Error: rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File:                     wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier:          onewqiWvpwErmFZje3t8ZtSamij/V5ZsZkPA5I8Scj8=
Subject key identifier:   05:FA:98:DC:F1:CB:86:32:0B:CE:83:65:C5:0B:95:5C:72:AC:2B:14
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       0157
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number:          014A
Signing time:             Thu 10 Sep 2026 05:12:12 +0000
Manifest this update:     Thu 10 Sep 2026 05:12:11 +0000
Manifest next update:     Sat 12 Sep 2026 05:12:11 +0000
Files and hashes:         1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: ZTRNgEFqELOqD2cuFREiy9fksNAqAZEvycxLJTFCrlI=)
                          2: 1CB58EB0E64811F0B101CE82DAE4EC9C.roa (hash: GmVFU5Fj3JlQpS5TQySgt0n+nxZd6U1yLmPCADpRfXI=)
                          3: 41D32A18E64811F0ACFAB484DAE4EC9C.roa (hash: 5V7TJLQLLojrh3rp4usM3FHkPrvqeC97To9U71gTLO4=)
                          4: C80E96CCE64711F0B1A25782DAE4EC9C.roa (hash: Xp3ShwYXtvWjA34x0AJ/ol0TX61I2QAtRd3rhcxGiEY=)
                          5: 5C3C5D08E64711F0B893737EDAE4EC9C.roa (hash: nyLTo0rixLCs/a1IenOrfxepHmexkFvnayqGIGvxXKM=)
                          6: 66763C34E64811F09B639186DAE4EC9C.roa (hash: i+w6opL2Ipyqtzv1lD31vRg6ZPrTeRTbmSF8OnbTJXo=)
                          7: 840DD0AAE64711F084488A80DAE4EC9C.roa (hash: LEJhspwfo4P35G4GsyqKcA7wSNxsuLJZrV6m0oln0v0=)
                          8: 85C8DB5AE64811F0B8289886DAE4EC9C.roa (hash: Vnz8rTgtBR9ak9loA7xtyo4H19LHXg7iUEMpR1fptZY=)
                          9: EECB2F1EE64711F09EF7A882DAE4EC9C.roa (hash: 6+EHSpYkLMZkNikFTUcxHrLnTv0tuncTsjXIBMarg3U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Sep 10 05:12:11 2026 GMT
            Not After : Sep 12 05:12:11 2026 GMT
        Subject: CN=6aa23c2c-230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:1c:41:0d:b7:2a:5e:61:82:b5:ed:eb:96:
                    a7:06:95:39:fd:74:3b:24:2f:7b:57:23:92:2c:81:
                    76:0c:6b:5c:d8:88:37:56:4f:34:0b:d6:51:2b:85:
                    e1:99:93:b7:a0:6b:9c:50:89:d2:29:f6:04:a4:7f:
                    ca:01:c7:34:2d:11:f2:57:ad:7b:c2:bd:06:9e:4a:
                    8b:76:e8:c9:87:ca:be:b1:04:33:37:e4:83:fc:89:
                    c1:37:d2:1d:e7:b7:be:f2:c7:66:b0:ca:69:85:4a:
                    d2:7c:c0:00:31:d4:21:e5:8f:35:cd:14:20:df:89:
                    4e:20:1c:ef:eb:ac:4c:ab:d3:a2:99:3e:21:11:57:
                    c7:71:b6:6a:c5:19:5c:11:f2:6e:92:6a:3e:a6:6c:
                    93:a8:c5:89:12:e8:cf:08:a1:ea:11:d8:f0:02:6e:
                    c0:be:f3:d9:9f:04:a5:25:f3:a7:73:4f:80:89:e6:
                    60:b0:b2:8a:9c:45:bc:8f:c0:4c:db:a0:f8:94:e7:
                    6c:4b:9a:fe:a7:9c:79:0c:b5:d7:87:f6:23:d1:b9:
                    7a:e9:f8:a4:70:83:8e:2c:8f:16:79:31:eb:e5:26:
                    a6:41:53:6c:51:e9:14:71:b5:b9:bf:5e:38:c3:9b:
                    10:26:b8:d1:a8:eb:d9:2f:38:97:d8:7e:da:f3:7f:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FA:98:DC:F1:CB:86:32:0B:CE:83:65:C5:0B:95:5C:72:AC:2B:14
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:32:d3:19:9d:2d:40:ce:9d:ab:c5:7a:2e:c4:df:92:95:
         c2:3a:b7:91:cd:61:fe:d4:d8:19:77:5e:90:d3:71:66:1d:6a:
         cc:86:75:b6:a4:1b:ae:d1:81:e2:9b:98:f2:58:99:16:32:71:
         d3:af:dc:12:ef:75:87:6c:20:da:c5:ce:2b:21:73:b0:40:b4:
         82:9e:ae:04:7c:92:e1:7a:ee:c0:0f:54:0c:e4:fc:68:63:e8:
         c8:cc:3a:b5:32:00:a7:a1:7e:54:fb:9f:16:aa:ea:41:9d:bc:
         c1:54:82:c1:83:f2:07:d2:0d:5a:55:2f:e4:1c:7b:f1:e5:3d:
         64:80:68:86:bd:3a:33:7f:61:30:d1:af:0c:9f:b7:bf:e8:f8:
         f7:f3:2c:1d:4b:73:c6:ff:51:c8:8b:8c:25:aa:e1:19:f0:37:
         94:72:ef:72:13:85:ec:5d:03:f3:a5:ed:a7:ed:42:31:5c:74:
         78:8b:0e:65:62:77:84:9e:06:6a:31:b1:39:b6:c5:c9:59:00:
         cf:a9:16:6c:0e:0d:9b:fa:3f:92:1c:f7:1d:97:a5:0f:f2:c7:
         20:ad:88:da:1a:8a:ff:c8:58:b0:19:0e:b3:eb:02:b4:dc:19:
         2d:84:73:67:0c:5f:23:ab:3a:e5:0a:9e:73:7a:46:5c:4d:db:
         f3:fa:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:29 2026 by rpki-client