Error: rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
File:                     2F_mgUS9YwNoWB-XESFackVW1NQ.mft (raw, json)
Hash identifier:          v+8haIdu2WdZq6tUMObt6YDufEjA41uKarJR7H7FsOs=
Subject key identifier:   4D:ED:20:F2:FA:2F:56:CB:95:9E:68:05:BD:9E:BB:94:6C:E4:31:4E
Authority key identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4
Certificate issuer:       /CN=F36A1FBCAF/serialNumber=D85FE68144BD630368581F9711215A724556D4D4
Certificate serial:       0135
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
Manifest number:          012F
Signing time:             Mon 26 Oct 2026 05:23:43 +0000
Manifest this update:     Mon 26 Oct 2026 05:23:42 +0000
Manifest next update:     Wed 28 Oct 2026 05:23:42 +0000
Files and hashes:         1: 2F_mgUS9YwNoWB-XESFackVW1NQ.crl (hash: DKK+VumygjDzvmlL78MucxnVUj3nsi5NbPm+ACsEkwo=)
                          2: E6F5F3EEFD0A11F091407DE4DAE4EC9C.roa (hash: Ay/eaGIY/MRLvugExT0hgGdZK6KZS6LU5kgZ/HIoaMw=)
                          3: 5EE3E842FD0211F0921310B2DAE4EC9C.roa (hash: +3pu8hgu2d1LUSEPLF2AarTu3Wyji/Ubh3wBjEyoGP4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1FBCAF, serialNumber=D85FE68144BD630368581F9711215A724556D4D4
        Validity
            Not Before: Oct 26 05:23:42 2026 GMT
            Not After : Oct 28 05:23:42 2026 GMT
        Subject: CN=6adee3df-2605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:62:6b:bc:43:7d:71:d3:d1:c1:e9:d0:08:
                    f6:89:38:56:ef:1f:b3:30:21:71:d4:87:e5:b7:36:
                    e7:a6:f3:32:b0:06:70:6f:21:8d:30:fd:e1:1e:43:
                    0a:ac:d6:00:40:83:ba:73:88:4f:b5:74:8e:5f:59:
                    f7:65:b9:28:d4:fa:57:d7:94:13:2d:a5:60:4d:db:
                    c5:fa:2f:a9:18:33:14:ad:09:b6:1c:67:38:59:12:
                    b6:67:10:74:af:d7:d2:9c:e6:97:d7:15:33:9a:86:
                    0f:fb:d1:53:ee:fe:31:c4:af:bc:f3:0f:54:58:10:
                    50:7a:38:e7:25:d4:53:78:76:8d:c6:94:3b:cb:7b:
                    99:7c:08:a7:f6:32:13:c0:9a:b0:99:50:09:eb:f0:
                    51:eb:71:be:e7:77:65:b8:9a:ff:c8:ea:03:b8:bb:
                    8b:d3:9b:d4:da:38:11:c9:18:75:cd:73:d2:52:7c:
                    ff:29:d6:c8:4e:cc:60:9d:40:f2:86:f7:8b:29:0d:
                    a3:8d:c4:63:b3:b4:8c:d2:1c:bf:aa:ea:65:27:9d:
                    45:a5:e1:51:8a:09:39:d9:bf:93:8f:8f:b7:94:28:
                    71:9b:6d:c1:b1:09:ed:8d:d0:f4:f8:ab:e6:01:93:
                    8d:b1:06:d1:f2:c7:0e:da:d9:d9:39:a4:45:8c:bc:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:20:F2:FA:2F:56:CB:95:9E:68:05:BD:9E:BB:94:6C:E4:31:4E
            X509v3 Authority Key Identifier:
                keyid:D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:47:18:91:c4:e8:fd:34:c8:5a:26:14:00:60:62:05:fd:
         6e:f0:0f:fa:b8:6a:28:64:5d:ed:45:84:3b:55:32:f5:37:f2:
         41:9d:bd:96:9d:3b:8b:43:e5:33:da:63:b4:b6:04:04:5d:93:
         87:f5:dc:71:ef:cd:b2:56:4d:09:40:97:e3:9b:f8:31:e8:3c:
         0e:70:35:9e:23:a5:41:1a:64:5c:ae:d8:eb:9d:5d:92:8f:bc:
         eb:90:79:1b:7d:b1:b6:aa:bc:05:53:61:4d:29:44:0a:34:c7:
         ad:51:ac:26:1f:b2:24:72:87:9a:df:0e:de:fa:d6:fa:cd:f3:
         6b:53:22:e8:1b:42:47:8d:9f:2e:a3:65:7f:5a:9b:01:d7:96:
         9d:1f:aa:fe:14:c3:cb:9e:98:19:73:fe:6a:c0:d3:82:6b:41:
         68:a8:17:4f:29:86:49:8b:81:d1:72:d0:66:34:36:94:49:90:
         e6:d8:3e:50:54:68:d9:54:db:f8:e3:2b:9a:ec:59:b3:ae:47:
         1d:f4:58:b6:c5:4e:7a:cd:49:12:b1:55:fc:f4:e2:43:3e:11:
         8b:55:d2:c6:d7:fb:75:3b:04:63:a0:5c:78:4c:4e:0a:a0:3f:
         9f:02:df:bb:79:84:7e:0e:af:74:c1:9a:8f:23:4b:e4:b4:28:
         e4:c1:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:01:54 2026 by rpki-client