Error: rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          7TbUF8J536TnUpXa4YhJ9bNmRMd0ceVZaBw1J2In6gs=
Subject key identifier:   5F:DD:01:96:76:8D:74:36:A5:D0:09:9C:AE:A5:F1:42:10:0B:32:A7
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       01A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          019D
Signing time:             Sun 25 Oct 2026 05:09:41 +0000
Manifest this update:     Sun 25 Oct 2026 05:09:40 +0000
Manifest next update:     Tue 27 Oct 2026 05:09:40 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: BBojiYvI2OPvHjVZHwx+Upk7b9drCfQWUI+IV3zxQ+E=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Oct 25 05:09:40 2026 GMT
            Not After : Oct 27 05:09:40 2026 GMT
        Subject: CN=6add8f14-f150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:d7:9b:07:41:5a:ab:14:9d:3d:d4:77:20:
                    d5:8e:2e:3e:37:87:87:f4:50:05:bf:c8:9d:39:92:
                    3b:d1:f4:24:87:3e:48:64:96:0e:ad:33:da:6c:b5:
                    31:29:64:d5:b5:03:4e:b7:53:b8:6c:4d:b1:4f:76:
                    00:fa:eb:73:0c:9c:77:30:03:6d:7e:69:fa:58:42:
                    f6:41:e6:b5:29:ed:81:41:43:9a:d0:a4:e1:f7:d7:
                    23:93:6f:9c:32:b2:48:15:9a:98:74:a6:c8:f7:73:
                    86:29:41:75:29:64:1f:48:31:8d:80:96:84:ce:51:
                    19:7c:fd:64:a2:65:c6:4f:03:c3:12:c9:e5:d7:27:
                    e5:da:d4:ff:9d:ff:4a:9e:35:9e:1f:84:a7:77:df:
                    bc:01:81:9f:87:73:52:a8:d8:bd:24:49:56:aa:dd:
                    33:25:6a:33:b3:fd:9e:f8:48:87:d9:af:e3:52:86:
                    a1:7a:af:ae:0d:48:18:d5:f0:9a:c6:f0:a6:f0:75:
                    35:3e:c9:b7:aa:51:27:ab:83:e8:27:bd:b8:7f:5b:
                    16:d9:ee:0c:c7:7f:5d:79:08:52:fd:07:64:bb:33:
                    6e:7c:1f:08:dd:e5:43:86:88:c4:82:61:b4:9a:f4:
                    a2:cc:06:31:e9:a8:c7:7d:be:fe:64:f9:34:70:29:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:01:96:76:8D:74:36:A5:D0:09:9C:AE:A5:F1:42:10:0B:32:A7
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:69:9d:c6:18:fe:7c:49:17:df:6b:40:51:37:9d:54:29:
         80:01:07:88:8d:6c:92:1f:4d:5d:32:70:88:58:09:f6:79:0e:
         bb:17:26:2b:ef:e1:5a:1c:0c:fe:52:73:08:0c:ee:ea:8a:6e:
         3f:df:1e:cd:57:9d:22:ce:71:5f:6c:18:2d:a4:b0:c5:ad:4c:
         cd:ae:d5:2f:52:93:1c:a9:d7:91:52:7c:08:ea:f0:db:62:78:
         0d:40:f7:de:90:25:0f:c5:c8:29:de:25:c1:9a:9f:9f:cb:74:
         2c:3d:ba:76:9b:b8:1b:3d:08:0e:70:d2:84:89:ae:ea:2e:07:
         3d:54:dc:6d:fc:63:57:c3:ed:32:cb:8a:13:7e:ef:4a:a1:5b:
         33:c6:6c:ad:41:9b:38:11:6d:58:31:f3:3d:06:dc:91:88:28:
         8a:ad:b5:c8:7f:a9:23:64:79:0d:e0:14:de:99:56:fa:f6:55:
         a2:10:bd:23:ed:ae:c2:4b:51:56:94:6b:b4:c5:1e:a0:2b:31:
         57:50:9d:41:fc:20:05:81:98:ac:a5:05:62:0d:01:a0:b5:1a:
         03:b7:cf:bd:f0:bf:05:09:12:d4:6c:dc:7c:21:07:e7:d4:fa:
         60:22:6f:ae:67:b4:87:30:86:15:32:bc:77:4d:33:1e:f1:d3:
         a2:a2:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:48:38 2026 by rpki-client