Error: rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          CjLqdDNnk2GR89z8OB3YmnINA+RWU954z35zQGM5vIw=
Subject key identifier:   7F:02:7F:DA:2F:3C:64:F8:A6:36:15:F4:02:27:20:D9:F8:49:2A:54
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       04D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          04D6
Signing time:             Wed 28 Oct 2026 03:33:12 +0000
Manifest this update:     Wed 28 Oct 2026 03:33:11 +0000
Manifest next update:     Fri 30 Oct 2026 03:33:11 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: Ms8r4fFpgYjcGJrmgCtH7QTyQpIDwS+Y8kOJ0ORKsbQ=)
                          2: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (hash: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg=)
                          3: E35311B4F1A611F0B15EABEEDAE4EC9C.roa (hash: Jaa09JYLnjxVJDAu5gmEmB6jXzFVTW1h/BD6XSBqvK8=)
                          4: E1ED4904F19F11F0A30696C4DAE4EC9C.roa (hash: Rj+rpBtfQtb00WfH24VPb9zRX8B5uJNQSZxb5/pZaSw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 03:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: Oct 28 03:33:11 2026 GMT
            Not After : Oct 30 03:33:11 2026 GMT
        Subject: CN=6ae16cf8-6293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:8e:ac:7c:ee:12:76:87:58:37:a9:83:e4:
                    e8:87:6e:3c:39:2c:ee:9e:2e:ef:57:37:a3:97:ad:
                    bb:81:cc:6d:59:15:84:63:1a:1f:77:c1:34:50:fa:
                    de:47:08:ab:90:fe:29:40:9d:41:93:f1:7f:69:5b:
                    3a:86:21:b5:62:cf:0a:b4:33:15:16:54:1e:28:1b:
                    e5:6b:e3:0a:ec:f3:5a:39:6a:25:96:9a:b4:c5:fb:
                    cf:60:74:b4:af:bf:7d:00:17:4d:6f:ad:4f:e8:35:
                    83:24:1e:5a:4a:ff:2b:66:61:53:8b:ad:c6:7a:e9:
                    f0:db:a9:ed:9e:53:f7:22:89:b2:79:a9:6f:cd:a9:
                    b5:58:fc:64:a7:17:f2:7c:a7:81:b7:1c:d6:a9:0f:
                    dd:41:5a:99:e6:52:a9:bc:58:49:ab:86:e3:29:fb:
                    73:fd:fa:b3:fa:c3:70:1d:97:b5:39:aa:31:bd:5b:
                    d0:35:8a:dc:8f:d8:1d:5d:e9:ea:10:a3:0d:44:69:
                    5c:8c:6a:07:a4:58:f4:59:4a:61:7a:17:ed:ea:ba:
                    1a:5c:37:63:64:4a:7a:d1:a4:c2:c7:36:1c:e9:4d:
                    9f:64:de:3f:c4:fd:b2:79:26:d0:d4:b9:3c:1b:76:
                    cf:41:0b:5f:5b:4b:ad:f9:a9:ab:02:37:99:34:4b:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:7F:DA:2F:3C:64:F8:A6:36:15:F4:02:27:20:D9:F8:49:2A:54
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:58:cd:bc:8c:fb:c3:3b:af:b2:e3:66:ad:b8:a0:5e:5b:32:
         aa:fe:5c:e7:57:c9:34:df:48:69:c6:54:63:b4:27:62:ce:9f:
         48:d0:82:b0:da:fb:23:f5:26:c5:87:d8:0e:93:f2:78:b8:13:
         c1:35:da:3b:f8:10:06:12:a5:2c:3a:4c:4c:01:dc:96:f7:06:
         13:01:3e:39:b0:04:88:99:13:d3:55:dd:b2:ce:c9:41:76:45:
         d6:09:45:46:b3:01:f7:14:b0:fd:88:54:f9:bb:d7:a8:ba:09:
         14:0e:50:89:2b:49:36:55:85:c3:9a:d8:7d:80:81:5e:93:d8:
         ea:5f:1d:bb:73:ad:65:86:34:e0:6e:9c:64:49:ed:ac:0f:72:
         91:f1:cc:f4:01:8d:25:b5:53:97:ab:ee:c2:ca:99:85:32:04:
         29:f0:d6:7c:49:c1:38:f3:a2:c6:60:46:1c:9e:34:ec:55:e2:
         56:0b:46:cc:c4:2b:ff:fb:f0:25:f6:92:ed:f8:6d:00:10:d5:
         8b:01:b1:28:9c:8c:74:27:e8:c1:09:e2:07:1b:2b:3a:51:c1:
         1d:90:5a:2d:18:eb:f6:85:62:79:ca:0d:ac:ee:66:7a:44:e0:
         ac:a1:d2:b2:88:ee:8a:0b:5a:68:a4:9a:bd:01:9c:96:8f:d5:
         7d:39:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:54:50 2026 by rpki-client