Error: rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
File:                     -4Xgjl27Bclbe9Dafl_m_OOYJv8.mft (raw, json)
Hash identifier:          b4K28JdZjgUWIsZMWS8NPq4bRxpRBPZAjEia1tTGfiE=
Subject key identifier:   7B:79:3E:1A:F3:9A:7F:51:4F:26:B0:C9:01:B4:E6:74:09:FF:87:96
Authority key identifier: FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF
Certificate issuer:       /CN=F36C2BF2AF/serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
Certificate serial:       039E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
Manifest number:          0392
Signing time:             Tue 27 Oct 2026 04:11:01 +0000
Manifest this update:     Tue 27 Oct 2026 04:11:00 +0000
Manifest next update:     Thu 29 Oct 2026 04:11:00 +0000
Files and hashes:         1: -4Xgjl27Bclbe9Dafl_m_OOYJv8.crl (hash: X1Wivz3fdw+4GXz3QoD3CCwwJ/fUtT2A77ISH8uJyaI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AF, serialNumber=FB85E08E5DBB05C95B7BD0DA7E5FE6FCE39826FF
        Validity
            Not Before: Oct 27 04:11:00 2026 GMT
            Not After : Oct 29 04:11:00 2026 GMT
        Subject: CN=6ae02455-6e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:0f:be:af:60:af:69:c7:7e:f0:e6:25:f9:
                    3e:52:4a:d0:b1:a1:e0:71:37:86:43:c2:24:f2:e1:
                    b4:78:10:e0:a9:6e:10:64:23:59:82:2a:d8:41:18:
                    e8:cc:f8:fb:90:fb:49:2a:59:97:0f:c9:38:cd:9a:
                    ec:89:7a:ac:a9:ed:34:34:af:02:61:e9:dc:1b:55:
                    36:24:b6:3f:e2:e6:57:12:ed:fd:de:11:76:c5:1b:
                    b5:9a:d6:71:fc:5b:92:92:0f:84:36:29:06:05:9b:
                    0d:b5:8b:44:ae:c1:97:83:47:04:ac:f1:c9:3f:42:
                    67:a2:24:9f:46:33:bd:cb:de:29:26:f2:2c:88:42:
                    43:26:e9:af:e5:8c:c2:84:52:35:44:0b:0f:2b:8b:
                    42:6a:8d:80:d0:e2:59:33:1d:49:82:8f:ad:57:9e:
                    61:9e:42:3c:76:d7:3f:df:0f:01:a9:82:8a:b1:61:
                    8c:0c:51:5c:00:8e:c6:09:f2:c9:77:10:3b:f2:eb:
                    36:b5:74:82:17:a7:2d:31:5e:59:bb:98:c7:67:95:
                    25:3b:6a:5f:42:59:dc:d4:4f:f8:bb:7d:62:1e:48:
                    38:67:d7:ce:26:95:f8:bc:d2:ab:d1:fd:d5:3e:f6:
                    f3:41:74:01:a3:c3:71:e3:69:85:b7:fe:4a:45:9a:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:3E:1A:F3:9A:7F:51:4F:26:B0:C9:01:B4:E6:74:09:FF:87:96
            X509v3 Authority Key Identifier:
                keyid:FB:85:E0:8E:5D:BB:05:C9:5B:7B:D0:DA:7E:5F:E6:FC:E3:98:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-4Xgjl27Bclbe9Dafl_m_OOYJv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/DABAB87E19EC11EFBCBF5E2C017001B1/-4Xgjl27Bclbe9Dafl_m_OOYJv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:19:7c:fa:8d:c4:00:3a:a7:57:1b:17:d0:dc:c6:06:67:6a:
         fd:ed:cf:f2:81:93:3e:36:17:bd:66:27:53:06:12:6a:37:9a:
         08:4a:a1:7e:ca:dc:36:bf:42:89:ac:4c:8b:10:86:62:ee:07:
         34:1b:45:39:21:3c:75:da:97:09:91:1b:e4:f0:0e:8c:d6:10:
         60:4c:5f:b2:d7:10:77:21:b1:26:14:49:1a:5e:91:b2:fc:12:
         9e:5c:20:75:b6:51:99:fd:ed:68:35:a7:3c:e0:9e:a7:5c:11:
         82:8d:5f:16:b9:8c:1a:20:31:50:08:db:10:0c:d8:38:9d:c9:
         aa:a1:76:c6:10:ee:d6:4b:1f:20:53:41:62:ff:41:22:39:ea:
         4c:b4:c2:f1:7a:bd:6c:c7:1b:6a:97:c1:48:83:9d:d4:e9:d5:
         f2:10:77:f0:5a:79:f1:07:cd:53:5d:d5:01:93:35:54:f6:3c:
         e7:d1:79:bf:1c:a4:f9:8d:8f:9a:98:35:6a:16:66:6b:a6:ec:
         d4:0b:49:17:ec:26:52:cc:14:18:c6:2b:3d:36:da:68:7c:f9:
         50:78:59:c3:0b:55:2d:39:6f:8c:5d:ae:39:01:22:f2:04:22:
         98:be:45:ec:4b:44:44:4c:d8:c8:f1:80:85:19:44:46:6b:8d:
         11:e2:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:44:55 2026 by rpki-client