Error: rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          M5JceFDCT2iLH17ac2I5omWxH/iFpc/Q9Fcm1PgjCHw=
Subject key identifier:   AE:C0:70:97:4C:4C:4E:F7:29:D2:A1:68:C8:C4:6B:12:0E:4B:1B:E8
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          DC
Signing time:             Sat 24 Oct 2026 05:32:18 +0000
Manifest this update:     Sat 24 Oct 2026 05:32:18 +0000
Manifest next update:     Mon 26 Oct 2026 05:32:18 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: DtwMCT1HQN+MEPh+pByF0nTHoEAhfu0CZpIyOMjm3sY=)
                          2: 924CE9226B0C11F1BDC870D7CE1D38B0.roa (hash: XU+yo9KfYUkFLBQDwyQRQQAYJyKWLNTrj3wgPnpGVIY=)
                          3: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: Oct 24 05:32:18 2026 GMT
            Not After : Oct 26 05:32:18 2026 GMT
        Subject: CN=6adc42e2-deeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:62:29:13:e6:ca:d4:76:8f:b7:c8:12:9b:
                    dc:77:31:db:73:11:64:28:e7:96:c2:55:0d:37:53:
                    10:5b:14:a9:04:6c:15:3b:50:ee:e7:98:87:9a:8d:
                    6c:5a:bb:b3:67:e5:f0:a9:f9:25:55:27:83:07:47:
                    b4:85:c2:5e:f8:97:4c:a8:55:2f:a2:f3:1e:02:b7:
                    cc:ff:87:24:86:04:7a:ee:b5:b1:ca:2c:d3:41:ea:
                    84:00:5b:c3:d4:c9:8a:24:9f:40:c0:be:f2:2c:5a:
                    d0:ae:7e:c8:dc:a2:5a:3a:8b:51:55:b3:88:ce:d2:
                    ce:74:37:44:55:03:56:08:63:29:d1:c6:ef:e1:32:
                    12:ca:24:72:be:dc:2a:62:2e:6f:93:15:21:35:9e:
                    5d:7a:e8:f1:65:a1:8b:95:ae:4d:07:8a:6f:9e:4f:
                    f5:63:4a:d8:5f:be:57:e6:58:5d:6c:e3:3d:d4:9e:
                    76:6e:7a:78:6c:ce:7a:e9:78:c2:2f:73:20:40:72:
                    97:eb:ea:0c:44:51:a7:2e:7c:a4:5f:47:bd:c3:21:
                    5e:d7:81:d3:67:aa:55:27:95:f9:89:c7:2a:7e:86:
                    a3:44:e5:b0:ea:97:06:53:2b:96:72:cd:77:42:34:
                    15:92:35:94:6d:ef:57:1a:79:32:b0:f5:06:37:25:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C0:70:97:4C:4C:4E:F7:29:D2:A1:68:C8:C4:6B:12:0E:4B:1B:E8
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:57:be:38:a2:66:5f:73:aa:87:a5:f9:91:61:11:db:78:
         65:ac:6b:31:74:80:b2:cf:50:1c:c5:2d:05:c4:d0:f4:55:a3:
         c6:a1:c0:26:a1:56:d0:4f:48:0b:00:8e:95:bd:12:bd:12:74:
         68:0f:66:df:77:6d:6d:ec:ca:74:09:6e:c1:83:ac:5c:61:ab:
         25:71:5b:c4:93:09:a0:ee:88:b6:28:52:4c:fd:a3:dc:0a:f1:
         a1:41:ae:5f:ce:a7:73:b7:2e:bf:7d:6e:b8:f5:08:a2:c5:93:
         d9:1b:76:09:32:56:2c:e4:71:7e:ab:6c:87:04:10:92:50:75:
         5c:77:f4:49:e5:7f:13:0e:ef:f6:bf:22:7e:28:04:65:c2:4d:
         00:99:33:6c:d7:8f:e6:b3:e5:30:7b:a6:7d:06:27:3d:77:1d:
         3a:83:8c:91:a2:99:59:b9:f8:7d:4e:68:0c:b4:12:86:af:7a:
         ff:8f:fc:c4:55:46:b8:aa:ec:1b:a2:07:27:7c:41:2e:e9:af:
         37:da:f6:0c:19:2d:2f:4f:6b:4b:0f:31:e5:df:e1:ff:e3:9d:
         05:b5:19:d4:b3:77:21:80:8a:17:ff:c9:78:ab:e4:eb:b0:f8:
         c8:69:18:5a:df:cf:a8:b0:a4:eb:84:45:73:07:3e:0a:7d:c4:
         de:4f:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:30:36 2026 by rpki-client