Error: rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
File:                     UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft (raw, json)
Hash identifier:          0uE36kEkiCZgMkPP2KUhxRTXedV6AyC4fQW7sTcPodQ=
Subject key identifier:   79:3B:BD:88:B0:6D:15:6E:5B:96:50:08:52:9D:A2:4E:C5:FA:1D:E1
Authority key identifier: 51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
Certificate issuer:       /CN=F363FEF1AF/serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
Certificate serial:       045C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
Manifest number:          045A
Signing time:             Tue 27 Oct 2026 03:47:47 +0000
Manifest this update:     Tue 27 Oct 2026 03:47:46 +0000
Manifest next update:     Thu 29 Oct 2026 03:47:46 +0000
Files and hashes:         1: UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl (hash: xb4PivS27cRG+mJrfN33OwJOVh18jJngmj72pCoTqMI=)
                          2: E3258EFA826911EE8B24F4234AD9E6FC.roa (hash: eWu8r9rN4KOzqqY/XWlw6jqNH/cI2P6B/LwtjtABcNs=)
                          3: FA87AD5A799D11EE927FAF824AD9E6FC.roa (hash: w3PUKAmzr0cKU0yWoHF3R0NzFnNrAi3OPe5Is4QZlH4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 03:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FEF1AF, serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
        Validity
            Not Before: Oct 27 03:47:46 2026 GMT
            Not After : Oct 29 03:47:46 2026 GMT
        Subject: CN=6ae01ee2-ae8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:e2:17:e2:30:7d:a2:4e:d9:69:4a:33:57:
                    d9:d0:da:2d:6b:df:3a:cc:29:2d:cd:2a:47:16:be:
                    d1:85:33:be:4f:c8:4d:dc:a1:35:28:37:bf:81:1d:
                    ca:f2:65:61:a8:83:b6:df:46:fc:53:89:a2:23:ed:
                    f1:7e:25:c8:63:c7:c4:7b:bc:04:c1:76:2b:7d:75:
                    e5:4a:b3:79:9a:19:4c:0f:bf:a7:bb:f8:cd:96:f1:
                    86:16:f7:e3:a7:7d:4b:c3:31:2f:a7:ba:cf:d5:fc:
                    3c:1c:81:b1:7b:58:7e:55:c0:9e:1c:73:f6:26:ff:
                    a0:ad:b4:d5:60:24:fe:a7:70:ef:98:23:03:00:b4:
                    d8:d3:3f:27:b6:40:fe:9b:41:88:bc:a3:98:08:9d:
                    a5:51:11:5b:a2:21:eb:39:44:de:6c:75:db:e5:2f:
                    56:34:2c:2c:e2:cb:60:83:bc:6c:f0:fc:b0:f7:69:
                    1f:35:3b:28:1d:18:c1:c9:b6:d9:fd:da:00:f7:71:
                    40:c2:d6:0a:96:1a:6a:13:0d:1e:03:1a:47:3a:ac:
                    2f:52:5a:61:38:bb:64:a2:f2:4b:fc:ba:49:7a:3d:
                    d9:3b:5f:67:fb:8d:ec:22:86:22:42:49:d2:b6:48:
                    14:8b:5b:2e:45:fe:8c:3c:e4:26:5a:7b:7d:a1:2c:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:BD:88:B0:6D:15:6E:5B:96:50:08:52:9D:A2:4E:C5:FA:1D:E1
            X509v3 Authority Key Identifier:
                keyid:51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:be:d4:53:e4:96:de:89:e8:3a:b4:c2:ec:ae:93:2a:1f:
         ba:b3:c2:1d:ce:de:42:1c:50:0a:cb:3a:19:e3:70:d6:3b:fa:
         90:3a:de:8a:e7:b5:60:10:2c:2f:68:7e:fa:d0:76:7e:bc:16:
         2e:60:e4:43:e7:2d:0b:90:3e:f4:a7:bb:b5:c7:38:d6:c9:57:
         22:d6:de:3a:64:28:7c:39:e1:bd:e8:a8:0d:0f:ef:67:08:9e:
         17:21:5b:a6:d3:22:ee:8f:59:4a:d9:88:4c:47:91:de:9f:0f:
         48:ba:38:11:e3:46:c0:ec:b9:f4:3c:9b:18:4e:7c:6e:dd:5d:
         87:07:ca:d1:d0:2f:38:8f:1d:24:bd:aa:46:c4:62:e0:6b:ff:
         32:2e:5c:c8:37:c0:2b:c6:c0:23:a9:32:a8:c3:22:62:bf:39:
         3d:68:f6:76:ce:a6:68:18:4c:5e:3c:86:4a:ea:07:6f:41:f0:
         11:db:34:96:09:d7:07:c2:0f:c5:ca:6b:8a:2c:25:88:fa:3a:
         4a:c3:17:f6:9e:40:94:6f:ee:69:39:ed:c0:bf:ab:0b:5d:81:
         7a:7f:e9:e2:15:26:68:a9:a8:66:2e:97:c7:5d:5a:af:12:c6:
         e8:3a:8f:59:35:d4:f8:37:7b:a1:40:0d:f8:9f:03:27:8c:61:
         db:d3:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:05 2026 by rpki-client