Error: rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft
File:                     wgVf2amYMgZZkHGKhR9WbWAKXY0.mft (raw, json)
Hash identifier:          IAdhtQcu8mDP1Sbwy3kQHZNrVaxpulZV1A9lMUTqldo=
Subject key identifier:   53:F9:99:82:97:F6:68:59:8E:44:20:F6:E0:72:8D:4F:0C:59:BF:D9
Authority key identifier: C2:05:5F:D9:A9:98:32:06:59:90:71:8A:85:1F:56:6D:60:0A:5D:8D
Certificate issuer:       /CN=F36BA40DAF/serialNumber=C2055FD9A99832065990718A851F566D600A5D8D
Certificate serial:       7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft
Manifest number:          7E
Signing time:             Mon 26 Oct 2026 05:44:06 +0000
Manifest this update:     Mon 26 Oct 2026 05:44:05 +0000
Manifest next update:     Wed 28 Oct 2026 05:44:05 +0000
Files and hashes:         1: wgVf2amYMgZZkHGKhR9WbWAKXY0.crl (hash: quzuDxNhnyHlB7kONHIb+2m2/zSOwiXjwfM2y+upEfA=)
                          2: AB53FD206FDF11F1B08E87E6CE1D38B0.roa (hash: 3qSRiPmyCXzBhWdhitVm9T1Z9vWBcEKL5i2kWihFTvA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA40DAF, serialNumber=C2055FD9A99832065990718A851F566D600A5D8D
        Validity
            Not Before: Oct 26 05:44:05 2026 GMT
            Not After : Oct 28 05:44:05 2026 GMT
        Subject: CN=6adee8a6-2c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:2c:de:d5:f1:e8:f5:6e:48:6e:c5:25:a2:
                    f3:5f:c0:3b:6b:80:59:fa:cd:2c:3d:96:b5:7b:28:
                    49:ee:a9:68:d1:63:b5:e1:65:6e:ef:c2:50:c5:f7:
                    fe:9d:81:3b:49:22:f4:07:c2:6d:d4:15:f9:29:3e:
                    03:35:4f:fa:a4:ba:42:3e:24:a5:fe:3e:d7:ba:1a:
                    eb:81:1e:7f:cf:ba:50:64:ed:2a:a8:b9:84:be:ff:
                    a8:d4:1c:d0:01:e1:3a:15:73:cc:8f:ba:87:c5:a1:
                    ad:3a:04:cb:d8:67:ba:eb:3b:c0:f2:88:b2:60:98:
                    2d:e6:45:88:9a:a7:30:b6:51:92:69:d2:03:53:c8:
                    2e:77:f1:15:df:53:fc:6b:6c:97:33:72:b4:b1:44:
                    cf:b1:20:71:24:1e:3c:d5:a4:50:ce:70:50:98:ee:
                    9f:1f:12:4c:8a:21:5c:15:30:d6:66:5d:3a:9b:44:
                    d3:56:79:cd:5a:6f:ee:09:f8:23:00:c1:c8:21:8d:
                    7e:0d:92:5f:87:c9:eb:e2:9b:ef:b8:33:93:a2:e2:
                    cf:fd:59:c6:79:45:a1:79:6d:fa:67:4c:fa:69:cc:
                    49:0b:9e:1d:29:a3:7a:02:7d:7f:56:ce:84:f0:df:
                    93:a1:c8:08:be:92:cc:38:8b:13:c2:74:23:a8:4d:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F9:99:82:97:F6:68:59:8E:44:20:F6:E0:72:8D:4F:0C:59:BF:D9
            X509v3 Authority Key Identifier:
                keyid:C2:05:5F:D9:A9:98:32:06:59:90:71:8A:85:1F:56:6D:60:0A:5D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wgVf2amYMgZZkHGKhR9WbWAKXY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA40D/A3787AA06FDE11F187B85AE0CE1D38B0/wgVf2amYMgZZkHGKhR9WbWAKXY0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2b:ce:d2:05:58:8d:b0:b2:7a:b3:ac:8c:02:cc:3a:a9:b5:
         11:f1:03:4d:9e:31:1c:64:cc:14:5c:a3:7e:18:73:1e:95:c9:
         5b:f3:b8:b8:eb:4d:36:50:92:11:c1:ab:53:4f:72:f2:51:80:
         24:24:76:90:c8:7d:5e:cf:d9:06:e4:18:0b:51:d4:b5:23:c6:
         4f:a8:06:fb:16:09:1e:bb:b2:26:42:6f:4f:be:9f:fe:ac:f8:
         74:c3:5b:42:a9:39:e0:a7:8e:7c:48:93:7a:93:c9:8a:db:4a:
         fc:e6:72:12:d4:9e:28:10:03:53:63:24:27:36:33:fe:38:fa:
         e8:4d:02:95:91:56:e1:b4:d4:a0:4f:00:91:59:bb:bd:37:cc:
         10:77:ca:ae:32:e8:18:17:f1:7e:3d:f5:a1:09:f5:45:af:38:
         27:89:2a:35:5f:29:c6:00:37:7d:ee:03:28:a5:c7:86:ec:11:
         47:85:04:50:b5:db:02:42:71:79:bb:c5:7a:92:3d:9e:07:78:
         ae:13:5f:4f:1a:ea:d9:8f:fe:f2:cf:cf:d6:1a:a7:61:11:39:
         7e:27:2f:b0:0e:ec:5a:82:3e:1f:2f:19:39:56:a4:c8:51:27:
         5c:e7:45:37:86:ca:11:87:c4:0a:08:32:09:94:73:1c:b9:0a:
         11:9c:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:15:45 2026 by rpki-client