Error: rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
File:                     ZlRSFtT_yAOJ2hnLMhrgeor169w.mft (raw, json)
Hash identifier:          B4G3OclI3IJE0Swei89k0oIKo9Kf6XfeWeQ1tOZrCRw=
Subject key identifier:   A1:05:EA:B9:E6:7A:59:BE:97:54:1C:33:72:2F:93:47:4A:DC:73:BB
Authority key identifier: 66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC
Certificate issuer:       /CN=F3610D4EAF/serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
Manifest number:          1B
Signing time:             Fri 18 Sep 2026 05:51:30 +0000
Manifest this update:     Fri 18 Sep 2026 05:51:30 +0000
Manifest next update:     Sun 20 Sep 2026 05:51:30 +0000
Files and hashes:         1: ZlRSFtT_yAOJ2hnLMhrgeor169w.crl (hash: HMZO+6by3CR+gfG4CfapuhfP9SyuCy3Wl20aIBIfYjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAF, serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
        Validity
            Not Before: Sep 18 05:51:30 2026 GMT
            Not After : Sep 20 05:51:30 2026 GMT
        Subject: CN=6aacd162-de2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:f4:3b:99:f6:21:47:e3:4c:03:2a:0d:fd:
                    67:e3:7d:bd:6c:ad:07:bb:a2:d5:4c:75:a2:30:8c:
                    aa:8f:0c:50:16:1f:bb:b4:4c:81:16:a8:06:ca:4e:
                    50:f7:2f:e2:bb:71:27:be:31:44:00:25:e2:22:a6:
                    c2:54:3a:bb:af:38:47:3f:28:d7:62:3d:58:6c:67:
                    4d:75:5a:59:03:66:bd:2f:e1:00:54:9c:74:8a:db:
                    d2:cb:be:b1:ec:b4:84:7f:d6:ad:57:b4:0b:38:e7:
                    2c:30:da:97:66:9c:13:07:78:6b:07:3d:fe:70:5a:
                    08:a7:fe:91:3e:01:c1:01:23:c5:47:d6:c6:bf:4b:
                    3a:35:08:97:58:e3:af:44:68:a2:bc:c7:ad:00:ab:
                    08:96:79:be:d9:0c:57:32:9b:dd:d3:10:c2:0f:c8:
                    d3:85:62:2c:21:31:42:f9:e3:ee:f3:c5:36:e6:25:
                    71:ae:76:a9:a3:ed:16:d2:b2:38:20:48:d1:2a:59:
                    41:58:ec:d4:2b:61:03:41:c1:33:7b:af:8f:bc:22:
                    d8:25:44:85:28:10:b2:a4:c3:26:49:13:2c:d6:89:
                    b6:22:f8:95:0a:c8:56:be:33:ec:17:91:cf:4e:b1:
                    6f:e0:1c:95:0e:16:20:7a:49:b5:7d:ce:c1:db:78:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:EA:B9:E6:7A:59:BE:97:54:1C:33:72:2F:93:47:4A:DC:73:BB
            X509v3 Authority Key Identifier:
                keyid:66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:a6:cf:f2:5b:aa:d6:83:d6:e7:3d:e3:5e:f7:fc:d3:f2:
         d7:78:1f:73:9a:53:2c:d9:1d:d4:81:e4:dc:c5:b0:82:46:df:
         3a:fe:ce:75:45:d6:fd:5f:43:8d:0b:98:2f:05:b0:a7:9b:5d:
         95:84:9f:ef:99:98:92:d9:21:b6:60:3a:8c:e2:03:b4:76:82:
         11:10:6d:3d:02:9a:50:fc:39:4c:34:c4:e8:5d:7f:f8:60:d4:
         d2:4a:33:37:6d:4a:6d:cb:24:dd:ec:5e:cb:15:74:95:26:c5:
         b6:fc:81:0d:0f:5d:51:c8:66:b5:36:96:74:a9:d6:3b:c1:76:
         eb:0f:f9:2b:55:28:96:df:0d:26:d7:11:b6:0f:d9:a5:1a:03:
         e0:2e:59:12:2e:25:53:a9:00:ce:1a:26:00:39:54:97:db:51:
         59:37:dd:89:c9:31:5e:d3:e9:06:21:06:f6:b9:fc:04:e3:6c:
         9f:a6:2a:d8:b0:5f:64:f8:3d:14:24:5e:6d:91:08:48:3d:d3:
         ea:69:07:47:a3:ac:8d:ec:b5:0e:23:88:79:a6:cc:f6:0d:95:
         77:25:e7:27:fb:29:9c:06:67:04:5e:69:72:5f:cd:66:bd:66:
         e6:4f:87:23:36:cc:07:c4:46:d7:73:53:25:a9:c7:72:3e:a4:
         1c:f8:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:09:06 2026 by rpki-client