Error: rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
File:                     uHhAHkl1TlCh8pefEijlQVr3hcs.mft (raw, json)
Hash identifier:          rG9XcYdrjMSWOi3CES0R9DEiEnBD91kRhNpeSbAbKLk=
Subject key identifier:   DA:BF:EB:A0:D8:9E:43:72:E4:E1:E3:C4:EE:CD:00:C3:D9:87:4A:F2
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Certificate issuer:       /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial:       028B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
Manifest number:          0289
Signing time:             Sat 24 Oct 2026 04:46:01 +0000
Manifest this update:     Sat 24 Oct 2026 04:46:00 +0000
Manifest next update:     Mon 26 Oct 2026 04:46:00 +0000
Files and hashes:         1: uHhAHkl1TlCh8pefEijlQVr3hcs.crl (hash: QO2K7IzQVwURF4ItLHWX5cEdXeH58kqLWU36QiNp5uw=)
                          2: D378C19EDB2C11EF97120DAA762E951A.roa (hash: XvBxie++FSr21ud0Lfttnl+zogzSereMyWWkFD2zdWI=)
                          3: 7E8F4432DB2C11EFB85EEEA5762E951A.roa (hash: 0iUpszT2w0fm3mXYVrua9cWk6MIv4HV5O6NkTkk5EUY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D06FDAF, serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
        Validity
            Not Before: Oct 24 04:46:00 2026 GMT
            Not After : Oct 26 04:46:00 2026 GMT
        Subject: CN=6adc3809-36d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:a5:cc:76:e7:84:b5:0a:34:d4:5c:28:bc:
                    b2:2b:df:00:d9:b8:6e:a4:68:83:e8:e2:4a:81:b8:
                    93:58:ae:02:e0:3d:a8:5c:e4:73:1d:8e:28:a6:67:
                    a3:f3:53:76:b4:18:a2:ff:59:2f:f8:27:7e:6d:65:
                    ad:01:f2:c7:92:2f:c0:ea:aa:47:88:0e:98:54:9b:
                    45:a0:7b:1d:ec:f9:4f:f1:40:df:64:5d:3b:70:48:
                    66:75:c4:9d:57:f8:10:7d:a6:71:2f:70:eb:27:d7:
                    80:b0:82:94:bf:72:f0:d9:8d:d7:6b:19:fc:c8:a4:
                    83:f6:49:88:2d:1a:5f:d9:19:f7:c8:45:f4:b0:03:
                    92:61:76:d2:17:a6:bf:d3:c7:22:e3:9f:e2:2e:3f:
                    82:c6:ae:f9:e6:3f:ea:47:77:b3:40:ca:3b:58:e3:
                    3b:40:ea:7e:e3:f0:f1:2e:48:98:1d:27:ba:09:c9:
                    48:db:3c:ce:bd:20:c1:01:9c:5b:3d:8d:8c:ae:0b:
                    aa:85:cb:5e:1e:15:66:65:08:a3:04:f8:e1:2e:05:
                    c4:e9:36:05:d7:b3:be:ad:b0:bb:01:90:6f:6a:8a:
                    40:5a:56:62:a8:a3:d7:00:e9:31:2f:2a:fe:b8:99:
                    85:66:9a:bc:33:f2:72:23:d7:4a:87:d9:ec:d4:34:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:EB:A0:D8:9E:43:72:E4:E1:E3:C4:EE:CD:00:C3:D9:87:4A:F2
            X509v3 Authority Key Identifier:
                keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:54:12:1d:f3:12:6e:09:97:05:1a:e1:cd:c7:a1:f0:90:cb:
         d0:15:73:8b:a8:86:fc:7a:6d:d1:51:18:23:db:28:47:fc:df:
         7d:00:62:3b:20:c5:07:51:12:e6:7e:15:73:62:20:d4:d5:02:
         fd:07:07:30:24:65:02:bb:7b:8f:ab:c6:75:ef:8d:ad:8b:d0:
         7f:01:cc:23:75:c9:2a:1f:2f:6f:d7:a7:5a:eb:fc:0d:10:27:
         9b:3d:58:82:ff:4c:b2:c5:a6:e3:0d:b6:9e:3e:13:9b:ff:ec:
         1c:a0:11:dc:bd:1f:fd:ad:84:41:c9:19:29:97:fd:fb:fe:c3:
         2b:df:cd:ba:60:b6:96:7e:a2:3b:45:9c:b2:a5:f6:d2:15:b7:
         7c:62:5d:ad:3b:41:84:96:27:08:5f:bc:8e:b6:f8:e2:d5:1d:
         a2:7e:93:40:3f:3d:0c:9f:ae:15:9d:3c:39:98:09:9a:28:13:
         ce:b8:e4:21:4f:2d:4e:fb:f9:8d:be:61:a0:49:de:62:84:c3:
         60:e1:eb:b5:27:63:92:01:12:00:1c:1d:ef:eb:d5:d1:f4:5f:
         32:bb:66:bc:4c:8b:f8:54:20:1c:29:e8:bf:1e:dd:06:3e:0c:
         44:84:be:9d:1c:eb:fa:f8:38:c6:51:f2:a9:53:55:e3:81:38:
         ff:82:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:54:49 2026 by rpki-client