Error: rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
File:                     -vPHS9tBaK0Umzg5f1vk--Qjx1I.mft (raw, json)
Hash identifier:          g5wFxWuVGLuwqGC3CazvOtQYIwjunDBzIPivan71mBk=
Subject key identifier:   7D:2B:0A:4C:A7:F9:77:B1:58:4D:C8:27:19:74:6A:95:45:BF:5B:38
Authority key identifier: FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52
Certificate issuer:       /CN=F36BDAEAAF/serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
Certificate serial:       6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
Manifest number:          6B
Signing time:             Wed 07 Oct 2026 05:40:43 +0000
Manifest this update:     Wed 07 Oct 2026 05:40:42 +0000
Manifest next update:     Fri 09 Oct 2026 05:40:42 +0000
Files and hashes:         1: -vPHS9tBaK0Umzg5f1vk--Qjx1I.crl (hash: HTBI3McFlQzVYvYRTHPvp1R1A+XlU7L7IC8N/CEGNCo=)
                          2: A166CB0A6FB511F1A388A7EBCE1D38B0.roa (hash: N2A8A30zOOL02+LkqB3kmhadKKBzgndfImHLlNc0+Fg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 05:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDAEAAF, serialNumber=FAF3C74BDB4168AD149B38397F5BE4FBE423C752
        Validity
            Not Before: Oct  7 05:40:42 2026 GMT
            Not After : Oct  9 05:40:42 2026 GMT
        Subject: CN=6ac5db5b-ff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:6d:25:c3:7d:75:b2:11:d6:ea:52:c8:ac:
                    9b:78:87:64:44:3a:e6:e9:0a:50:d9:9d:cb:c4:b4:
                    32:1d:28:9e:12:46:07:9b:7b:a4:b8:a8:76:c4:30:
                    67:cd:ce:66:8f:49:3b:67:c3:4f:3d:2c:06:e9:80:
                    4c:61:f3:96:46:ed:cb:07:da:5e:6f:6e:a7:45:6c:
                    4e:61:1a:f2:b7:e2:ba:f8:87:7a:98:83:1f:32:c3:
                    62:d3:02:ee:e6:5f:cd:4e:e4:91:2a:1d:b1:ed:1d:
                    ef:d0:46:37:ca:80:e9:a4:ef:81:02:80:bc:5b:f1:
                    87:68:78:bd:70:8e:b6:6e:b7:78:c6:8f:96:e5:4b:
                    cb:96:6e:d3:ca:9e:8e:3d:48:4b:29:88:11:cc:fa:
                    5b:35:56:3b:33:c5:62:85:cb:6c:c7:00:1e:b3:a9:
                    56:02:47:a4:01:e4:9a:ca:82:31:29:5c:a5:54:54:
                    9f:e4:71:9a:7c:ee:78:a0:87:5c:fb:86:b0:14:5e:
                    0b:00:1d:f5:f2:02:f5:7d:f4:e4:83:ae:f3:66:b5:
                    7d:3e:49:25:91:c5:00:b9:6a:cb:e5:51:d5:01:0c:
                    79:11:f4:ab:cd:b9:b5:d1:3b:3c:64:32:e6:7d:53:
                    24:fe:16:b9:0e:3c:fa:11:a1:83:df:f6:81:0b:7c:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2B:0A:4C:A7:F9:77:B1:58:4D:C8:27:19:74:6A:95:45:BF:5B:38
            X509v3 Authority Key Identifier:
                keyid:FA:F3:C7:4B:DB:41:68:AD:14:9B:38:39:7F:5B:E4:FB:E4:23:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-vPHS9tBaK0Umzg5f1vk--Qjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDAEA/3A4FB8506FB511F18C381DEBCE1D38B0/-vPHS9tBaK0Umzg5f1vk--Qjx1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:a4:22:49:3f:42:38:ba:c0:b5:ef:df:f2:27:13:42:bb:
         28:bc:28:ac:4f:5d:9b:b5:2d:38:48:2d:16:ab:1c:93:d8:34:
         f3:a2:64:e9:20:d8:61:4a:f5:d5:8f:29:ef:ba:08:c1:67:1f:
         55:9f:99:c7:eb:3b:85:f7:aa:91:ce:6e:30:2a:2a:67:2b:a6:
         d4:26:95:0a:7b:b2:42:46:16:60:30:73:a7:27:d6:2f:53:e7:
         4e:8e:dc:22:0a:c6:7e:48:8d:49:ae:c9:41:aa:82:e3:af:09:
         43:a4:cd:f3:dc:c2:d4:35:b9:54:fd:a2:27:c6:e0:6f:74:71:
         8f:7a:35:e1:f0:57:1f:81:99:8e:8b:4e:b4:23:58:de:79:8a:
         47:52:ce:16:21:8a:7f:84:82:15:b6:2e:de:dd:ad:6b:dd:62:
         d3:31:3b:eb:0b:12:3c:5e:e9:4c:54:97:5e:72:8c:7b:0f:95:
         bc:19:c2:d0:98:76:af:fd:41:ff:aa:9b:bd:2c:27:3e:c7:f2:
         23:70:45:a3:64:15:72:4c:86:0c:15:42:5e:12:6a:74:b8:05:
         d3:f8:e8:57:e0:0d:88:b8:e6:a9:a7:db:53:b2:f6:fd:25:a1:
         5a:ac:7d:08:ec:bf:7a:24:07:31:74:23:03:9b:b9:a4:e0:d0:
         9f:5e:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:11:39 2026 by rpki-client