Error: rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
File:                     _7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft (raw, json)
Hash identifier:          f4xlMt5WZnK1LIaFKCANuiQgBGHhvNh7D8TzxCp8Va8=
Subject key identifier:   3A:4B:D6:62:9B:F2:22:BB:E6:18:9D:DB:9A:07:95:C6:94:D5:45:EC
Authority key identifier: FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8
Certificate issuer:       /CN=F365FBDAAF/serialNumber=FFB9222E44BBB3E624D9BF885506DC5E993D11D8
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
Manifest number:          14
Signing time:             Fri 23 Oct 2026 06:02:25 +0000
Manifest this update:     Fri 23 Oct 2026 06:02:24 +0000
Manifest next update:     Sun 25 Oct 2026 06:02:24 +0000
Files and hashes:         1: _7kiLkS7s-Yk2b-IVQbcXpk9Edg.crl (hash: +uqak44GPEd7WiCDJ/OrobpTns+yifDh6Vn2XJ6ghLU=)
                          2: 5259FFB4C0CD11F18916D2D9CE1D38B0.roa (hash: 5GXyiPx8Eam5hEPYM2dPvwpkSccBg70ZkqFPOFrpJsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 06:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FBDAAF, serialNumber=FFB9222E44BBB3E624D9BF885506DC5E993D11D8
        Validity
            Not Before: Oct 23 06:02:24 2026 GMT
            Not After : Oct 25 06:02:24 2026 GMT
        Subject: CN=6adaf871-1328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:8a:e8:50:46:8d:73:69:af:1d:a2:74:0d:
                    4e:f7:d1:a6:38:10:54:b8:f6:e8:50:85:1d:44:cd:
                    f6:9e:cf:83:e4:3c:f9:94:5d:d6:0f:b5:99:76:5e:
                    4d:92:fb:90:2f:9a:54:49:e0:dc:4d:87:0d:d2:0f:
                    d4:f5:40:31:16:45:5f:2e:e5:d5:4d:4b:eb:33:ef:
                    eb:b4:d9:ad:f2:68:a1:47:39:38:40:6c:d5:d7:07:
                    f5:4a:66:72:3c:5e:7f:11:74:7a:ee:f8:c3:07:ff:
                    0f:01:84:6c:c4:a8:2e:37:ff:1c:29:4d:67:b2:78:
                    5f:ca:f8:fb:0a:44:14:2b:3b:c7:0f:fb:83:5e:b6:
                    d4:fc:65:fe:1c:09:41:56:7e:20:d5:34:17:65:04:
                    19:d5:ea:16:fd:62:2e:60:f3:6e:5b:66:45:73:29:
                    98:ec:3e:6c:da:ab:c6:9e:c0:11:51:e2:e5:cd:cd:
                    b6:7b:1b:fb:88:a4:25:d0:bd:a3:eb:2c:e4:f0:74:
                    32:ce:03:73:17:e2:3e:aa:8b:65:bc:60:9e:75:e4:
                    43:7c:5d:b3:c3:52:9f:c2:62:d1:3e:f8:05:e4:00:
                    b3:b8:31:bf:f8:12:7f:f2:07:8e:2d:37:68:f2:d9:
                    62:f9:82:4f:c6:fa:bb:fd:ac:46:e0:8f:69:ed:1e:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:D6:62:9B:F2:22:BB:E6:18:9D:DB:9A:07:95:C6:94:D5:45:EC
            X509v3 Authority Key Identifier:
                keyid:FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:2c:4e:81:e3:90:6c:16:98:23:4a:7e:b7:f7:2a:ad:42:
         42:98:ce:af:01:e8:46:7e:3c:26:64:af:5a:d0:53:25:d9:28:
         7f:72:e0:24:23:b5:90:3b:1c:a7:f9:6f:31:00:10:46:6b:73:
         61:4d:ee:6a:a9:63:01:eb:23:ee:c8:a8:fb:15:3e:1e:06:3f:
         54:54:16:b4:ad:fd:3c:23:0c:14:42:c6:ff:73:16:89:4e:2a:
         d7:1f:02:18:ef:33:00:6b:13:6d:43:38:f3:0f:05:bd:a6:ab:
         4a:d1:3d:5b:a2:bd:b4:19:29:86:7f:db:d8:07:29:45:42:ce:
         06:b5:63:8f:ae:de:bf:06:33:76:df:3c:79:c0:1b:8d:42:6e:
         ba:27:4c:ce:15:27:1f:cf:9b:d4:ac:98:6f:b5:39:90:22:a3:
         91:d5:d1:c4:09:4d:9b:14:81:2a:e3:ee:f1:ed:70:0d:64:20:
         6a:91:75:c1:ef:03:0c:fc:ee:50:cd:37:0b:0a:57:9f:60:a4:
         6a:9e:60:e8:5d:36:f7:eb:5c:7a:4e:e4:cc:2b:f9:1c:6a:d1:
         cc:91:18:47:06:e4:b7:b9:e8:16:08:e8:75:5b:a2:8c:f1:a5:
         c9:f4:53:ab:c9:05:95:b0:6e:01:90:05:c3:b6:46:75:60:b2:
         9b:23:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:53:49 2026 by rpki-client