Error: rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
File:                     ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft (raw, json)
Hash identifier:          MzvK9mUICVEv1q2+fBshvLGkrrsXTquGmNjL+dXwcSg=
Subject key identifier:   7D:43:85:91:7E:4B:92:7C:84:79:BD:22:72:1F:7E:E7:7A:BE:2C:B7
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Certificate issuer:       /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial:       0457
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
Manifest number:          0451
Signing time:             Fri 30 Oct 2026 03:50:35 +0000
Manifest this update:     Fri 30 Oct 2026 03:50:34 +0000
Manifest next update:     Sun 01 Nov 2026 03:50:34 +0000
Files and hashes:         1: ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl (hash: VzjUx/5xm1UKVsehMnBpYIWnqohETB5u2l8EXty5Cd0=)
                          2: D2D5989A012611F1AF5A24A3DAE4EC9C.roa (hash: b5e3Xr4FElcnG0n1zf+ZSNFE0ma2SCk8L9aDroGv95g=)
                          3: ACBC7B985EE711EFA0CEB651762E951A.roa (hash: Lm7KJ7SFgJLbSpFAPyUvvIcKQ0yWjLdyzLN+7Alu3nM=)
                          4: 5A355A62893511EE97A33A2E4AD9E6FC.roa (hash: kPbY6+n82PzSuYMNz5etY7+wyw41vKBIiDkHhSXp1iU=)
                          5: 5D0CA6DA8B4C11F0B2436DDDDAE4EC9C.roa (hash: Ra9ioWH8m0JON7faI4MqWl7L3OBqBQaOD8Z/MCluy1M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
        Validity
            Not Before: Oct 30 03:50:34 2026 GMT
            Not After : Nov  1 03:50:34 2026 GMT
        Subject: CN=6ae4140b-1092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:a6:90:c6:48:c7:1d:73:c6:1b:18:9c:2e:
                    06:02:1e:08:7b:62:83:c4:b6:0e:ad:5b:af:05:ac:
                    c5:d5:c4:9c:4d:b4:4b:55:fc:b2:b5:cb:d7:45:41:
                    c2:74:b1:e2:ec:aa:97:91:b3:38:cc:8e:cf:78:ae:
                    ff:d1:50:d4:45:98:aa:b5:df:73:be:dd:e9:18:bd:
                    b0:c9:00:00:14:61:1c:18:4e:92:1b:6a:0a:54:31:
                    2d:86:e8:71:da:61:c2:36:76:fe:f5:c6:72:e4:b0:
                    2d:ec:6a:b6:d9:9d:45:1d:78:76:12:30:db:50:7a:
                    9b:ed:31:e0:40:85:51:29:90:f1:51:7e:aa:b3:f4:
                    43:56:81:9f:61:6b:e0:7d:d5:74:71:71:b6:b5:ad:
                    44:81:c8:ec:06:55:89:0a:23:6d:d0:14:2a:98:11:
                    7f:3c:f0:e4:23:2a:38:54:bf:fa:a6:63:29:f2:56:
                    f8:33:4d:eb:48:e9:83:ec:b7:b3:78:ff:3a:f2:c0:
                    34:a3:fc:a1:e3:98:01:3d:86:3f:9b:13:aa:67:88:
                    90:bb:6e:2f:ba:6a:aa:6d:ee:d6:20:8d:d1:de:d8:
                    bb:9d:d6:d9:ff:8d:6f:89:b5:d0:10:9f:de:e6:cb:
                    9a:2f:dd:a1:56:29:19:ed:10:10:d9:6c:b9:1e:20:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:85:91:7E:4B:92:7C:84:79:BD:22:72:1F:7E:E7:7A:BE:2C:B7
            X509v3 Authority Key Identifier:
                keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:bf:cc:a8:2d:17:c9:8a:c5:88:67:2e:4c:61:5c:37:cf:
         b4:72:8d:3c:b2:41:25:fb:89:31:4e:d3:f9:b0:ea:51:28:e3:
         ff:07:cc:f3:b8:d1:20:92:5d:80:fc:9e:70:00:29:b1:66:8c:
         a3:ae:7a:e3:2d:4f:ec:c6:57:52:5b:a5:0b:2f:9d:38:49:30:
         52:60:10:3c:33:1c:74:e7:03:3b:1c:3f:c6:d8:b7:4c:e0:01:
         f8:ac:e7:53:a3:43:47:13:67:9c:7c:d5:2a:fe:e7:04:db:2a:
         d3:7c:20:9c:aa:34:3c:1e:85:66:58:c3:ef:03:59:9e:62:61:
         97:fd:93:b7:22:46:20:df:c7:45:69:ea:b3:38:ab:8a:43:bf:
         29:57:5b:6b:55:09:2f:b3:71:6d:77:69:04:e1:eb:21:fb:19:
         e2:b1:33:72:93:44:bc:b2:6e:82:c2:ff:9e:af:34:96:e9:20:
         11:91:da:25:3e:7f:77:87:dd:2a:13:f0:f8:95:7d:ae:5c:55:
         f1:f9:01:4e:5b:7a:11:3f:9a:26:66:e3:05:1d:d1:c1:a0:a8:
         fd:9a:0a:46:2c:24:31:eb:d9:4c:2d:6c:31:4a:27:f6:74:c3:
         7d:89:8a:c2:a0:ea:f6:dc:f1:fd:f4:61:3e:62:8f:3d:0c:57:
         24:9a:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:58:26 2026 by rpki-client