Error: rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
File:                     UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft (raw, json)
Hash identifier:          EDz0wFkX3FmKz+aGxR6oUILBrm0KLzrWnWPPzcx6VEk=
Subject key identifier:   7D:43:A8:46:F9:82:E6:D4:4B:6D:DF:0D:75:1B:9B:94:2B:2B:85:15
Authority key identifier: 51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
Certificate issuer:       /CN=F363FEF1AF/serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
Certificate serial:       0427
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
Manifest number:          0425
Signing time:             Fri 04 Sep 2026 03:53:18 +0000
Manifest this update:     Fri 04 Sep 2026 03:53:17 +0000
Manifest next update:     Sun 06 Sep 2026 03:53:17 +0000
Files and hashes:         1: UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl (hash: NsQUvFsnEkT64h0rWSpx4LxDUosnAxei+gmXd/RPwlo=)
                          2: E3258EFA826911EE8B24F4234AD9E6FC.roa (hash: eWu8r9rN4KOzqqY/XWlw6jqNH/cI2P6B/LwtjtABcNs=)
                          3: FA87AD5A799D11EE927FAF824AD9E6FC.roa (hash: w3PUKAmzr0cKU0yWoHF3R0NzFnNrAi3OPe5Is4QZlH4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 03:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FEF1AF, serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
        Validity
            Not Before: Sep  4 03:53:17 2026 GMT
            Not After : Sep  6 03:53:17 2026 GMT
        Subject: CN=6a9a40ae-1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:d7:96:fa:90:d6:45:6f:ee:b9:44:7b:46:
                    c9:f5:3c:7c:9f:a0:db:9a:0c:28:01:49:03:8c:0e:
                    bc:91:27:bc:ae:ac:38:e2:f0:b7:2b:74:18:79:a8:
                    ff:49:41:3a:46:bf:a0:bb:34:cb:b2:6e:23:65:af:
                    03:bc:79:3a:79:7a:37:7c:13:03:a6:b9:14:3f:15:
                    c5:66:6b:a5:57:d8:4b:38:86:1a:6a:74:0b:e1:10:
                    a9:c6:3c:2e:9e:42:5c:c9:2c:99:00:8f:4d:93:7f:
                    eb:e4:9d:06:50:f0:fe:bf:9c:49:47:d2:71:ba:53:
                    45:3e:70:44:d9:63:a2:e4:9f:d2:c8:8e:bb:b1:e2:
                    a0:be:15:61:11:ab:df:ea:aa:fa:37:40:ad:47:71:
                    f8:2f:06:1a:fb:65:93:88:20:2b:2d:28:3a:0d:ee:
                    8d:63:48:14:8c:14:a1:2c:8c:b3:f5:25:cf:00:70:
                    27:48:4e:e9:fc:55:22:63:df:d6:43:75:5b:0a:70:
                    27:e8:85:c5:03:41:c7:04:54:d2:24:1d:43:d4:ff:
                    13:7a:dd:38:8b:43:b7:47:1b:91:19:36:09:f7:f5:
                    df:7c:e3:94:8e:72:23:f0:4a:8d:5c:18:96:32:d2:
                    87:ca:69:5b:18:51:39:0a:cd:c3:ca:45:ee:46:57:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:A8:46:F9:82:E6:D4:4B:6D:DF:0D:75:1B:9B:94:2B:2B:85:15
            X509v3 Authority Key Identifier:
                keyid:51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:4e:21:22:06:54:f5:8a:00:bc:51:45:6f:ec:b9:1b:da:
         d7:97:27:31:58:59:4a:b9:02:55:20:99:4f:04:72:70:ed:f9:
         f2:fb:ba:b4:35:d3:62:42:94:02:d1:6b:38:bb:b0:51:79:43:
         91:8f:21:e8:d9:34:f3:ab:81:2b:57:df:13:50:d8:24:36:d0:
         d5:91:f2:29:97:ef:f3:3a:f3:93:ec:10:cf:ee:31:13:e1:28:
         28:26:02:4a:ca:a2:51:b2:61:c0:6e:41:f1:e4:4f:dc:d1:9a:
         13:63:fd:0a:de:e2:e8:b1:9f:3c:f6:3d:d8:b9:7f:db:73:fa:
         a6:a4:b2:ae:63:23:81:7a:70:78:18:b7:a5:13:3e:83:05:ce:
         72:79:dd:7c:45:70:df:a1:b8:f0:d6:93:16:4b:5f:2d:5c:c9:
         9e:f6:48:a1:14:dd:4c:0a:5f:62:a4:09:c9:79:17:01:e9:08:
         61:f5:e2:d9:ec:4f:5c:b0:4b:08:57:05:38:cb:9c:24:e6:e9:
         16:ed:8d:f7:f1:ee:fc:28:92:b5:52:57:dc:40:8f:55:29:4c:
         56:ec:f6:d0:8e:31:aa:a1:c4:ed:09:74:17:ee:22:7d:c4:46:
         bf:6d:1c:1a:bc:6d:87:18:3d:69:ba:95:e6:c5:13:d1:dc:1c:
         e1:e9:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:20 2026 by rpki-client