Error: rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier:          iXxJ4NufLf26jsUFSkrDYTeea5K/OT65Pvb3OrKw1y0=
Subject key identifier:   8F:28:24:39:DE:A1:2F:B3:C2:BE:A9:08:54:46:9C:7E:FB:37:09:41
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number:          014B
Signing time:             Tue 27 Oct 2026 05:17:31 +0000
Manifest this update:     Tue 27 Oct 2026 05:17:30 +0000
Manifest next update:     Thu 29 Oct 2026 05:17:30 +0000
Files and hashes:         1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: 6/XwrLhCK4boZmokIaa4S614O6X32ZdjkPt6hEaNgiA=)
                          2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
                          3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Oct 27 05:17:30 2026 GMT
            Not After : Oct 29 05:17:30 2026 GMT
        Subject: CN=6ae033eb-b52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:22:1a:7d:3e:73:d4:6b:fa:7c:af:b7:49:
                    c0:12:6c:2b:a1:cc:ba:35:a2:35:f6:96:65:0f:4a:
                    61:4c:24:4b:51:42:0e:79:80:0e:41:7a:42:e4:dd:
                    31:b3:4a:a5:8a:76:0f:04:4b:17:15:22:e9:21:eb:
                    e4:e1:9e:07:4b:8c:39:bd:39:54:54:f6:55:45:e0:
                    18:09:f6:ee:e9:63:f7:2d:de:70:82:27:c2:c7:d7:
                    22:4f:08:cb:aa:4b:ea:2a:36:0d:50:56:1a:cc:78:
                    de:f5:90:71:0a:45:fe:ee:df:fd:79:b0:b8:9c:44:
                    9f:39:87:86:d3:ae:27:e4:25:e8:30:02:c4:eb:d7:
                    b3:de:26:56:5b:41:ac:32:b3:bb:6c:75:23:58:20:
                    b2:0e:bb:b3:88:5a:b0:a3:d9:ef:29:ba:32:76:44:
                    3a:8d:c9:ec:2d:a3:cd:e3:b8:2d:96:f8:3f:7b:b9:
                    a8:02:a4:9d:2b:40:38:d5:a4:89:9c:2d:45:a7:9e:
                    cd:e6:24:52:0c:dd:d1:8b:cc:59:3c:d0:b8:55:59:
                    77:d4:c9:a6:f1:16:ee:ab:af:e8:0b:db:fe:91:dc:
                    66:be:bd:0b:ea:d5:15:a7:16:01:47:33:99:a3:8f:
                    c4:de:ce:41:cb:7f:f9:4d:12:af:41:86:ac:19:81:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:24:39:DE:A1:2F:B3:C2:BE:A9:08:54:46:9C:7E:FB:37:09:41
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:8b:75:61:8e:7f:5b:c7:8e:4b:f4:e6:6c:c7:b1:45:35:
         bc:0c:e0:d0:c9:56:8a:93:61:e6:c8:47:0d:3c:f3:19:27:54:
         e7:04:d7:e5:b8:bb:b3:0f:a6:22:ed:35:1f:c0:3c:56:04:6a:
         59:c9:4f:34:7e:55:91:05:6f:a0:36:38:6b:c8:41:7d:b0:72:
         0a:55:20:b1:5f:91:b8:a4:bb:17:e1:d5:49:8f:38:39:d7:82:
         de:61:9c:9e:aa:81:1f:f0:d5:f1:1b:b8:16:aa:1f:20:b6:67:
         6b:09:ea:ec:35:90:19:3f:fb:bd:26:cc:f9:93:28:15:9f:05:
         63:d1:1e:a3:f7:07:1e:e9:0b:88:85:8c:8c:ed:70:a8:c1:0e:
         1f:3d:ed:2f:81:d0:9e:df:7c:28:10:6f:b8:49:0b:64:9f:93:
         a8:e0:2c:7a:33:1d:5a:06:88:f9:e6:2e:d5:58:27:98:05:38:
         71:47:57:b7:45:ef:81:74:5a:c7:ac:fe:9c:21:e6:8d:d7:85:
         b4:f1:96:35:e6:db:48:0a:f3:a9:88:bb:9f:8a:e6:b0:38:35:
         08:18:2d:1d:8e:e0:ae:a0:84:7b:8a:6f:72:68:bc:46:16:d9:
         c4:d3:fe:5e:4e:41:ad:cc:2d:d9:47:d3:73:33:44:af:cd:49:
         58:70:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:52:31 2026 by rpki-client