Error: rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
File:                     rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft (raw, json)
Hash identifier:          RfCGM3DB1bOdkXA5NjfjhlGZSCt+IeNZGZkQOOI5dcM=
Subject key identifier:   F9:76:0B:B4:AB:41:91:FC:00:F7:FB:A5:FA:99:4A:13:95:70:AC:64
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       014E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
Manifest number:          014C
Signing time:             Wed 28 Oct 2026 05:17:34 +0000
Manifest this update:     Wed 28 Oct 2026 05:17:33 +0000
Manifest next update:     Fri 30 Oct 2026 05:17:33 +0000
Files and hashes:         1: rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl (hash: EiFVBNFMpSR9MwmuLHu3PPEDogzlTgwnZQKHFT783RU=)
                          2: 39DB806ED61011F0A851DDF5DAE4EC9C.roa (hash: 693hBAqPFjyvxLxbrZO7JySj88IG1EEhuYzl+bnEQlU=)
                          3: 27867604D60F11F09BCF4AEFDAE4EC9C.roa (hash: vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Oct 28 05:17:33 2026 GMT
            Not After : Oct 30 05:17:33 2026 GMT
        Subject: CN=6ae1856e-e2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:0a:6f:93:4f:d2:43:5f:4a:9b:fa:91:db:
                    b6:11:78:8c:fb:bd:75:d5:6d:e3:0a:35:8b:93:cd:
                    cc:8f:6b:f6:c4:ae:39:46:4d:41:51:4e:cd:8e:00:
                    a3:35:17:e7:b4:fe:30:34:ec:b8:f9:07:60:db:9a:
                    f9:dc:8a:c9:b9:67:08:32:92:4b:d6:93:19:14:ae:
                    b0:49:da:3b:4d:16:25:9a:50:1f:d5:d3:e5:19:3a:
                    e2:f8:77:2d:8c:08:9b:9f:d0:47:ca:2f:49:44:36:
                    16:51:1a:2f:a2:72:d8:d6:3f:e3:09:82:53:08:25:
                    3f:4e:4e:53:38:ac:ee:d1:12:ff:72:97:80:4b:6f:
                    7d:df:eb:e5:c4:1c:ad:2d:69:c5:ef:e0:f4:e2:09:
                    8f:63:55:e4:cd:fd:0c:f0:07:54:f9:27:15:08:92:
                    dc:ef:e4:14:e1:4c:14:97:90:a9:48:b9:a1:41:ea:
                    b2:d0:91:0b:c1:c6:22:fe:4d:87:70:06:ea:62:21:
                    35:34:ed:0e:bb:97:57:01:73:a2:77:b1:62:90:39:
                    67:e1:56:f5:56:cf:97:90:61:af:f9:bd:0d:1c:8c:
                    5f:7d:a1:a9:f4:e6:57:7f:0a:64:b5:db:6e:b5:10:
                    66:89:62:4b:e0:5f:43:87:42:da:4e:92:ad:8a:16:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:0B:B4:AB:41:91:FC:00:F7:FB:A5:FA:99:4A:13:95:70:AC:64
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:e9:5e:9a:ac:ba:73:47:79:bf:e2:53:d5:b0:c0:b8:4b:
         4b:1a:52:96:aa:28:8c:01:ed:28:20:d0:3c:4f:df:e5:e4:8b:
         b8:1b:a6:c8:3f:61:ee:9e:8b:b5:02:0c:5f:12:a8:21:88:8d:
         d0:58:10:01:6f:0f:65:4a:6d:7d:a5:af:98:67:09:41:e9:92:
         c0:7c:7b:3b:1e:0e:2c:8d:f1:e2:74:87:84:1f:d7:2d:e5:9e:
         4e:15:78:26:2a:7a:78:f0:5a:89:1d:b2:ee:9b:0f:42:a3:9b:
         ae:a6:af:bd:d4:09:0c:b6:19:4f:38:da:ff:13:60:58:98:c7:
         93:d9:91:b4:22:67:7e:23:aa:19:cc:86:6f:1f:64:5d:95:39:
         ee:e6:81:1c:df:1e:d2:60:36:04:83:1a:b4:00:63:8e:a4:90:
         42:90:d5:3c:39:14:46:0d:9b:5f:3e:94:bf:71:76:38:8d:f8:
         a1:3d:d4:93:a5:27:ac:61:69:75:af:7e:d8:e3:39:db:dd:72:
         8e:0b:5a:fc:06:de:e9:5e:6d:b1:39:7b:f1:29:65:41:a8:68:
         10:c7:cc:c8:b9:81:a1:5b:c2:78:46:9a:94:db:3c:9c:e5:9e:
         ec:fb:0d:f0:81:ef:55:6e:02:13:d9:3d:39:40:b2:e5:52:5a:
         84:be:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:49 2026 by rpki-client