Error: rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
File:                     HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft (raw, json)
Hash identifier:          sSO6R4d+Y5aO051oDLlnGgS4gvl9GLmNNXA1/2LKDCA=
Subject key identifier:   18:EA:79:3F:13:AA:B0:CA:63:D8:4B:29:A9:51:C9:C9:32:43:39:1A
Authority key identifier: 1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96
Certificate issuer:       /CN=F369B2BBAF/serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
Certificate serial:       015A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
Manifest number:          0159
Signing time:             Sun 25 Oct 2026 05:16:16 +0000
Manifest this update:     Sun 25 Oct 2026 05:16:15 +0000
Manifest next update:     Tue 27 Oct 2026 05:16:15 +0000
Files and hashes:         1: HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl (hash: B2mM9P+ZFuhv2NOCRQAW7f7TfJ7gYJ+ufW7t6H1FQOs=)
                          2: 96867EB2DF1C11F094CF00C3DAE4EC9C.roa (hash: 2iRal7m8J1Na7NGEbMCXUA7KVyYMn6zcBErYIoEeTqw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B2BBAF, serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
        Validity
            Not Before: Oct 25 05:16:15 2026 GMT
            Not After : Oct 27 05:16:15 2026 GMT
        Subject: CN=6add90a0-66cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:c8:87:54:33:6a:b6:89:4e:6c:aa:17:6c:
                    d1:94:59:02:21:00:e3:97:af:49:27:6a:7b:fa:c2:
                    a1:88:7a:2b:16:46:13:61:e1:b3:86:6d:e5:6d:09:
                    58:d5:bb:c4:eb:59:29:16:88:2f:12:b2:22:28:90:
                    bd:48:74:49:d8:f8:65:7d:e9:c9:48:2b:28:37:33:
                    76:6d:ba:30:b6:49:e3:07:0f:c2:28:96:4a:4f:a6:
                    33:76:1d:50:d8:56:3a:17:f5:bf:fc:2d:8b:30:22:
                    7f:54:5f:96:0a:d2:45:d4:04:ed:67:27:9b:d5:14:
                    f9:59:64:f7:ba:b2:a0:b1:a0:55:f3:cf:f6:8e:f6:
                    33:36:6d:a2:08:4f:00:55:bf:37:b3:8e:b6:5a:d8:
                    b4:68:f2:9c:e8:7e:b0:1e:31:39:7d:73:1d:44:0b:
                    b9:0d:7b:c8:f8:e3:ba:00:7d:b2:1b:30:ca:a2:ee:
                    0e:8a:d8:70:af:d5:b3:40:56:97:42:95:62:64:82:
                    28:d9:2d:46:fc:56:9d:0b:31:77:cc:73:37:7b:a5:
                    e7:e9:98:37:a4:90:e4:5c:d2:89:b5:1b:ee:a5:51:
                    c6:0e:80:c9:f3:7a:a9:3a:3a:ee:7c:a5:cb:7b:f8:
                    84:57:bb:ec:e9:40:9f:d9:0b:5a:55:c9:c8:17:b5:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:79:3F:13:AA:B0:CA:63:D8:4B:29:A9:51:C9:C9:32:43:39:1A
            X509v3 Authority Key Identifier:
                keyid:1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:98:9e:85:35:6c:e7:1d:34:19:94:35:56:9f:67:bf:c3:
         11:3d:85:4c:0f:cb:04:e9:4c:42:1d:d4:68:69:d4:2e:30:90:
         3a:e1:7b:7f:65:fe:c3:57:c9:1b:2c:53:a0:84:ab:85:42:52:
         fd:66:51:6e:bb:d9:11:4e:29:f9:c3:08:b8:18:e4:0d:47:7a:
         ac:4e:b2:88:1d:72:17:7a:20:2d:1e:32:98:ee:ed:8a:cd:cd:
         e9:a3:9e:ab:50:be:e1:05:60:2a:b9:44:bb:a4:ff:df:2e:76:
         fc:e4:a4:98:33:48:1b:d3:17:4b:e6:04:c5:1b:9c:93:81:35:
         a8:30:2e:f8:ab:58:ea:8e:f2:d3:3f:1b:86:52:f9:4d:42:35:
         c8:c5:44:0f:3c:b2:c6:f7:db:26:9c:fd:81:e8:86:c0:2b:2e:
         95:64:61:58:0d:5e:dc:4a:78:05:75:cf:85:45:a9:ef:2b:5d:
         f9:52:e6:c3:63:7f:dc:a6:e9:e2:d9:87:f2:ee:fe:ff:cc:6a:
         77:36:32:dd:10:13:df:d6:05:17:c9:d3:ec:a9:f1:76:c3:35:
         da:c7:d0:ba:84:f4:fb:42:bb:f0:8b:bf:41:53:7b:3c:70:a6:
         69:72:60:67:08:38:d1:4a:06:fc:33:2c:18:64:47:fc:6e:2b:
         16:53:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:42:09 2026 by rpki-client