Error: rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
File:                     pRfOfXY3SrjJj08InHCnc9_ey6U.mft (raw, json)
Hash identifier:          c7wO3HcR7qHMSirqiW//TLUciPpZrzxnUiHV70K/TI4=
Subject key identifier:   A4:64:AA:5C:9A:E3:03:9A:2E:5F:8E:BA:1F:3B:FA:08:25:5B:20:AE
Authority key identifier: A5:17:CE:7D:76:37:4A:B8:C9:8F:4F:08:9C:70:A7:73:DF:DE:CB:A5
Certificate issuer:       /CN=F364B5D4AF/serialNumber=A517CE7D76374AB8C98F4F089C70A773DFDECBA5
Certificate serial:       AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
Manifest number:          AC
Signing time:             Sun 25 Oct 2026 05:36:59 +0000
Manifest this update:     Sun 25 Oct 2026 05:36:58 +0000
Manifest next update:     Tue 27 Oct 2026 05:36:58 +0000
Files and hashes:         1: pRfOfXY3SrjJj08InHCnc9_ey6U.crl (hash: 481tn+dYiXs2Qy4z1gy31lI1uwAIBNo8CSbUclPe3LI=)
                          2: AD5ABB264BA511F1B3E306DECE1D38B0.roa (hash: /y+033adLUiAQpUibK32N78UCS8A+yUlenW6S8LVos4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B5D4AF, serialNumber=A517CE7D76374AB8C98F4F089C70A773DFDECBA5
        Validity
            Not Before: Oct 25 05:36:58 2026 GMT
            Not After : Oct 27 05:36:58 2026 GMT
        Subject: CN=6add957b-9ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:58:19:0f:c5:83:0f:91:86:31:81:31:09:
                    16:89:a1:15:3a:3b:e6:39:2e:d0:b2:b2:24:36:9b:
                    7d:d7:e2:98:87:1a:c3:38:08:0e:63:72:c2:bb:03:
                    b3:df:7a:ae:da:eb:43:11:42:e4:af:40:6f:8e:68:
                    2e:06:be:17:e5:0b:d0:fa:ff:d4:b6:b8:d9:f2:db:
                    76:ca:66:4c:21:28:e8:0e:66:dc:98:3f:29:5f:12:
                    b3:a7:13:66:9a:3a:f3:ed:62:92:5a:45:41:0d:42:
                    15:14:29:d2:0d:67:10:7c:44:6c:90:2b:72:1b:e8:
                    19:f2:e7:85:26:1e:ca:ec:59:87:db:ee:9d:c8:eb:
                    63:c9:cb:d8:a0:3f:9a:f1:a0:6b:22:cc:41:5e:1a:
                    8d:28:16:33:1f:f8:29:dd:44:6b:c4:93:75:42:d3:
                    73:9b:a5:53:c7:8c:a7:b7:5d:ad:9c:23:f2:92:37:
                    51:1d:9d:e1:b6:19:1a:ac:40:fd:7c:ae:e1:d4:a1:
                    e5:2a:ba:3d:b6:c0:e3:4c:0b:8b:bb:06:ac:7a:92:
                    91:70:4d:2d:85:59:ee:ef:6b:c4:79:c3:03:40:e5:
                    d4:3e:59:77:8d:2a:b0:6b:f1:34:bd:48:5f:55:fa:
                    d2:c5:5a:36:a5:9d:e0:55:16:c5:a0:67:4a:c7:8f:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:AA:5C:9A:E3:03:9A:2E:5F:8E:BA:1F:3B:FA:08:25:5B:20:AE
            X509v3 Authority Key Identifier:
                keyid:A5:17:CE:7D:76:37:4A:B8:C9:8F:4F:08:9C:70:A7:73:DF:DE:CB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pRfOfXY3SrjJj08InHCnc9_ey6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B5D4/FBE0C39A4BA411F184A9EED9CE1D38B0/pRfOfXY3SrjJj08InHCnc9_ey6U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:74:75:8c:8f:aa:6a:89:81:01:f0:b2:ba:6a:2e:e6:cf:43:
         5d:bf:71:f2:1a:29:bf:d8:d7:18:35:13:51:d5:76:7d:ea:51:
         53:e5:23:17:b0:41:5f:d7:5a:96:15:9f:13:b8:b8:56:81:4c:
         b6:0f:90:44:c0:98:17:43:32:a1:3a:44:0c:74:ad:7a:f0:7a:
         8a:ef:e6:bd:b5:4d:26:34:d0:9b:b4:f3:96:c2:be:e3:04:fd:
         75:5f:4a:80:aa:70:8e:59:91:1e:a6:bf:eb:43:55:8a:fa:12:
         de:cf:bf:f4:7b:7e:ab:ab:ab:32:7e:5a:73:0c:5e:ce:21:26:
         fc:41:2c:c2:23:46:a9:cb:0a:f6:dc:a3:d9:03:2a:db:76:32:
         5e:73:39:48:56:57:4e:8b:7a:b1:92:a0:c2:5e:07:87:9a:ce:
         a2:44:04:e5:96:ac:0c:5c:25:ca:98:3a:b8:e8:c1:5b:67:00:
         c4:23:ed:49:12:2b:ad:ff:9e:84:93:96:72:66:1c:3b:a2:53:
         d7:32:de:62:cd:a3:81:b5:90:73:62:1f:c6:5c:8e:1d:bd:cf:
         c7:0e:d1:a9:9e:46:a4:c3:fb:06:d7:71:64:2d:bf:b7:dd:28:
         72:22:64:42:81:e7:f2:5b:a7:21:b8:49:3a:9a:2a:6d:dc:d9:
         97:51:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:14:42 2026 by rpki-client