Error: rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft
File:                     ePD6sVueLwlLxgQhL4LzGmsqLRs.mft (raw, json)
Hash identifier:          q7/Mqx+dnWxzVFn1kSe+zXNDjiUqxnRQld91Emxfh8c=
Subject key identifier:   A8:FF:17:30:CB:DC:5E:89:3A:FF:4F:D5:85:46:BA:86:2B:22:62:B9
Authority key identifier: 78:F0:FA:B1:5B:9E:2F:09:4B:C6:04:21:2F:82:F3:1A:6B:2A:2D:1B
Certificate issuer:       /CN=F36D3290AF/serialNumber=78F0FAB15B9E2F094BC604212F82F31A6B2A2D1B
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft
Manifest number:          0138
Signing time:             Sun 25 Oct 2026 05:20:22 +0000
Manifest this update:     Sun 25 Oct 2026 05:20:21 +0000
Manifest next update:     Tue 27 Oct 2026 05:20:21 +0000
Files and hashes:         1: ePD6sVueLwlLxgQhL4LzGmsqLRs.crl (hash: pHL7hybN5NVAxu7kJq2DbUEY+3UYQrT15vMYpznAes8=)
                          2: 463B80F4E0A411F0812ABBDEDAE4EC9C.roa (hash: V2MGbWPUCYs9TXeB8wYR8RMWv42vQYtV3T/YgdQ8VGg=)
                          3: 2FB50770E0A311F0B3D54BD8DAE4EC9C.roa (hash: kLJPuxUduD0ZnQxiSu3uCXRQ0c8BRnVi43UrzvyNzsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3290AF, serialNumber=78F0FAB15B9E2F094BC604212F82F31A6B2A2D1B
        Validity
            Not Before: Oct 25 05:20:21 2026 GMT
            Not After : Oct 27 05:20:21 2026 GMT
        Subject: CN=6add9196-cb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:ed:2c:71:28:0c:da:eb:ed:b7:ab:b8:fd:
                    e6:0a:78:4e:ec:c6:ee:20:dc:ee:05:0f:1d:90:e8:
                    26:b4:91:23:41:78:2e:19:6d:96:2b:02:0e:74:5b:
                    9e:e4:12:ee:88:22:1b:8e:2a:06:e4:3c:c8:89:21:
                    73:f0:b2:e3:4b:96:94:45:64:d3:b7:97:d6:64:cb:
                    36:a5:f8:e9:fb:64:4d:e7:3f:0d:2b:8e:69:68:e3:
                    67:6f:b9:4e:68:b3:3c:aa:4b:ab:ae:b8:94:dc:e0:
                    21:2f:db:28:b0:37:ae:bc:02:b3:fa:ab:2b:90:73:
                    82:06:ef:8b:f5:5e:fa:41:2f:f6:68:1c:04:74:87:
                    8a:00:84:85:02:03:23:31:ac:72:d9:91:f7:8c:7d:
                    fd:5c:08:34:77:2a:f7:48:06:9e:41:d1:38:bc:97:
                    df:7f:7d:55:cc:72:91:09:b0:cf:66:70:36:a6:3e:
                    eb:d2:7b:6f:9e:1e:89:82:82:a3:71:9d:7e:ff:72:
                    c4:02:91:d8:14:a6:d5:b5:ab:9e:d1:06:d6:89:1e:
                    e5:00:5a:19:8d:8b:21:9e:fb:c8:f5:81:c3:e7:f4:
                    85:9a:9b:c8:cc:39:4d:b0:59:33:ec:36:c0:f2:bb:
                    04:f5:87:b4:8d:82:c2:5a:af:f9:8c:3a:db:15:f9:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:17:30:CB:DC:5E:89:3A:FF:4F:D5:85:46:BA:86:2B:22:62:B9
            X509v3 Authority Key Identifier:
                keyid:78:F0:FA:B1:5B:9E:2F:09:4B:C6:04:21:2F:82:F3:1A:6B:2A:2D:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bb:82:4b:5a:6d:fe:97:24:49:59:2f:df:34:48:f1:76:15:
         8b:25:46:c3:a1:29:88:f0:c5:15:31:0f:48:78:aa:62:99:e7:
         71:d1:9d:cb:12:fa:a7:ef:45:c6:91:23:27:c0:06:4d:05:9a:
         03:35:8a:00:5e:9e:1e:4c:29:a3:c3:b5:45:92:03:aa:29:91:
         fd:c5:bc:e7:4d:cb:24:ad:ff:e2:5b:70:05:b0:7a:39:59:38:
         9f:69:39:c5:ae:c0:ea:9e:1a:d1:49:ae:9f:ed:9a:06:af:de:
         07:b6:6b:be:e2:03:bf:59:73:86:28:0b:ed:c4:54:2f:c4:11:
         53:4e:de:1c:ab:91:a0:56:7d:1c:c4:f6:89:43:a5:c4:d4:85:
         38:dd:ea:52:2a:9f:54:d3:65:7c:2d:85:e8:70:72:8b:da:46:
         84:b6:b4:c6:36:03:75:75:37:29:71:d8:ae:f3:9a:65:f6:33:
         3f:aa:90:ca:a4:dc:c5:36:bf:e7:d2:69:5f:c3:de:73:95:27:
         cf:ae:ce:b6:68:68:b9:2d:5c:8c:e2:d6:25:41:27:15:d7:da:
         1e:26:f2:b6:b5:6a:c9:b7:65:7d:7f:e1:d8:78:3a:45:d8:a9:
         9b:4d:64:80:fd:33:7d:60:ef:d4:91:05:33:f4:7a:1d:70:a4:
         31:e1:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:48:21 2026 by rpki-client