Error: rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
File:                     EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft (raw, json)
Hash identifier:          QdYUWRWpQX7g99M+ec5VRs2JMqXUSG0LICPeNvz1CXQ=
Subject key identifier:   5E:63:AC:2F:8C:9F:FF:42:77:4F:A6:56:04:80:29:19:57:79:0B:D5
Authority key identifier: 11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F
Certificate issuer:       /CN=F362E790AF/serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
Manifest number:          5E
Signing time:             Tue 27 Oct 2026 05:45:56 +0000
Manifest this update:     Tue 27 Oct 2026 05:45:55 +0000
Manifest next update:     Thu 29 Oct 2026 05:45:55 +0000
Files and hashes:         1: EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl (hash: 4poGyz8obD8gltj8FGAPEhEaOWVIIekNeiyY3QdKPX8=)
                          2: 62EEBDC889A111F1A36CB2B1CE1D38B0.roa (hash: /m459TdRSRWfbJUxttNufqFolcq3/ed96zb6shny69E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E790AF, serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
        Validity
            Not Before: Oct 27 05:45:55 2026 GMT
            Not After : Oct 29 05:45:55 2026 GMT
        Subject: CN=6ae03a94-03a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:72:13:75:83:89:bb:46:0d:0b:a3:56:b6:
                    97:81:4d:11:2e:72:86:02:2f:18:ab:c9:22:b3:4a:
                    71:4e:81:47:74:0f:fe:7d:bd:67:4f:d3:0d:62:c9:
                    c2:b3:2c:59:34:59:8b:ec:4a:88:3b:2a:7d:01:ae:
                    d0:9d:27:40:ea:bd:4b:36:ab:00:09:5a:99:2e:6c:
                    46:e8:74:6e:dd:bc:30:7f:61:7e:c5:7d:0b:97:40:
                    9f:ad:20:74:3b:77:3a:32:36:05:f7:64:7f:e4:c0:
                    d4:d2:e9:ba:ac:5f:0f:5f:4f:e1:9a:64:ca:a4:44:
                    b7:b5:b2:04:f5:da:a8:70:90:07:be:0a:cd:34:e5:
                    06:74:98:0f:cc:9f:25:08:63:27:ff:f6:eb:ce:f7:
                    59:71:93:be:49:51:e3:a5:3f:4e:7d:91:41:6c:0d:
                    2b:5a:b4:6a:41:01:44:64:71:e9:71:b9:f7:2a:8a:
                    87:bf:76:8f:a1:a6:8e:32:13:6d:01:9e:8f:4e:8c:
                    4b:39:c8:77:72:fd:00:3c:da:db:54:05:7a:e7:34:
                    fb:1d:8d:f3:a9:8d:68:09:84:01:62:4e:65:5e:e2:
                    8a:90:f0:72:34:95:15:92:aa:7b:4c:fd:e6:6c:c3:
                    1b:9b:72:c8:87:67:a5:83:6c:d6:bb:30:a6:c0:4c:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:63:AC:2F:8C:9F:FF:42:77:4F:A6:56:04:80:29:19:57:79:0B:D5
            X509v3 Authority Key Identifier:
                keyid:11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:12:84:08:ec:b5:b9:94:bc:6a:bd:01:f1:4e:4a:68:4b:
         08:6b:95:a3:80:3d:c6:7f:23:d1:e7:27:f8:a6:fd:a3:e6:ef:
         ba:74:5f:17:65:94:fd:5d:39:ff:f5:38:df:08:6d:69:8d:48:
         ca:38:8b:34:b6:7b:d8:81:56:25:6a:d4:93:e8:40:c6:e1:99:
         82:e6:0d:87:4c:e4:ee:00:0b:7e:b0:0f:26:21:93:a2:4a:a1:
         7e:98:b6:9e:6d:33:b0:30:fc:77:17:a1:38:3d:74:cf:8b:35:
         cf:44:db:96:ed:56:96:6c:c7:70:29:fc:72:e9:6f:15:0f:b4:
         a3:36:9c:6e:c8:14:c4:00:7a:bb:c8:f2:b5:67:62:3d:3b:3d:
         fe:31:48:61:f6:af:e6:75:41:d5:b8:a3:f4:f2:14:22:36:03:
         86:36:15:d8:8e:c9:f5:b4:b1:7a:66:ca:0f:39:b2:f2:e7:cc:
         69:ff:54:bd:2c:60:b4:01:56:93:9a:b9:fc:df:d7:81:4c:5f:
         f7:01:1d:e2:10:69:bc:f4:d4:e6:ec:c4:49:79:ed:d4:37:8f:
         05:bc:cb:f1:3d:49:2e:a7:22:50:4a:44:8f:93:1e:ba:a0:70:
         da:f3:99:5d:64:3c:c1:9e:21:ed:0c:b4:77:e6:e6:ff:78:5a:
         69:ff:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:05:13 2026 by rpki-client