Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File:                     wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier:          5aN35zfxCeouNdKOb90z0t8UzIliW1xKfLf3Pa8s8VA=
Subject key identifier:   10:78:E9:41:0B:DB:89:2C:52:AE:B5:38:A0:60:7F:0C:E8:1A:0E:C1
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer:       /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial:       0152
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number:          014E
Signing time:             Tue 27 Oct 2026 05:16:43 +0000
Manifest this update:     Tue 27 Oct 2026 05:16:42 +0000
Manifest next update:     Thu 29 Oct 2026 05:16:42 +0000
Files and hashes:         1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: 0lOKSFr1xcfeCTw9fkQy2qu+3lC5YmiNnzeoG2FF254=)
                          2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
                          3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
                          4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
                          5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                          rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
        Validity
            Not Before: Oct 27 05:16:42 2026 GMT
            Not After : Oct 29 05:16:42 2026 GMT
        Subject: CN=6ae033bb-a683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:1b:7b:a9:0d:cf:81:16:d6:23:4f:92:1b:
                    5d:b4:f8:e6:4e:af:4d:e3:6c:fa:cf:d0:96:b7:97:
                    d7:87:ea:74:cd:4b:43:b1:16:21:85:bd:25:42:f9:
                    67:1d:a6:cf:b0:f3:82:1e:82:6a:50:7a:aa:7a:55:
                    78:a5:ea:c7:e6:21:60:64:ba:3d:48:1c:23:6e:4c:
                    15:95:64:2a:c0:09:51:eb:76:3d:8e:5e:96:98:6f:
                    36:13:43:a5:d2:20:fe:23:64:d7:8e:5b:67:fa:d2:
                    c5:33:28:5a:cd:a4:31:86:08:7b:7a:97:47:e6:fe:
                    d1:3e:45:bb:ca:8c:f4:28:a8:29:29:af:51:ec:55:
                    c8:cb:04:f7:24:a1:b8:14:77:aa:e2:6b:d6:61:71:
                    79:f3:18:58:f7:ce:45:6e:d1:1d:1d:b1:40:cc:ab:
                    82:ae:5b:24:e8:42:2f:1f:be:3e:9e:8e:2a:93:39:
                    8b:42:4c:51:24:8f:54:9b:c2:b2:6e:58:5f:ce:fb:
                    09:41:c0:d9:fe:a8:99:63:1c:de:68:db:12:53:e8:
                    22:c4:2e:8d:a8:aa:e1:d4:ab:02:1f:34:66:80:67:
                    81:3d:90:cc:c8:2a:e1:09:37:52:76:a8:c9:cf:a7:
                    35:ee:2c:ed:a1:86:44:d0:8a:07:c0:51:96:d7:79:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:78:E9:41:0B:DB:89:2C:52:AE:B5:38:A0:60:7F:0C:E8:1A:0E:C1
            X509v3 Authority Key Identifier:
                keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:51:96:58:8c:dd:68:9a:6f:71:b7:e9:2c:22:8b:88:5b:4a:
         0e:78:98:0d:67:d3:8d:12:13:24:13:3a:d3:4f:49:f0:24:7f:
         ee:dd:ed:e7:87:e7:22:74:33:33:8a:76:53:02:71:ab:ed:13:
         4b:45:e2:46:c2:0b:ba:a9:f7:eb:3a:1c:2d:30:19:22:81:4b:
         ba:8b:a2:2a:71:8d:4c:2a:db:7e:a9:36:68:cc:2a:38:e7:bb:
         90:ea:a7:d3:3e:bb:62:30:6b:67:cb:43:6a:29:e7:07:6a:81:
         79:8b:4f:2d:93:47:b5:32:a5:9c:85:99:8b:bb:28:97:7a:31:
         7f:7d:da:0d:95:c6:24:c4:05:d3:81:13:aa:b2:9e:40:a8:e1:
         b8:d6:08:00:4c:6d:4f:36:18:0e:78:12:cb:10:55:61:7a:1f:
         52:2b:7a:d5:96:7b:e6:54:8d:63:06:d3:8d:51:25:2c:d8:05:
         d5:67:36:ef:37:15:6c:56:39:41:b6:20:26:9b:8f:8a:d5:3e:
         68:b0:dd:90:d3:43:76:c7:2a:b5:eb:a9:65:b7:29:a2:75:05:
         52:45:60:fb:78:b4:83:e1:dc:3c:9e:53:aa:ac:68:3a:5c:54:
         5a:bc:73:dd:19:01:77:71:d8:f0:43:3f:a7:dd:5a:a1:17:0f:
         f0:c1:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:16:49 2026 by rpki-client