Error: rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
File:                     wDt4YuRBsALhCei7e6wo-u2Xl08.mft (raw, json)
Hash identifier:          Edjrf1wKQt/wZGCQia1fZarTOrISkkQ9S5QXmhJIhio=
Subject key identifier:   26:9B:02:BB:68:BC:B8:6A:5B:0D:16:2F:3F:ED:B1:B4:6F:B5:15:DA
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Certificate issuer:       /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
Manifest number:          011F
Signing time:             Thu 10 Sep 2026 05:16:29 +0000
Manifest this update:     Thu 10 Sep 2026 05:16:28 +0000
Manifest next update:     Sat 12 Sep 2026 05:16:28 +0000
Files and hashes:         1: wDt4YuRBsALhCei7e6wo-u2Xl08.crl (hash: 58Wl9SQhsgSANnu3/xmG9UsB3DyPLfu4XbGAM4xayuY=)
                          2: DF1CED12D34D11F0892777B8DAE4EC9C.roa (hash: EcsK7jgGBMaaU5wtWHw1QzuJCTHyH/dD6q1u0BVuqlc=)
                          3: 7CCA23FAD34D11F0BB2090B6DAE4EC9C.roa (hash: XXQHimowa2JlaS/8OUCL0YPsPPLWbYJaZwjqJoz96Zw=)
                          4: 519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (hash: nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=)
                          5: F0ECF5A6D34C11F08E295EB2DAE4EC9C.roa (hash: xVcrZDn6b7MOvm+miPVeDklIh1zbV7+bSkl6aHY5lSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                          rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
        Validity
            Not Before: Sep 10 05:16:28 2026 GMT
            Not After : Sep 12 05:16:28 2026 GMT
        Subject: CN=6aa23d2d-9f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:66:70:19:c0:3e:e8:97:c4:89:ed:af:ee:
                    51:4a:58:ef:b3:07:06:54:af:3c:35:55:38:b5:ec:
                    e8:2d:0f:a8:64:e4:a3:c9:8d:f5:b7:3d:ed:11:20:
                    75:3e:cb:07:c9:9f:c5:80:1f:4e:ae:22:65:a5:68:
                    c2:9f:49:09:e5:8d:10:2d:72:16:f1:f1:6a:ef:99:
                    3f:9f:83:d4:da:de:82:a1:ef:9f:21:14:0d:f3:c7:
                    ee:ca:5a:0d:8d:c4:cf:a4:bd:57:24:27:55:0d:3d:
                    ca:e8:77:b2:ef:d6:dc:0b:c1:ca:f0:ca:4d:b1:65:
                    07:7d:11:5c:64:c0:53:ab:8e:1f:53:26:47:e4:28:
                    2c:68:9a:e9:f8:5c:5d:54:5e:3d:60:b0:0d:95:b2:
                    37:82:01:9c:ef:f2:0e:eb:46:db:a9:5a:7c:05:9a:
                    3b:64:e3:4a:7d:f7:24:be:f6:a5:38:24:5f:c6:a0:
                    1a:1f:56:9e:c3:99:a5:cf:2c:01:bf:09:dd:93:f6:
                    5f:8b:b9:65:7c:d9:f0:5e:b4:a3:50:9f:5f:d4:13:
                    b9:49:25:43:56:3b:db:42:58:f9:df:3f:66:7a:95:
                    d8:22:d5:b5:5c:a3:38:c0:5a:2f:ab:10:92:ce:c5:
                    16:fc:4c:6f:95:3e:36:40:f2:b2:4c:38:87:07:df:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:02:BB:68:BC:B8:6A:5B:0D:16:2F:3F:ED:B1:B4:6F:B5:15:DA
            X509v3 Authority Key Identifier:
                keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:60:4b:ca:d5:e4:5b:5b:e4:5c:e7:8f:c0:e2:7c:33:a2:
         bf:fc:90:eb:f2:e6:af:aa:85:7b:59:57:10:f2:fd:d9:ac:5b:
         28:bf:13:85:07:f7:f0:b5:e8:7b:32:b7:76:de:a4:1d:09:00:
         6b:c4:0f:cd:2a:7f:6d:df:eb:14:1a:83:62:cb:f9:fe:19:4e:
         b7:51:24:f9:d7:b3:5d:03:71:01:bc:40:be:21:8b:34:74:8c:
         4b:50:51:e2:76:3d:93:d6:bd:eb:ee:f0:50:d7:9e:29:a5:9b:
         1e:f9:4f:a9:8a:ea:ee:42:22:39:7a:0f:54:39:9d:57:2c:27:
         23:06:15:90:ce:ea:30:0c:ac:d2:60:7f:a0:16:a7:dd:59:b9:
         2a:a2:c1:2b:c4:de:87:83:1a:6b:fc:0d:cd:e5:8a:28:0c:1f:
         e8:04:d1:5c:5f:38:ee:ce:e3:0e:a1:20:96:36:b7:b3:09:7c:
         4b:b4:ec:a9:a8:61:32:f0:c2:f9:5e:40:a3:40:9a:b9:16:54:
         31:ae:9d:e0:52:96:73:4d:d7:57:04:3b:93:ae:73:ea:f0:b7:
         2e:aa:a7:e0:53:73:22:55:0a:30:f9:e5:a7:fb:5d:ec:d5:11:
         ad:24:aa:c5:00:b8:18:65:a7:fa:e0:dc:9a:25:12:35:69:d0:
         f3:e8:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:18 2026 by rpki-client