Error: rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
File:                     WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft (raw, json)
Hash identifier:          Pl4joNVLwUT50zOOEIbIJVVmMnrAYIWqOi+9Vaty3SU=
Subject key identifier:   19:55:6C:AB:62:0F:1E:FD:1A:5D:51:4F:45:F8:38:55:68:BC:BB:45
Authority key identifier: 5A:B4:A9:FE:58:32:F6:C2:4C:04:2A:37:12:67:F6:60:C2:95:57:65
Certificate issuer:       /CN=F365F086AR/serialNumber=5AB4A9FE5832F6C24C042A371267F660C2955765
Certificate serial:       046C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
Manifest number:          046A
Signing time:             Sun 25 Oct 2026 03:46:29 +0000
Manifest this update:     Sun 25 Oct 2026 03:46:28 +0000
Manifest next update:     Tue 27 Oct 2026 03:46:28 +0000
Files and hashes:         1: WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl (hash: riXqAZeOzt/bwOb9NjvYp59xMVP00a7Ouf6uKbejMSU=)
                          2: CA22557A6CC311EEADC6BA794AD9E6FC.roa (hash: oggy/nm73zs7H5jaTFugBIIpgLOqgVoTTLdGZpNH8nI=)
                          3: CE307EFE6CC211EE939580764AD9E6FC.roa (hash: 91FMWaym5o112Upsz2ppnXK0BcnsGf6XXkO595t9JSk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
                          rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F086AR, serialNumber=5AB4A9FE5832F6C24C042A371267F660C2955765
        Validity
            Not Before: Oct 25 03:46:28 2026 GMT
            Not After : Oct 27 03:46:28 2026 GMT
        Subject: CN=6add7b95-487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:29:17:fd:2c:31:d6:ff:40:9b:15:30:65:
                    23:6a:e0:97:d5:c4:d3:28:e7:1f:7d:d0:02:9c:00:
                    d2:1e:87:c4:3d:27:b2:ad:7f:f6:09:17:56:d8:99:
                    1a:65:6d:6c:49:9c:55:e5:27:a4:aa:f9:34:fd:98:
                    9c:5e:6d:3d:2e:54:d2:2b:56:dd:2a:47:f2:42:cd:
                    0b:73:ad:46:8d:54:f6:ff:9b:f0:7b:ef:dc:9d:0b:
                    79:0f:0c:fd:c1:b5:fc:a4:37:0c:ac:a3:d6:4e:d3:
                    7a:dd:aa:a6:fb:82:db:8a:1a:fe:89:17:6f:de:b1:
                    8d:89:55:03:85:9d:af:90:7a:98:f7:64:cb:df:b0:
                    80:fe:1a:38:79:56:64:7e:e3:af:33:a8:f0:55:a5:
                    8b:10:2f:ab:de:de:e3:88:02:87:05:ab:34:86:4c:
                    34:09:3c:7d:03:a4:73:35:0e:26:94:6e:2e:80:99:
                    95:51:31:58:ce:53:fd:e2:58:5c:78:96:69:35:5e:
                    4d:4e:c4:98:96:68:d4:00:07:c4:c5:e2:cd:1f:2f:
                    7b:ba:f4:74:05:bf:cf:e0:19:7e:2c:a9:53:39:e4:
                    66:bf:38:30:53:72:56:dd:6f:33:58:ec:87:45:7a:
                    39:a8:c6:df:a3:8e:87:9a:9d:e9:d9:05:4b:f0:4d:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:6C:AB:62:0F:1E:FD:1A:5D:51:4F:45:F8:38:55:68:BC:BB:45
            X509v3 Authority Key Identifier:
                keyid:5A:B4:A9:FE:58:32:F6:C2:4C:04:2A:37:12:67:F6:60:C2:95:57:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WrSp_lgy9sJMBCo3Emf2YMKVV2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F086/F2116F0A6CBC11EEBCEE3C644AD9E6FC/WrSp_lgy9sJMBCo3Emf2YMKVV2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:b5:14:a5:ea:ab:4e:2a:11:e3:8a:c0:b7:21:07:d5:23:
         85:1b:f3:e2:23:c4:bf:b4:c7:9d:3f:02:d4:bc:cb:0d:53:b0:
         3a:4a:8c:ba:c5:82:14:a9:a6:53:6b:a2:26:85:0d:c6:5f:a9:
         94:46:16:e3:ae:df:09:1a:d8:6e:ce:25:ff:f9:82:6f:9e:7b:
         ad:b5:3e:aa:42:53:e0:83:c2:21:10:0b:33:52:71:97:b3:fb:
         dd:81:13:2f:59:b2:db:02:bb:4a:50:8c:99:32:49:80:88:50:
         35:a5:30:4b:37:8f:86:6f:d9:07:76:51:2b:1b:8d:2c:d1:0e:
         f9:a2:a8:26:fc:cf:b9:d0:01:57:a5:3a:0d:d7:a8:1c:06:6d:
         fe:eb:e8:ec:f9:f2:0a:2f:be:0a:e8:f9:f4:ed:6d:f8:fe:3b:
         75:91:dc:af:b7:66:49:c4:f0:bb:79:21:8b:d6:3c:85:0e:a0:
         6a:4c:38:51:49:53:f8:97:a5:84:9e:59:12:3c:d5:67:f3:e5:
         29:49:52:38:57:21:ee:9c:04:c3:9d:c2:da:1e:40:40:23:13:
         67:e0:2d:89:cb:5e:41:21:42:43:0a:e5:e7:93:00:f7:bb:c7:
         08:ba:c2:7e:ac:ed:f5:e2:4e:0d:26:4e:fb:5c:c6:fc:2b:59:
         55:80:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:53:50 2026 by rpki-client