Error: rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
File:                     Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft (raw, json)
Hash identifier:          cSH+9u0orPM8wqHr6NbJE/eyBHD1qbDsY2GcuFDCWPk=
Subject key identifier:   49:A8:3E:5A:11:DD:50:BE:B3:6E:C9:97:E1:BD:25:3D:D6:BB:BE:88
Authority key identifier: 4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E
Certificate issuer:       /CN=F36F51F8AF/serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
Certificate serial:       0C29
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
Manifest number:          0C1E
Signing time:             Tue 03 Nov 2026 01:14:41 +0000
Manifest this update:     Tue 03 Nov 2026 01:14:41 +0000
Manifest next update:     Thu 05 Nov 2026 01:14:41 +0000
Files and hashes:         1: Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl (hash: jM6onMTPZPAVD8n4utqxTjB7itH5kBm8uHkLscLTfCw=)
                          2: 20F7E19E955B11E88F26617FF8AEA228.roa (hash: sfkjh7zAV15jSl9QHHQklWNOaiXkSZouLreAi3kdb8o=)
                          3: A41FAC428B6511F192AECEF7CE1D38B0.roa (hash: drLADxnaOEGMyqdel7G/uH1BM2flnhzBkm7jo80NuCg=)
                          4: 7E3B3DC8D0A211EE9C1C0C61775412E6.roa (hash: BmRCYuiQPjmiqgCkPMHoi7HMNfeBckz/l/PWc6bOGFU=)
                          5: 9D9A3A6C955B11E8A202E380F8AEA228.roa (hash: +I0HAW1gRUHoR+hm5FaXpkLRZEuabi7h8ckCvRV7EsI=)
                          6: 18465AD68B6511F1B80344F6CE1D38B0.roa (hash: rxp1LYHtsrztjq5zC600yur4RG+dLMJAQtCO5n3hBKY=)
                          7: CEFEEC808B6411F1936DA1F3CE1D38B0.roa (hash: XglJ0uhy4sNkIBBRSrMKRGPstU3401znCZ/NG+6Ge/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AF, serialNumber=4DEFB41D3B42CCFD73B1A04477C0E825C74D6C6E
        Validity
            Not Before: Nov  3 01:14:41 2026 GMT
            Not After : Nov  5 01:14:41 2026 GMT
        Subject: CN=6ae93581-6a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:a1:7d:6c:2a:f5:80:14:c8:9b:6b:10:df:
                    5b:18:6f:dc:cb:e9:05:72:1b:03:f0:96:2a:20:a6:
                    e9:be:ed:48:23:45:bd:78:aa:bf:fd:f3:92:4a:8e:
                    ff:40:f6:c2:6a:92:74:9b:4d:38:31:a3:b4:da:2d:
                    e8:93:ff:9c:88:c7:e1:2c:34:10:2b:05:4b:36:2a:
                    e7:37:28:e5:5b:72:db:4f:47:14:ca:60:04:bd:3a:
                    df:6c:a2:02:36:58:f1:08:52:0f:8b:37:75:94:30:
                    aa:e4:ad:ac:3b:23:e6:ff:1f:05:55:ab:24:9e:a2:
                    19:85:d1:a8:ba:5a:52:b4:b4:dc:d4:2f:a6:69:7a:
                    6c:04:d6:3a:bf:1b:01:84:dd:bf:e1:5a:7a:50:93:
                    84:01:4d:4c:bb:a0:9f:ae:f1:7d:79:9a:97:c1:2c:
                    ad:f5:50:ff:26:86:cf:b8:4a:d0:0d:c1:9a:c1:d5:
                    5e:4e:76:65:6b:61:f5:4a:93:09:10:29:77:f3:3b:
                    cb:3d:14:47:21:90:03:73:62:0a:30:ae:cf:f1:af:
                    c5:32:e8:d1:73:cc:fe:08:a6:67:74:d6:03:3a:e0:
                    50:9c:36:90:ed:2f:8f:aa:e8:1c:19:0a:08:5a:5f:
                    57:b3:92:8b:a5:7f:87:b6:1d:40:1d:51:72:ec:f1:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:3E:5A:11:DD:50:BE:B3:6E:C9:97:E1:BD:25:3D:D6:BB:BE:88
            X509v3 Authority Key Identifier:
                keyid:4D:EF:B4:1D:3B:42:CC:FD:73:B1:A0:44:77:C0:E8:25:C7:4D:6C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Te-0HTtCzP1zsaBEd8DoJcdNbG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/B4BA7E2E955A11E8B7B21D7FF8AEA228/Te-0HTtCzP1zsaBEd8DoJcdNbG4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:31:e7:23:28:fb:ff:89:c6:59:8f:ab:0f:c8:c4:b8:d4:
         f7:3d:55:8e:e6:b4:35:fb:3c:78:9e:0b:36:ff:7f:65:86:4a:
         41:be:f8:55:c1:5c:08:ed:7a:92:18:15:a9:ea:ff:6b:95:f9:
         32:00:db:21:a0:bd:a3:4e:d6:7b:d7:aa:29:7c:bd:f5:25:ea:
         9b:de:eb:91:d5:e3:86:c5:2b:9b:92:4e:cd:28:0c:c0:41:f8:
         49:f2:e0:2b:e2:66:0d:20:f0:9d:b5:53:f8:6f:4f:51:b1:7e:
         ba:78:b4:ab:ee:5a:df:e1:f1:2d:82:d6:38:15:41:4f:00:51:
         e0:82:14:78:26:63:c7:f0:90:d4:e8:a6:31:74:8a:08:18:db:
         79:da:04:0b:77:95:8a:04:e5:74:c6:a7:30:af:5f:0e:23:1d:
         17:6e:3d:d2:fb:3d:f2:2f:53:7b:13:9e:77:70:b9:7a:f1:91:
         19:0f:29:20:87:58:be:8e:7b:7c:93:e6:e7:d6:d4:25:9f:ee:
         a7:af:4d:d7:58:68:ad:8c:67:ce:1f:bb:e5:70:72:81:4e:0e:
         10:e9:28:be:eb:5d:ce:ca:cf:8b:9b:5e:7a:a1:dd:ff:9e:69:
         84:75:db:d9:50:21:c0:fd:17:b2:e8:d1:81:9e:7a:65:37:bc:
         69:11:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:25:36 2026 by rpki-client