Error: rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
File:                     GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft (raw, json)
Hash identifier:          E8ufs/LpS3z80Z13hwv+i1ZCZegEY0/JDjt4tnlSV+c=
Subject key identifier:   94:8C:2C:3A:54:F1:88:8A:E2:28:20:F4:AB:AD:C8:FF:2A:20:94:56
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Certificate issuer:       /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial:       0520
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
Manifest number:          051B
Signing time:             Sat 24 Oct 2026 03:25:47 +0000
Manifest this update:     Sat 24 Oct 2026 03:25:46 +0000
Manifest next update:     Mon 26 Oct 2026 03:25:46 +0000
Files and hashes:         1: GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl (hash: x0Z8WJoUVLbLU+quelh0R6iaBRGLTatUBdXH5PlxHxU=)
                          2: 9F80812EDB0911EFB46D89BD762E951A.roa (hash: FoaOMoMM4KGYFeAi/UEScoLQ2zP+N4lDb6DDMV/MjGk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36750E0AF, serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
        Validity
            Not Before: Oct 24 03:25:46 2026 GMT
            Not After : Oct 26 03:25:46 2026 GMT
        Subject: CN=6adc253b-b6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:3b:86:51:a2:6c:1f:19:76:ad:a5:04:1e:
                    57:c2:d0:0f:5d:ce:e6:8a:e6:b9:e0:0a:b6:40:5f:
                    59:e3:9f:f2:21:b6:ab:6b:81:bc:af:3f:2c:75:ce:
                    fc:6d:bf:b0:18:30:71:c6:42:10:fc:a4:90:30:5b:
                    bf:dd:a7:9a:cc:e3:a9:47:15:2a:c4:bd:cc:bc:c2:
                    3a:d8:36:aa:7b:41:f3:33:f6:35:51:e2:10:0e:df:
                    1c:d9:d1:6d:61:03:12:54:5f:70:fa:3d:be:93:5b:
                    67:8a:1d:c0:70:9f:f9:21:00:8f:88:5c:3e:72:8f:
                    21:9b:9f:5e:bc:11:8f:c4:ff:97:98:5c:b2:2a:e3:
                    8e:47:43:9c:f4:fe:17:58:e5:e7:ae:77:cd:ed:d0:
                    fd:f2:67:7f:a2:29:4e:db:24:55:50:92:e1:32:d3:
                    da:18:89:14:c4:25:f7:a9:d6:93:59:0c:e2:e1:a8:
                    e0:de:3d:b4:f8:c6:19:ad:63:8a:66:84:ec:c6:bb:
                    9f:0a:a9:63:27:0e:0b:37:ff:1c:aa:9a:36:e2:f4:
                    74:1d:bb:b1:d9:61:b2:1a:f9:66:6e:b6:3e:a4:e6:
                    ab:57:f4:32:f0:93:a3:65:f7:a9:35:0c:09:1d:02:
                    21:24:63:88:c8:b2:3e:24:e1:86:af:bf:52:ab:01:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8C:2C:3A:54:F1:88:8A:E2:28:20:F4:AB:AD:C8:FF:2A:20:94:56
            X509v3 Authority Key Identifier:
                keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:48:32:ab:76:7f:e2:54:c4:de:b3:51:54:c5:57:18:30:01:
         50:22:d2:6f:ee:26:84:e6:96:bd:e2:1c:6a:cd:8c:ae:63:f7:
         1e:81:0e:c2:7f:29:34:dd:3d:16:9b:5d:d6:1e:a8:21:3c:d0:
         f0:2a:00:5b:24:58:af:a0:20:c4:16:5d:ad:03:21:39:5a:6b:
         6d:82:8b:e8:d9:f9:a5:dc:9b:7b:27:0d:cc:d3:0d:73:58:1b:
         c4:d5:3c:6e:c6:69:47:a4:94:6c:92:31:22:3b:35:4c:78:8a:
         a9:7d:6e:58:95:56:85:1d:ee:b4:18:0a:1e:a8:ba:b9:d4:12:
         f0:d8:89:38:ab:98:7d:8b:07:33:53:b1:26:c4:2d:7f:50:6b:
         89:7a:b5:5a:17:62:e6:2f:f5:c8:c4:a5:97:86:25:d9:24:45:
         00:d6:b2:3b:35:5f:ab:91:26:bf:aa:59:3d:c8:34:f9:21:cd:
         39:54:e4:2a:9c:9b:31:48:3d:d7:8b:c8:7c:d3:42:7f:78:5e:
         c2:80:b4:1d:4d:fd:e3:5a:2b:17:dd:78:bb:9f:94:7f:a0:ef:
         34:25:c9:ec:93:8b:01:05:a0:4f:5a:4e:b3:cd:8b:ab:00:d8:
         a3:64:84:e4:38:02:99:33:88:ec:cd:bb:0b:77:1f:a2:c1:88:
         36:ca:9a:49
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzUwRTBBRjExMC8GA1UEBRMoMUFDMjcxMURFNTYwNTFFMENENjcwMTA0MUQxRDgy
MDQ3MTBCRERGNTAeFw0yNjEwMjQwMzI1NDZaFw0yNjEwMjYwMzI1NDZaMBgxFjAU
BgNVBAMTDTZhZGMyNTNiLWI2YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4GzuGUaJsHxl2raUEHlfC0A9dzuaK5rngCrZAX1njn/IhtqtrgbyvPyx1
zvxtv7AYMHHGQhD8pJAwW7/dp5rM46lHFSrEvcy8wjrYNqp7QfMz9jVR4hAO3xzZ
0W1hAxJUX3D6Pb6TW2eKHcBwn/khAI+IXD5yjyGbn168EY/E/5eYXLIq445HQ5z0
/hdY5eeud83t0P3yZ3+iKU7bJFVQkuEy09oYiRTEJfep1pNZDOLhqODePbT4xhmt
Y4pmhOzGu58KqWMnDgs3/xyqmjbi9HQdu7HZYbIa+WZutj6k5qtX9DLwk6Nl96k1
DAkdAiEkY4jIsj4k4Yavv1KrARSJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlIws
OlTxiIriKCD0q63I/yoglFYwHwYDVR0jBBgwFoAUGsJxHeVgUeDNZwEEHR2CBHEL
3fUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc1MEUwL0YxQTBCRjM0RUJENTExRURBNEJBQTcyQTRBRDlFNkZDL0dzSnhI
ZVZnVWVETlp3RUVIUjJDQkhFTDNmVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dzSnhIZVZnVWVETlp3RUVIUjJDQkhFTDNmVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzUwRTAvRjFBMEJGMzRFQkQ1MTFFREE0QkFBNzJBNEFE
OUU2RkMvR3NKeEhlVmdVZUROWndFRUhSMkNCSEVMM2ZVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUSDKrdn/iVMTes1FUxVcYMAFQItJv
7iaE5pa94hxqzYyuY/cegQ7Cfyk03T0Wm13WHqghPNDwKgBbJFivoCDEFl2tAyE5
Wmttgovo2fml3Jt7Jw3M0w1zWBvE1TxuxmlHpJRskjEiOzVMeIqpfW5YlVaFHe60
GAoeqLq51BLw2Ik4q5h9iwczU7EmxC1/UGuJerVaF2LmL/XIxKWXhiXZJEUA1rI7
NV+rkSa/qlk9yDT5Ic05VOQqnJsxSD3Xi8h800J/eF7CgLQdTf3jWisX3Xi7n5R/
oO80Jcnsk4sBBaBPWk6zzYurANijZITkOAKZM4jszbsLdx+iwYg2yppJ
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:20:30 2026 by rpki-client