Error: rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
File:                     KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft (raw, json)
Hash identifier:          /v+RxRko9qaAWe3c6nwnjg93Teg8o3Y7E36RJEj0bcE=
Subject key identifier:   B3:38:94:92:37:40:F7:62:B1:9C:78:16:6B:9C:1F:EA:40:77:7E:7F
Authority key identifier: 29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Certificate issuer:       /CN=F36389A7AF/serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Certificate serial:       BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
Manifest number:          BB
Signing time:             Sat 24 Oct 2026 05:36:34 +0000
Manifest this update:     Sat 24 Oct 2026 05:36:33 +0000
Manifest next update:     Mon 26 Oct 2026 05:36:33 +0000
Files and hashes:         1: KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl (hash: uTp3S3E2YQBEh4ns1L7hO7B0JEgbFBlhjUo+keT75n8=)
                          2: 7E30C2D43F0A11F19414901BCF1D38B0.roa (hash: a3fLxBrz8eR53/R7V1Vq4Dtsvla7z1WL/GBJqhWYWag=)
                          3: CCFE35183F0A11F181E5E91BCF1D38B0.roa (hash: E47585gvu1JN7Cv2RL9H7/HF9eVQoG0TjloqbMPCF0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 05:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
        Validity
            Not Before: Oct 24 05:36:33 2026 GMT
            Not After : Oct 26 05:36:33 2026 GMT
        Subject: CN=6adc43e2-5a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:fd:1c:2c:21:ae:48:aa:71:4c:70:5f:9f:
                    92:0d:30:37:dd:fc:8e:a0:7c:04:86:97:81:7d:4f:
                    75:26:4f:af:74:55:6e:78:eb:0c:1d:58:f9:cd:af:
                    72:e3:2d:f8:06:39:92:d4:81:b1:cc:66:32:f0:23:
                    11:6e:9a:a9:f2:0a:c6:11:1a:fc:04:86:ef:90:99:
                    f2:9a:84:80:84:e4:1c:77:07:fa:01:ef:7a:7d:5b:
                    15:af:07:36:e3:68:64:bd:af:76:c0:a6:95:4a:8b:
                    ed:e6:b4:f9:28:c6:0b:b4:51:77:05:f1:c7:42:20:
                    98:d7:44:9a:1f:36:10:63:cb:e4:62:7b:19:92:fe:
                    6f:9a:4e:3d:0f:a6:5a:8c:5d:5a:95:61:b2:1d:e9:
                    8c:22:7f:8a:ac:fc:01:8a:11:4d:32:4e:c1:2a:2c:
                    4b:15:53:c6:a0:0d:01:a9:f8:5d:9f:24:c3:5a:53:
                    eb:f4:17:4f:38:0e:b5:9c:f9:1b:d5:b1:3b:3c:87:
                    04:d4:a2:83:9e:ad:79:ed:97:88:2e:ce:43:f5:b2:
                    25:e8:a0:54:c6:ca:62:b8:8f:d9:82:9b:0c:45:76:
                    8f:74:6d:fc:08:d2:27:98:ad:e3:e9:3d:b8:92:0c:
                    99:ab:83:0a:fb:23:8e:9b:fd:46:d3:13:02:86:ec:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:94:92:37:40:F7:62:B1:9C:78:16:6B:9C:1F:EA:40:77:7E:7F
            X509v3 Authority Key Identifier:
                keyid:29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:de:01:8e:9f:6e:de:9d:f4:31:31:1b:a5:5d:2e:23:ac:
         21:67:78:14:d9:78:87:43:55:7f:7f:75:2a:55:80:86:8f:cb:
         f6:f5:6d:f9:18:5c:dc:46:a7:28:1b:f0:1f:21:80:5c:05:63:
         aa:80:67:d6:3f:f5:8c:1f:8d:26:ae:5e:66:d0:a1:7c:d4:f8:
         f8:63:41:c4:ef:b3:97:83:13:5f:3a:1f:f4:4d:97:eb:7f:c1:
         f6:b0:e4:4c:2f:00:80:31:e3:53:f6:d7:1e:b4:08:5b:3d:2f:
         f4:e1:99:e8:52:e9:78:b7:9b:7e:f3:ab:30:0d:b5:77:67:0c:
         25:11:07:68:25:26:5b:bb:ea:bd:79:69:cf:af:a8:33:07:c6:
         bc:8c:d7:06:09:c1:4c:79:3d:99:ac:1a:e6:a5:d2:8b:02:50:
         ea:43:a5:cf:93:d2:bc:0f:05:48:fe:1d:57:dd:31:7d:1b:a3:
         03:92:2f:07:83:64:36:88:fb:14:4e:57:11:ba:e1:73:a7:26:
         c5:10:74:fd:cd:78:ab:37:b6:28:26:56:1d:96:b2:22:58:c4:
         cb:86:ec:77:18:9f:a3:f4:26:93:6d:b8:3a:54:0b:8d:c3:fb:
         eb:50:b5:9a:7e:5b:b6:2c:9a:18:bc:56:c0:cb:87:63:1d:d7:
         4f:fc:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:21 2026 by rpki-client