAE4EC9C.roa (hash: z8x4zegua5aDN/K6PnuCdH+nQv873VD50NfZxOF1vT0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AD6A0AF, serialNumber=8BECC034162A76E4D3FB765EECA7C590BFCF8875
        Validity
            Not Before: Nov  4 05:03:54 2026 GMT
            Not After : Nov  6 05:03:54 2026 GMT
        Subject: CN=6aeabcbb-8a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fd:ad:60:32:33:94:f0:c9:2e:3f:49:b3:f9:
                    c9:ef:65:27:4b:ef:54:95:32:66:e5:7f:da:3b:df:
                    48:8f:1d:45:fc:74:3a:58:e6:09:5b:cb:fa:14:27:
                    cc:8f:e5:d8:3e:c2:57:85:49:69:2c:7f:e5:ed:32:
                    08:65:b8:13:f4:1c:a7:ac:ba:ac:82:30:52:f9:0f:
                    44:b4:67:ed:16:0c:d1:03:f1:c0:53:b7:85:6c:7f:
                    fd:95:28:61:ca:40:8b:29:90:06:4f:56:4a:37:34:
                    78:92:50:66:be:1e:24:8d:b5:2c:5c:7e:38:64:4f:
                    d6:8d:87:15:6b:a3:47:5c:28:e0:b6:f2:12:d5:da:
                    46:98:ec:2f:f2:7f:a8:2e:1c:d9:61:7d:99:d9:49:
                    2c:ce:89:e3:a7:96:aa:4b:6c:9c:57:cc:04:5a:a2:
                    18:75:25:18:fc:fa:a1:2e:f7:53:eb:d6:f7:03:5c:
                    86:8a:8c:0b:71:49:ee:a9:22:ec:10:cb:66:8c:19:
                    a9:f9:d0:44:cc:6d:1e:e1:4a:c6:de:dc:aa:bc:a2:
                    ad:84:5e:d4:cd:f4:dc:ac:2b:67:90:1a:ef:83:66:
                    f7:c8:8f:4b:05:84:2c:f7:b0:fa:aa:6b:ee:f1:03:
                    36:11:9c:55:03:cd:c5:dc:ae:88:4e:47:36:72:4f:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B7:CB:46:21:85:1F:7A:76:42:24:07:13:33:B1:8B:31:BF:CD:C2
            X509v3 Authority Key Identifier:
                keyid:8B:EC:C0:34:16:2A:76:E4:D3:FB:76:5E:EC:A7:C5:90:BF:CF:88:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-zANBYqduTT-3Ze7KfFkL_PiHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD6A0/9EC9ADCC776D11F0BB2F2EC9DAE4EC9C/i-zANBYqduTT-3Ze7KfFkL_PiHU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:35:c6:25:7d:b7:e1:45:d7:b6:3d:d2:70:80:25:b7:69:
         de:29:f0:fc:40:5a:29:e1:79:43:da:1e:e3:43:88:de:b9:5b:
         54:ea:c0:54:cb:a0:fe:8d:57:d1:ae:56:d8:c2:0e:fc:76:85:
         02:80:51:8e:5b:8c:98:46:bb:44:ea:b9:53:ee:e4:51:04:68:
         c6:f4:6e:a2:83:e5:73:09:f7:1d:4e:19:9c:ca:31:ad:79:73:
         50:31:47:97:4b:91:1d:69:bb:e6:00:a0:4d:98:a8:e3:9a:a0:
         67:13:1b:d3:63:85:d6:11:0a:4b:ea:e0:8d:da:e1:fc:e1:41:
         c0:72:d6:7c:c2:29:05:00:18:14:09:f2:41:b3:da:2d:1c:fc:
         46:17:a0:bf:d5:79:d6:6f:b7:3b:d2:97:76:52:d9:f9:a8:be:
         f8:28:b0:be:09:6f:b7:22:3c:fd:d0:9d:a5:64:a1:e3:53:a0:
         9d:30:54:65:e6:23:1c:ba:37:73:cb:90:89:94:02:b9:0f:18:
         78:da:d7:57:9a:67:34:ab:eb:8e:11:4f:a6:f9:b6:90:06:e4:
         fc:0c:fd:da:fa:3d:15:c4:17:45:e9:d5:16:90:b5:8c:f3:b5:
         82:e1:05:c6:44:c4:3d:97:2f:28:c7:fd:7f:b5:06:40:8c:a2:
         5c:20:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:28:26 2026 by rpki-client