Error: rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
File:                     pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft (raw, json)
Hash identifier:          PAqovy7+R3OoaJpNywh9BmZDyojUmPA32dzj/In7OFM=
Subject key identifier:   26:E8:B3:08:A4:10:0E:D0:9A:EE:0F:7E:F7:61:C5:03:9F:57:2C:19
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Certificate issuer:       /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial:       0176
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
Manifest number:          016E
Signing time:             Mon 26 Oct 2026 05:16:05 +0000
Manifest this update:     Mon 26 Oct 2026 05:16:04 +0000
Manifest next update:     Wed 28 Oct 2026 05:16:04 +0000
Files and hashes:         1: pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl (hash: FkZNES6wCQQHVyaAL6jy1zSlJWPM3ez7Ml5nD9m0lLU=)
                          2: 57F5D562066811F182A03BF2DAE4EC9C.roa (hash: H/dZ7GU4y3+0W4NbF4qfRfiPWKdEGrksIwpjjQKBLhc=)
                          3: 122D36EC066D11F18E1FF791DAE4EC9C.roa (hash: jtB1Hhv1HwpPRBPDwK5yT3PXgecLmuqLhxaUNyALYGE=)
                          4: 5D13438A066911F1AF7B9E7BDAE4EC9C.roa (hash: o3eibrTB3qklVAlPQvfUzdZj6M57IsoeiCH4IoymBO8=)
                          5: A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa (hash: mbg1nz27QWm2VugAeSuCncl+InKYGhLEQyQ7AG/9h3o=)
                          6: B312FDDE066911F1BDF62B7CDAE4EC9C.roa (hash: buD5JSkUfeJCoxOUevkIVwfQkCScIrrjXbWb3f7GhrE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
        Validity
            Not Before: Oct 26 05:16:04 2026 GMT
            Not After : Oct 28 05:16:04 2026 GMT
        Subject: CN=6adee215-7504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:e0:3d:9e:e4:ed:51:b2:0e:b6:43:e8:7b:
                    de:29:24:cc:de:86:83:59:03:58:23:61:98:d8:f7:
                    4f:0e:c1:51:22:d6:f5:14:0e:3a:2e:91:74:b4:a4:
                    22:08:3b:c3:3f:4e:bc:71:1a:92:e2:e7:d4:f2:d8:
                    e3:3e:3c:5c:a9:a9:1a:66:b0:cf:e8:75:08:a9:11:
                    4d:72:2c:b4:98:03:77:89:04:0c:c8:fd:75:b2:e2:
                    5a:67:93:bf:65:86:bc:bc:2c:00:71:2a:18:08:cf:
                    c0:6b:52:eb:70:27:c3:4a:ba:c7:1a:77:eb:f4:5e:
                    e9:91:b1:06:8f:9b:7c:82:36:8a:d0:cc:9b:83:8f:
                    de:3e:da:ef:81:5e:e4:3f:50:66:1d:53:b1:3e:2d:
                    a7:e5:ce:48:25:a7:d1:3f:76:fc:7a:3b:b3:a1:d9:
                    fb:96:16:d5:61:12:69:9d:98:9d:59:6b:fd:10:4e:
                    28:6f:c6:7d:6a:25:b5:b8:a6:65:c3:a1:6c:d7:39:
                    9d:e9:38:fa:a2:e4:dd:15:e6:d8:30:6b:52:ce:7f:
                    b6:84:ed:5f:a2:3b:d9:7c:98:b3:58:b0:c6:b5:dd:
                    b9:16:74:02:54:d1:76:95:79:40:31:9e:b1:10:a9:
                    bf:f4:a1:c1:25:49:4a:61:52:4a:84:89:47:60:88:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:B3:08:A4:10:0E:D0:9A:EE:0F:7E:F7:61:C5:03:9F:57:2C:19
            X509v3 Authority Key Identifier:
                keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:c6:cf:a0:9f:e4:a7:eb:03:4e:66:d1:a4:6c:b9:f1:e0:
         f1:76:f0:7d:c9:4a:df:ed:ed:23:0f:d4:ce:f5:54:21:0c:97:
         58:a4:c7:31:38:25:65:cb:49:00:a2:99:c2:a3:46:d9:ea:cb:
         b3:4c:12:68:b1:da:f6:88:81:e1:71:22:2c:0f:8e:c1:8c:62:
         d1:1a:9d:f7:1e:cb:9b:f8:8c:ca:aa:c2:62:e5:36:23:9c:ee:
         86:5e:b7:5f:f9:cd:d3:6d:61:3f:4b:34:a0:ed:a5:47:56:7f:
         34:64:00:3a:dd:62:9f:b2:ef:98:6f:c7:64:0d:db:13:db:8f:
         57:92:9e:5c:44:53:c5:cf:50:94:a9:2d:69:dd:5d:a5:6b:73:
         55:0f:33:87:04:c2:6b:04:e4:2b:31:90:09:96:0f:ac:e6:b6:
         46:42:96:d1:1e:c0:57:f4:ff:19:2e:67:f9:bd:0a:81:c0:fd:
         14:bd:d5:ef:f4:62:45:17:a5:db:54:40:bd:04:02:07:67:63:
         58:43:8f:16:b8:26:ce:61:77:25:69:04:43:38:90:50:c1:9f:
         58:dd:01:79:ae:3d:f3:8f:ec:63:46:d9:61:54:c2:5c:ab:8d:
         31:f9:1f:26:60:2b:35:46:c7:54:90:3b:51:aa:43:ad:04:ed:
         87:64:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:05:10 2026 by rpki-client